Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
61. | By: Joe Fichera; Steven Bolt Publisher: Syngress Publication Date: 17-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Network Intrusion Analysis
Nearly every business depends on its network to provide information services to carry out essential activities, and network intrusion attacks have been growing increasingly frequent and severe. When network intrusions do occur, it’s imperative that a thorough and systematic analysis and investigation of the attack is conducted to determine the nature of the threat and the extent of information lost, stolen, or damaged during the attack. A thorough and timely investigation and response can serve to minimize network downtime and ensure that critical business systems are maintained in full...
|
62. | By: Robert Bathurst; Russ Rogers; Alijohn Ghassemlouei Publisher: Syngress Publication Date: 31-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: The Hacker's Guide to OS X
Written by two experienced penetration testers the material presented discusses the basics of the OS X environment and its vulnerabilities. Including but limited to; application porting, virtualization utilization and offensive tactics at the kernel, OS and wireless level. This book provides a comprehensive in-depth guide to exploiting and compromising the OS X platform while offering the necessary defense and countermeasure techniques that can be used to stop hackers As a resource to the reader, the companion website will provide links from the authors, commentary and updates. ...
|
63. | By: Eric Cole Publisher: Syngress Publication Date: 31-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Advanced Persistent Threat
The newest threat to security has been categorized as the Advanced Persistent Threat or APT. The APT bypasses most of an organization’s current security devices, and is typically carried out by an organized group, such as a foreign nation state or rogue group with both the capability and the intent to persistently and effectively target a specific entity and wreak havoc. Most organizations do not understand how to deal with it and what is needed to protect their network from compromise. In Advanced Persistent Threat: Understanding the Danger and How to Protect your Organization Eric...
|
64. | By: Branden R. Williams; Anton Chuvakin Publisher: Syngress Publication Date: 01-SEP-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: PCI Compliance, 3rd Edition
The credit card industry established the PCI Data Security Standards to provide a minimum standard for how vendors should protect data to ensure it is not stolen by fraudsters. PCI Compliance, 3e, provides the information readers need to understand the current PCI Data Security standards, which have recently been updated to version 2.0, and how to effectively implement security within your company to be compliant with the credit card industry guidelines and protect sensitive and personally identifiable information. Security breaches continue to occur on a regular basis, affecting...
|
65. | By: Kenneth Tam; MartÃn H. Hoz Salvador; Ken McAlpine; Rick Basile; Bruce Matsugu; Josh More Publisher: Syngress Publication Date: 31-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: UTM Security with Fortinet
Traditionally, network security (firewalls to block unauthorized users, Intrusion Prevention Systems (IPS) to keep attackers out, Web filters to avoid misuse of Internet browsing, and antivirus software to block malicious programs) required separate boxes with increased cost and complexity. Unified Threat Management (UTM) makes network security less complex, cheaper, and more effective by consolidating all these components. This book explains the advantages of using UTM and how it works, presents best practices on deployment, and is a hands-on, step-by-step guide to deploying Fortinet's...
|
66. | By: Will Gragido; Daniel Molina; John Pirc; Nick Selby Publisher: Syngress Publication Date: 31-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Blackhatonomics
Blackhatonomics explains the basic economic truths of the underworld of hacking, and why people devote hours to develop malware around the world. The root cause analysis of the monetization of cybersecurity in the inner circle of cybercrime is analyzed from the impact of multiple. Written by an exceptional author team, they take practical academic principles back them up with use cases and extensive interviews, placing you right into the mindset of the cyber criminal. Historical perspectives of the development of malware as it evolved into a viable economic endeavour ...
|
67. | Information Security Risk Assessment Toolkit By: Mark Talabis; Jason Martin Publisher: Syngress Publication Date: 17-OCT-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Information Security Risk Assessment Toolkit
In order to protect company’s information assets such as sensitive customer records, health care records, etc., the security practitioner first needs to find out: what needs protected, what risks those assets are exposed to, what controls are in place to offset those risks, and where to focus attention for risk treatment. This is the true value and purpose of information security risk assessments.  Effective risk assessments are meant to provide a defendable analysis of residual risk associated with your key assets so that risk treatment options can be explored.  Information Security...
