| Featured List | Simple List |
|
|
|
Go to bottom to see all images
Click image to enlarge
|
Securing Linux: A Survival Guide for Linux Security by David Koconis, Jim Murray, Jos Purvis, Darrin Wassom Average Customer Review:  Paperback (01 February, 2003) list price: $39.00 -- our price: $39.00 (price subject to change: see help) US | Canada | United Kingdom | Germany | France Reviews (4)
I would rank this as a book that is perfect for intermediate Unix admins but a colleague of mine without ANY Linux experience said she found this book to be a valuable resource in her steep learning curve. The book provides many examples of different configurations and provides great pointers to other resources if you want more information about a particular topic. All in all, I was VERY impressed with this book and I would consider it a "must have" for anyone interested in securing their Red Hat Linux installations.
The guide presents ultimate hands-on, indeed as step-by-step as they Its a pity that there is no way to cut and paste from the book and The book starts from a nice security policy primer and a summary of The range of advice is wide and covers everything from very basic While other books offer more breadth (such as coverage of many Moreover, even if you think you know _everything_ about Linux security Anton Chuvakin, Ph.D., GCIA, GCIH is a Senior Security Analyst with a Isbn: 097242735X |
$39.00 |
Linux Makes the World Load Faster
|
SANS GIAC Certification: Security Essentials Toolkit (GSEC) by Eric Cole, Mathew Newfield, John M. Millican, Stephen Northcutt, Matthew Newfield Average Customer Review:  Paperback (18 March, 2002) list price: $49.99 -- our price: $34.02 (price subject to change: see help) US | Canada | United Kingdom | Germany | France Editorial Review The best way to develop a working knowledge of anything is to actually work with it--see it work, see it fail, and see what happens when variables are adjusted. Under the guise of an exam-preparation aid, SANS GIAC Certification: Security Essentials Toolkit guides its readers through a series of carefully designed experiments that collectively illustrate how attackers go about breaking into (or just plain breaking) their targets. The authors assume little background knowledge on the reader's part and take care to show you what you need to do in order to see the effects they're trying to demonstrate. This is, above all, a laboratory manual, and the authors deserve kudos for their effort to ensure that you can reproduce their results. A highly graphical design and wide, lay-flat binding make this book all the more useful as a hands-on companion. The authors' dedication to standardization is evident from the first exercise (this book consists almost entirely of exercises), in which they show how to build a dual-boot system with both Linux and Windows 2000 installed. The idea is that you can build this system once, make an image of it, and then be able to repeatedly break and rebuild your system without wasting time. Subsequent exercises deal with different types of attacks and the defenses that are effective against each. Each exercise has an explicitly illustrated procedure--usually illustrating a successful attack and a failed one (i.e., one that was defended against). You learn not only to install defensive software and trust it, but also to recognize evidence of attacks in log files and in behavioral symptoms. More security books--and technical books in general--should be like this one. --David Wall Topics covered: The kinds of attacks--against Windows 2000 and Linux systems--that are covered on the SANS Institute's Global Information Assurance Certification (GIAC) exam, as well as the software tools and configuration strategies that you can use to protect your systems against them. The authors cover many attacks--including Trojans, host spoofs, and others--and many defensive weapons (like firewalls and intrusion detection systems). ... Read more Reviews (8)
Apart from the poor quality control of this book, it lacks good solid explanations to accompany most of them.Like many such exercise-oriented book the minimal level of explanations leaves one feeling that they are merely following a recipe in a cookbook. In summary, while the book offers something that is missing in the marketplace, it seems that is was rushed into print with little quality control.Unfortunately there are no errata sheets available from the publisher. ... Read more Isbn: 0789727749 |
$34.02 |
good book, but not always accurate
|
Hackers Beware: The Ultimate Guide to Network Security by Eric Cole Average Customer Review: Paperback (13 August, 2001) list price: $45.00 -- our price: $29.70 (price subject to change: see help) US | Canada | United Kingdom | Germany | France Editorial Review In Hackers Beware, Eric Cole succeeds in explaining how hackers break into computers, steal information, and deny services to machines' legitimate users. An intended side effect of his documentary efforts is a feeling for how network-connected computers should be configured for maximum resistance to attack. Cole, who works with the attack-monitoring SANS Institute as an instructor and security consultant, conveys to his readers specific knowledge of offensive and defensive weaponry as well as general familiarity with attack strategies and good security practices. Hackers Beware is a good