Extreme Exploits: Advanced Defenses Against Hardcore Hacks (Hacking Exposed) Review

Average Reviews:

(More customer reviews)Are you looking to buy Extreme Exploits: Advanced Defenses Against Hardcore Hacks (Hacking Exposed)? Here is the right place to find the great deals. we can offer discounts of up to 90% on Extreme Exploits: Advanced Defenses Against Hardcore Hacks (Hacking Exposed). Check out the link below:

>> Click Here to See Compare Prices and Get the Best Offers

Extreme Exploits: Advanced Defenses Against Hardcore Hacks (Hacking Exposed) ReviewHere is the thing - I am giving this book a high score (4) since it contains unique and fun content related to network infrastructure attacks and defenses, which I have not seen anywhere else. In my view, the good stuff justifies such score, although I suspect that some other reviewers will sledgehammer the book for having too much of routine material covered in other previous books, including the venerable Hacking Exposed.
While I had a general idea of how providers mitigate DDoS attacks, I did not know the specifics of unicast reverse-path forwarding method, described in the book. Similarly, I picked up a lot of material of setting up sinkholes for dropping traffic (and, more specifically, how they are better than ACLs in many cases).
From other topics, I liked their coverage on the evolution of DMZ from simple designs of years past to current security zone design.
The book also presents a lot of up-to-date material, such as the coverage of security information management (SIM), vulnerability management and recent security standards, such as CVSS. It doesn't go into details in some places where I'd wanted it to, but still is interesting to read.
On the other hand, some chapters are disappointing and seem to be in the book for it to appear "comprehensive". Forensics chapter is one of those (it is also mistakenly called "Exploiting Forensics", while no exploitation is taking place)
I recommend the book for most people, from beginners to advanced, since the former will enjoy the breadth of coverage while the latter will likely benefit from the network infrastructure protection (and devastation, of course!) tips. In addition, defense checklists in the end of each chapter are useful for those who do not have time to go and study the material in-depth. The book is slightly biased towards the defense side, with good coverage of the attacking side as well.
Dr Anton Chuvakin, GCIA, GCIH, GCFA is a recognized security expert and book author. In his current role as a Security Strategist with netForensics, a security information management company, he is involved with defining future features and conducting security research. A frequent conference speaker, he also represents the company at various security meetings and standard organizations. He is an author of a book "Security Warrior" and a contributor to "Know Your Enemy II", "Information Security Management Handbook" and the upcoming "Hacker's Challenge 3". Anton also published numerous papers on a broad range of security subjects. In his spare time he maintains his security portal at info-secure.org and a blog at O'Reilly"
Extreme Exploits: Advanced Defenses Against Hardcore Hacks (Hacking Exposed) OverviewProtect your network and web sites from malicious attacks with help from this cutting-edge guide. Extreme Exploits is packed with never-before-published advanced security techniques and concise instructions that explain how to defend against devastating vulnerabilities in software and network infrastructure. This book will give a detailed analysis of modern threats and their solutions along with a checklist for developing defenses at the end of eachchapter.You'll also be introduced to a winning methodology for custom vulnerability assessments including attack profiling and the theatre of war concept. Through in-depth explanations of underlying technologies, you'll learn to prepare your network and software from threats that don't yet exist. This is a must-have volume for anyoneresponsible for network security.

Want to learn more information about Extreme Exploits: Advanced Defenses Against Hardcore Hacks (Hacking Exposed)?

>> Click Here to See All Customer Reviews & Ratings Now

Read More...

The New Forensics: Investigating Corporate Fraud and the Theft of Intellectual Property Review

Average Reviews:

(More customer reviews)Are you looking to buy The New Forensics: Investigating Corporate Fraud and the Theft of Intellectual Property? Here is the right place to find the great deals. we can offer discounts of up to 90% on The New Forensics: Investigating Corporate Fraud and the Theft of Intellectual Property. Check out the link below:

>> Click Here to See Compare Prices and Get the Best Offers

The New Forensics: Investigating Corporate Fraud and the Theft of Intellectual Property ReviewThe New Forensics is a fascinating account of the ways in which some unlikely and unsung heroes of the digital age ' forensic accounting specialists ' ferret out evidence of crimes ranging from corporate fraud to homicide, from intellectual property piracy to secretion of assets from Holocaust victims in Swiss banks. This is no dry textbook: the author obviously has a deep passion for his subject matter and a natural gift for storytelling, both of which come across in an easily readable, almost breezy prose style. In an interwoven series of stories of greed, arrogance and shady dealings ' some well known, like Enron and WorldCom, others not so well known - the author gives even the novice a comprehensible education in computer forensics and accounting concepts without "dumbing down" or oversimplifying these topics. Though the techniques used by the investigators and described in this book reflect the state of the art at the time the investigations were conducted, the human weaknesses and strengths that underlie the use of technology both to perpetrate and uncover misconduct are timeless, and they are ultimately the real subject matter of this fine book. For what it has to say, and for way in which the author tells these stories, this book ought to be required introductory reading on college campuses and in business and law schools. In fact, anyone who is interested in real-life crime drama, in computer and software technology and high-tech sleuthing, or in the rise and fall of the "dot-com/dot-gone" economy, will enjoy this book. Highly recommended.The New Forensics: Investigating Corporate Fraud and the Theft of Intellectual Property OverviewAn in-depth look at the tools, techniques, and tactics used in computer forensicsThe New Forensics introduces readers to the world of business forensics, using interesting vignettes, interviews, and actual crime reports. It examines recent cases in which the use of computer forensics led to evidence linking executives to fraud and covers issues such as the theft of trade secrets, the use of data mining, money laundering, and other types of theft and fraud. Author Joe Anastasi, a well-respected leader in computer and business forensics, leads the reader on a shadowy journey through top-secret government offices and real-life business investigations while covering the moral and legal issues surrounding corporate crime. Case studies, stories, and interviews help highlight important issues and move the book out of the theoretical into the realm of actual practice.Joe Anastasi (San Francisco, CA) serves as the Global Leader for Deloitte Forensics, which includes the operation of several Cybercrime Computer Forensics labs located around the world. He is a member of the High-Tech Crime Investigation Association and the Association of Certified Fraud Examiners.

