A grand compilation of tidbits on Internet security. Lists many system- and version-specific vulnerabilities, along with attacks, attack tools and countermeasures. Easy reading (if somewhat verbose) as introductory material but technically too superficial to be used as a reference. It nevertheless provides a wealth of bibliographic pointers and covers Windows as well as Unix. The Macintosh occasionally gets a token mention but is not treated in any detail. Wide rather than deep ("the children's---or maybe the journalists'---encyclopedia of Internet security"), it does contain some nuggets but on the whole there are more useful books on the subject. Because of the way the book is arranged, with emphasis on specific holes and attacks rather than general principles, it will quickly become outdated.
NB: this review refers to the 1997 edition and the core of it was originally written in 1999. I have not read any of the subsequent editions.

The main problem with this book is that it's essentially a series of links to tools. Tools are known to age quickly, and what was a useful took a month ago is now obsolete. By being too tool heavy the book lends itself to the same problem - it quickly becomes dated and useless. Compare this for example to some other textbooks which delve into the underlying principles of crypto, networking, operating systems, etc., and you'll see that this is not a necessary evil.

This book will give a LOT of information about all kinds of networking protocols, Operating Systems, and hardware from the security standpoint. However, it is way too theoretic. There are vurtually no real life examples, no code listings. This may or may not actually be a drawback, because some poeple do not want code in the text they are reading. Well, then this book is for beginners. Either way it does not deserve MY five stars.

There is no task more daunting than one that is fundamentally impossible, extensive and yet necessary. Computer security is like that, as the only secure computer is one that is disconnected from all power sources. The moment it is powered up in a mode that allows useful work to be done, it becomes vulnerable. Furthermore, the number of ways it is vulnerable is effectively infinite, meaning that the number is so large and complex, that it is not possible to handle them all. Finally, it is necessary, as the world is full of a large number of people whose sole purpose in life seems to be to cause as much damage and frustration as they possibly can. Therefore, there is no choice but to apply as many security features as possible to all our computer systems.
This book is an overview of the primary aspects of computer security. Split up into the six broad categories: security concepts, hacking 101, a defender's toolkit, weapons of mass destruction, architecture, platforms and security; and security and integrated services, there is also an extensive bibliography of websites, books and software. If you are interested in an overview of computer security, then this book will provide it.
However, the main value that I get from the book is from the links to more detailed information. I recently taught a special topics course in computer security and I found it invaluable in tracking down detailed information concerning topics such as specific types of distributed denial of service attacks, steganography, password cracking dictionaries and communication protocols. The encyclopedia form of the book makes it very valuable as a primary initial reference.
Useful as an overview for people seeking their first knowledge of computer security, this book will also have value for the IT worker who needs pointers to specific information regarding computer security.

Well, I have bought every version of this book since the first and continue to find reasons enclosed to keep it on my bookshelf. I even own Maximum Linux Security. Yep. It's excellent as well.

Not only does the book give you a good feel about where to find the tools of the trade it also gives you insight into their usage.

I regularly investigate computer-based instrusions and find that many of the concepts included in these chapters are enclosed.

I cut my teeth on this series of books a few years ago and continue to keep my skills fresh with them today.

I belieive in this book. I think any serious practitioner should at least browse it to see what he or she is missing. Loved it - Keep them coming.

I'm looking forward to seeing if this edition has anything on the latest exploits concerning the use of Nimda/Code Red/Unicode invasions that I am seeing in conjunction with Scanner Tools and remote control utilities is discussed or not... IRC-Scripters...

Anyone have info contact me ...Thanks...