primer and really earns its price by going into enough detail to enable readers to actually do something to make their resources safer. It also enables its readers to understand more specialized security texts, including Stephen Northcutt's fine Intrusion Signatures and Analysis. Cole's didactic style is largely conversational, embracing the fact that most computer exploits can be conveyed as stories about what hackers want and the steps they take to achieve their goals. He punctuates his prose passages with line drawings that clarify what gets passed among the machines involved in an attack, and pauses frequently to show programs' user interfaces and passages from their logs. Cole explains all the jargon he uses--a characteristic that alone distinguishes this book from many of its competitors. --David Wall Topics covered: What motivates black-hat hackers, and the technical means they use to go about satisfying their ambitions. General attack strategies--spoofing, password cracking, social engineering, and buffer overflows, among others--are explained, and the tools used to carry them out are catalogued. The same goes for defensive tools and practices. ... Read more Reviews (21)
Even better, if you are a business owner, and are worried about the security of your network (and believe me, you should be), then reading this book will give you the added advantage of being able to communicate intelligently with you network security personnel.Further, after having studied this accessible tome, you will be able to discern as to whether your networking people actually know what they are dealing with (sadly, some don't.You know 'em and I know 'em.Yes, I'm refering to the PAPER MCSE's).Being able to speak intelligently with your employees, and put your heads together in solving the formidible problem of network security, will be of limitless benefit to you. All in all, an understandable, mostly-in-plain-English book that will behoove all who read it.
Cole discusses exploits against Linux, UNIX, Windows, and Windows NT and the myriad of programs (password crackers, network sniffers, back door programs, etc.) designed to break into other people's systems. Each program is described in full and what it does. Cole also offers suggestions and solutions in various chapters to keep unauthorized users from accessing various systems. While you will never be 100% safe from an "attack," Cole's book offers ways to keep your system from being attacked or ensure that the chances of it actually happening remain remote, or the "damage" from such attacks stays minimal. ... Read more Isbn: 0735710090 |
$29.70 |
|
Inside Network Perimeter Security: The Definitive Guide to Firewalls, Virtual Private Networks (VPNs), Routers, and Intrusion Detection Systems by Stephen Northcutt, Lenny Zeltser, Scott Winters, Karen Fredrick, Ronald W. Ritchey Average Customer Review: Paperback (28 June, 2002) list price: $49.99 -- our price: $34.99 (price subject to change: see help) US | Canada | United Kingdom | Germany | France Editorial Review Submarines handle awkwardly on the surface of the sea; airplanes are cumbersome when taxiing. Both modes of operation, however, are design requirements. Organizational computer networks have a similar requirement: they have to interface with other networks (thereby forming the Internet) in order to be useful. How network engineers manage their networks' perimeters has a lot to do with their usefulness, cost effectiveness, and--perhaps above all--security. Inside Network Perimeter Security concerns itself with this latter aspect of the connection to the outside world. It's carefully researched, cleverly written, and full of references to recent exploits and, more importantly, the trends they represent. The best details on emerging hack attacks will always be found online. This book takes a longer view, evaluating offensive and defensive technologies and offering well-reasoned advice on how to keep a network secure now and in the future. Readers familiar with the previous work of the authors--particularly the highly respected Stephen Northcutt--will recognize the style here. It doesn't aim to teach you how to do much in particular--there are a few procedures, and some Cisco Internetwork Operating System (IOS) command listings--but rather tries to show how to think about networks and the data that comes from them. In a typical section, the authors analyze a log from Tiny Personal Firewall. They highlight the facts that are present in the log and the inferences that can be made from them. A similar style helps you master software tools and make network design decisions. This book is perfect for a network engineer wanting to improve his or her security skills for both design and administration purposes. --David Wall Topics covered: How to design networks' borders for maximum security, and how to monitor them for unauthorized activity. After an introduction to firewalls, packet filtering, and access lists, the authors explain how to set up routers, special-purpose firewalls, and general-purpose hosts with security in mind. A large section has to do with security-conscious design, both for green field projects and existing networks that need expansion or improvement. ... Read more Reviews (16)
Isbn: 0735712328 |
$34.99 |
|