|
68. | Wireless Reconnaissance in Penetration Testing By: Matthew Neely; Alex Hamerstone; Chris Sanyk Publisher: Syngress Publication Date: 31-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Wireless Reconnaissance in Penetration Testing
In many penetration tests, there is a lot of useful information to be gathered from the radios used by organizations. These radios can include two-way radios used by guards, wireless headsets, cordless phones and wireless cameras. Wireless Reconnaissance in Penetration Testing  describes the many ways that a penetration tester can gather and apply the information available from radio traffic. Stopping attacks means thinking like an attacker, and understanding all the ways that attackers gather information, or in industry terms profile, specific targets. With information from what...
|
69. | FISMA and the Risk Management Framework By: Stephen D. Gantz; Daniel R. Philpott Publisher: Syngress Publication Date: 12-JUN-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: FISMA and the Risk Management Framework
If you are responsible for meeting federal information security requirements such as FISMA, this book is all you need to know to get a system authorized. Now in the first full revision of FISMA since its inception in 2002, a new wave of stronger security measures are now available through the efforts of the Department of Defense, Office of the Directory of National Intelligence, Committee for National Security Systems and the National Institute of Standards and Technology. Based on the new FISMA requirements for 2011 and beyond, this book catalogs the processes, procedures and specific...
|
70. | By: Anton Chuvakin; Kevin Schmidt; Chris Phillips Publisher: Syngress Publication Date: 31-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Logging and Log Management
Effectively analyzing large volumes of diverse logs can pose many challenges. Logging and Log Management helps to simplify this complex process using practical guidance and real-world examples. Packed with information you need to know for system, network and security logging. Log management and log analysis methods are covered in detail, including approaches to creating useful logs on systems and applications, log searching and log review. Comprehensive coverage of log management including analysis, visualization, reporting and more Includes information on different uses for logs...
|
71. | Client Side Attacks and Defense By: Sean-Philip Oriyano; Robert Shimonski Publisher: Syngress Publication Date: 28-SEP-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Client Side Attacks and Defense
Individuals wishing to attack a company’s network have found a new path of least resistance-the end user. A client- side attack is one that uses the inexperience of the end user to create a foothold in the user’s machine and therefore the network. Client-side attacks are everywhere and hidden in plain sight. Common hiding places are malicious Web sites and spam. A simple click of a link will allow the attacker to enter. This book presents a framework for defending your network against these attacks in an environment where it might seem impossible. The most current attacks are discussed...
|
72. | Cybercrime Investigative Case Management By: Brett Brett Shavers Publisher: Syngress Publication Date: 17-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Cybercrime Investigative Case Management
Investigative Case Management is a "first look" excerpted from Brett Shavers' new Syngress book, Placing the Suspect Behind the Keyboard. Investigative case management is more than just organizing your case files. It includes the analysis of all evidence collected through digital examinations, interviews, surveillance, and other data sources. In order to place a suspect behind any keyboard, supporting evidence needs to be collected and attributed to a person. This first look provides you with traditional and innovative methods of data analysis to identify and eliminate suspects...
|
73. | Cybercrime Investigation Case Studies By: Brett Brett Shavers Publisher: Syngress Publication Date: 17-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Cybercrime Investigation Case Studies
Cybercrime Investigation Case Studies is a "first look" excerpt from Brett Shavers' new Syngress book, Placing the Suspect Behind the Keyboard. Case studies are an effective method of learning the methods and processes that were both successful and unsuccessful in real cases. Using a variety of case types, including civil and criminal cases, with different cybercrimes, a broad base of knowledge can be gained by comparing the cases against each other. The primary goal of reviewing successful cases involving suspects using technology to facilitate crimes is to be able to find and use...
