// Comparison

Network Security Through Data Analysis vs Tableaux de bord de la sécurité réseau: Which Should You Read?

Two cybersecurity books on Defensive, compared honestly: who each is for, what each does best, and which to read first.

Intermediate

4/52017

From Data to Action

Michael Collins

Michael Collins on building situational awareness from network telemetry: collection architecture, statistical baseline-setting, and the analytic patterns that turn raw flows into detection.

Advanced

3/52010

Tableaux de bord de la sécurité réseau

Cédric Llorens, Laurent Levier, Denis Valois

A practitioner's manual for measuring and steering network security — metrics, dashboards, monitoring and risk indicators — for the people who run security operations.

Read this if

Detection engineers and SOC analysts who've graduated from "what alert is this" to "is this alert worth triaging at all." Collins is the quantitative-detection text the field needed.

Network and security engineers, and security managers who need to instrument and report on security: what to measure, how to build dashboards, how to track risk over time.

Skip this if

Beginners with no NSM background, or readers who only do log-based detection. The book leans heavily on flow data and statistical thinking; pair with The Practice of Network Security Monitoring (Bejtlich) first if you're new to the discipline.

Readers wanting attacks or the latest cloud-native tooling; it's an operations-and-metrics book whose editions predate much of the modern stack.

Key takeaways

Detection engineering at scale is a statistical problem; the book teaches the framing every modern SOC eventually reinvents.
Flow-data analytics (NetFlow / IPFIX / sFlow) catch lateral movement that packet-based detection misses; the book is the cleanest treatment in print.
Time-series anomaly detection can be done well with off-the-shelf tooling and clear thinking; the chapters on baseline calibration are the practical core.

A rare French book focused on measuring security — metrics, indicators and dashboards, not exploits.
Written for security operations and management: how to make security legible to the organisation.
The principles of security measurement endure; check the specific tooling against current practice.

How they compare

We rate Network Security Through Data Analysis higher (4/5 against 3/5 for Tableaux de bord de la sécurité réseau). For most readers, that means Network Security Through Data Analysis is the primary pick and Tableaux de bord de la sécurité réseau is a useful follow-up.

Network Security Through Data Analysis is pitched at intermediate level. Tableaux de bord de la sécurité réseau is pitched at advanced level. Read the easier one first if you're not yet comfortable with the topic.

Network Security Through Data Analysis and Tableaux de bord de la sécurité réseau both cover Defensive, Networking, Detection, so reading them in sequence reinforces the same material from different angles.

Keep reading

Network Security Through Data Analysis

→ Alternatives to Network Security Through Data Analysis → What to read after Network Security Through Data Analysis