Network Intrusion Detection (3rd Edition) by Stephen Northcutt, Judy Novak Average Customer Review: Paperback (27 August, 2002) list price: $45.00 -- our price: $31.50 (price subject to change: see help) US | Canada | United Kingdom | Germany | France Editorial Review Network Intrusion Detection: An Analyst's Handbook explains some of what you need to know to prevent unauthorized accesses of your networked computers and minimize the damage intruders can do. It emphasizes, though, proven techniques for recognizing attacks while they're underway. Without placing too much emphasis (or blame, for that matter) on any operating system or other software product, author Stephen Northcutt explains ways to spot suspicious behavior and deal with it, both automatically and manually. The case studies, large and small, are the best part of this book. Northcutt opens with a technical brief on the methods used by Kevin Mitnick in his attack upon Tsutomu Shimomura's server. In documenting that famous attack, Northcutt explains SYN flooding and TCP hijacking with clarity and detail: readers get a precise picture of what Mitnick did and how Shimomura's machine reacted. A former security expert for the U.S. Department of Defense, Northcutt explains how a system administrator would detect and defeat an attack like Mitnick's. Another case study appears later in the book, this one in the form of a line-by-line analysis of a .history file that shows how a bad guy with root privileges attacked a Domain Name System (DNS) server. Reading Northcutt's analysis is like reading a play-by-play account of a football match. Network Intrusion Detection is one of the most readable technical books around. --David Wall Topics covered: Catching intruders in the act by recognizing the characteristics of various kinds of attacks in real time, both manually and with the use of filters and other automated systems; techniques for identifying security weaknesses and minimizing false security alarms. ... Read more Reviews (40)
Isbn: 0735712654 |
$31.50 |
|
Intrusion Signatures and Analysis by Mark Cooper, Stephen Northcutt, Matt Fearnow, Karen Frederick Average Customer Review: Paperback (29 January, 2001) list price: $39.99 -- our price: $27.99 (price subject to change: see help) US | Canada | United Kingdom | Germany | France Editorial Review Stephen Northcutt and his coauthors note in the superb Intrusion Signatures and Analysis that there's really no such thing as an attack that's never been seen before. The book documents scores of attacks on systems of all kinds, showing exactly what security administrators should look for in their logs and commenting on attackers' every significant command. This is largely a taxonomy of hacker strategies and the tools used to implement them. As such, it's an essential tool for people who want to take a scientific, targeted approach to defending information systems. It's also a great resource for security experts who want to earn their Certified Intrusion Analyst ratings from the Global Incident Analysis Center (GIAC)--it's organized, in part, around that objective. The book typically introduces an attack strategy with a real-life trace--usually attributed to a real administrator--from TCPdump, Snort, or some sort of firewall (the trace's source is always indicated). The trace indicates what is happening (i.e., what weakness the attacker is trying to exploit) and the severity of the attack (using a standard metric that takes into account the value of the target, the attack's potential to do damage, and the defenses arrayed against the attack). The attack documentation concludes with recommendations on how defenses could have been made stronger. These pages are great opportunities to learn how to read traces and take steps to strengthen your systems' defenses. The book admirably argues that security administrators should take some responsibility for the greater good of the Internet by, for example, using egress filtering to prevent people inside their networks from spoofing their source address (thus defending other networks from their own users' malice). The authors (and the community of white-hat security specialists that they represent) have done and continue to do a valuable service to all Internet users. Supplement this book with Northcutt's excellent Network Intrusion Detection, which takes a more general approach to log analysis and is less focused on specific attack signatures. --David Wall Topics covered:
Reviews (8)
Chapter 1 introduces the reader to Analysis of Logs (including Snort, Tcpdump, and Syslog), IDS, and Firewalls. Even being a quick review, it is quite useful, though. The covered vulnerabilities and attacks include: At the bottom line, this is one of the 5 best computer security books I ever read. Even for non experts, the book can be a valuable tool to improve the understanding on this field.
It's great to learn intrusion detection, packet analysis, forensics, attack methodologies, attack recognition, and similar topics. And oh, by the way, if you have any interest at all in certification, Intrusion Signatures and Analysis is the study guide for one of the hottest new certs there is: SANS GIAC Intrusion Detection In Depth.
Isbn: 0735710635 |
$27.99 |
| 1-6 of 6 1 |
Questions on ordering or shipping? click here for help.
| Books - Computers & Internet - Certification Central - Great Information Security Books!! (images) |
| Images - 1-6 of 6 1 |
      |
| Images - 1-6 of 6 1 |