|
74. | By: Brett Brett Shavers Publisher: Syngress Publication Date: 17-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Cybercrime Case Presentation
Cybercrime Case Presentation is a "first look" excerpt from Brett Shavers' new Syngress book, Placing the Suspect Behind the Keyboard. Case presentation requires the skills of a good forensic examiner and great public speaker in order to convey enough information to an audience for the audience to place the suspect behind the keyboard. Using a variety of visual aids, demonstrative methods, and analogies, investigators can effectively create an environment where the audience fully understands complex technical information and activity in a chronological fashion, as if they observed...
|
75. | By: Derrick Derrick Rountree Publisher: Syngress Publication Date: 10-DEC-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Federated Identity Primer
Identity authentication and authorization are integral tasks in today's digital world. As businesses become more technologically integrated and consumers use more web services, the questions of identity security and accessibility are becoming more prevalent. Federated identity links user credentials across multiple systems and services, altering both the utility and security landscape of both. In Federated Identity Primer , Derrick Rountree Explains the concepts of digital identity Describes the technology behind and implementation of federated identity systems Helps you...
|
76. | By: David David Kleidermacher; Mike Mike Kleidermacher Publisher: Newnes Publication Date: 25-APR-2012 Insert Date: 22-JAN-2013 Slots: 1.0 | Overview: Embedded Systems Security
The ultimate resource for making embedded systems reliable, safe, and secure Embedded Systems Security provides: A broad understanding of security principles, concerns, and technologies Proven techniques for the efficient development of safe and secure embedded software A study of the system architectures, operating systems and hypervisors, networking, storage, and cryptographic issues that must be considered when designing secure embedded systems Nuggets of practical advice and numerous case studies throughout Written by leading authorities in the field with 65...
|
77. | By: Kevin Dooley Publisher: O'Reilly Media, Inc. Publication Date: 21-NOV-2001 Insert Date: 19-JAN-2013 Slots: 1.0 | Overview: Designing Large Scale Lans
This unique book offers a vendor-neutral approach for designing
large local area networks according to business or organizational
needs, rather than from a product perspective. Author and
independent network design consultant Kevin Dooley outlines
"top-down network design" for building a technological
infrastructure to fit your organization's requirements, a process
far more effective and cost-efficient than fitting the organization
to the parameters of a shrink-wrapped proprietary solution. Dooley
argues that the design of a network is largely independent of the
products used. Whether you...
|
78. | Understanding Linux Network Internals By: Christian Benvenuti Publisher: O'Reilly Media, Inc. Publication Date: 29-DEC-2005 Insert Date: 19-JAN-2013 Slots: 1.0 | Overview: Understanding Linux Network Internals
If you've ever wondered how Linux carries out the complicated tasks
assigned to it by the IP protocols -- or if you just want to learn
about modern networking through real-life examples --
Understanding Linux Network Internals is for you.
Like the popular O'Reilly book, Understanding the Linux
Kernel, this book clearly explains the underlying concepts and
teaches you how to follow the actual C code that implements it.
Although some background in the TCP/IP protocols is helpful, you
can learn a great deal from this text about the protocols
themselves and their uses. And if you already have a...
|
79. | By: Tom Gallagher; Bryan Jeffries; Lawrence Landauer Publisher: Microsoft Press Publication Date: 09-JUN-2006 Insert Date: 19-JAN-2013 Slots: 1.0 | Overview: Hunting Security Bugs Your in-depth, hands-on, technical security-testing reference. Written for testers by testers, this guide highlights up-to-date tools, technologies, and techniques for helping find and eliminate security vulnerabilities in software....
|
80. | By: Safari Content Team Publisher: Safari Books Online Publication Date: 09-JAN-2013 Insert Date: 18-JAN-2013 Slots: 0.0 | Overview: Security Bibliography From general IT security knowledge and certifications to specialized content such as exploit writing, this bibliography provides you with the information you need to solve any problem in IT security....
|