The authors - a pair of expert incident response is achieved, not just researchers - have been converted to book form their accumulated wisdom on the question of how to respond to attacks on computer systems. Explicit technical material that does not appear here is well balanced between Windows and Unix systems, and clearly explain the details of a network of interest to security people and their managers. An explanation of how the port cover can make the switch works like a hub for the purpose of monitoring package - almost all prose - is one example of high-quality technical coverage that will remain valuable as the operating system and other network details change over time. Unlike many books about computers, this one is worthy to be read cover to cover Wall. - David Topics covered: How an organization should react - organizationally, technically, legal, and in terms of public relations - to incidents of unauthorized access (originating both internally and externally) for computer systems.