Want to learn more information about The New Forensics: Investigating Corporate Fraud and the Theft of Intellectual Property?

>> Click Here to See All Customer Reviews & Ratings Now

Read More...

Windows Forensics: The Field Guide for Corporate Computer Investigations Review

Average Reviews:

(More customer reviews)Are you looking to buy Windows Forensics: The Field Guide for Corporate Computer Investigations? Here is the right place to find the great deals. we can offer discounts of up to 90% on Windows Forensics: The Field Guide for Corporate Computer Investigations. Check out the link below:

>> Click Here to See Compare Prices and Get the Best Offers

Windows Forensics: The Field Guide for Corporate Computer Investigations ReviewI decided to read and review three digital forensics books in order to gauge their strengths and weaknesses: "File System Forensic Analysis" (FSFA) by Brian Carrier, "Windows Forensics" (WF) by Chad Steel, and "EnCase Computer Forensics" (ECF) by Steve Bunting and William Wei. All three books contain the word "forensics" in the title, but they are very different. If you want authoritative and deeply technical guidance on understanding file systems, read FSFA. If you want to focus on understanding Windows from an investigator's standpoint, read WA. If you want to know more about EnCase (and are willing to tolerate or ignore information about forensics itself), read ECF.
In the spirit of full disclosure I should mention I am co-author of a forensics book ("Real Digital Forensics") and Brian Carrier cites my book "The Tao of Network Security Monitoring" on p 10. I tried to not let those facts sway my reviews.
WF is a great guide to forensic investigation of Windows. By this I mean WF presents Windows from the perspective of the important directories, files, and registry entries that help an analyst discover malfeasance. WF also covers some of the core applications one would expect to review during host-based forensics, like email, Web browsing history, and P2P application usage. I expected coverage of popular Windows application formats relevant to investigations, like .doc, .ppt, and .xls, but those were missing.
WF addresses the core operational aspects of host-centric forensics, like forming a team and acquiring evidence from live and dead targets. I did not think these sections were as good as material from what I consider the book best suited for all-around hands-on forensic use -- "Incident Response: Computer Forensics, 2nd Ed" by Mandia, Prosise, and Pepe. Live response is one area where I thought WF didn't shine too brightly. I did like the frequent mini-case studies which shared stories from the author's investigative experiences.
A few other aspects of WF resulted in me offering a four star review. I thought the discussion of "vampire taps" on p 157 revealed a real lack of contact with modern network monitoring methods. I don't know anyone who uses or recommends such a contraption in an era of network taps. I continue to question the need to build so-called "sniffing cables," especially when proper interface configuration serves the same purpose. Furthermore, a remotely managed sensor will not be able to hide its traffic on the network anyway, so savvy intruders can usually find them (unless a completely separate management network is run out-of-band). "Chapter 7" was also way too short -- 2 pages!
Although I liked the case studies, I thought there were far too many "gray box" entries. These contain useful hints, but their frequent appearance sometimes interrupted flow of the book. This indicates a need for better organization. Finally, I felt the recent Syngress book "Winternals" did a decent job explaining how to analyze malware, rootkits, and rogue processes on Windows. WF didn't explore this key aspect of Windows incident response.
Overall, however, I would recommend reading WF if you need to understand data sources from Windows systems. I suggest concentrating on the sections that explain where you'll find quality information on Windows, and rely on other sources for generic forensics guidance. I could see readers using WF as a primer for learning about key Windows artifacts, then searching for them in the image files in "Real Digital Forensics."Windows Forensics: The Field Guide for Corporate Computer Investigations OverviewThe evidence is in--to solve Windows crime, you need Windows toolsAn arcane pursuit a decade ago, forensic science today is a household term. And while the computer forensic analyst may not lead as exciting a life as TV's CSIs do, he or she relies just as heavily on scientific principles and just as surely solves crime.Whether you are contemplating a career in this growing field or are already an analyst in a Unix/Linux environment, this book prepares you to combat computer crime in the Windows world. Here are the tools to help you recover sabotaged files, track down the source of threatening e-mails, investigate industrial espionage, and expose computer criminals.* Identify evidence of fraud, electronic theft, and employee Internet abuse* Investigate crime related to instant messaging, Lotus Notes(r), and increasingly popular browsers such as Firefox(r)* Learn what it takes to become a computer forensics analyst* Take advantage of sample forms and layouts as well as case studies* Protect the integrity of evidence* Compile a forensic response toolkit* Assess and analyze damage from computer crime and process the crime scene* Develop a structure for effectively conducting investigations* Discover how to locate evidence in the Windows Registry

Want to learn more information about Windows Forensics: The Field Guide for Corporate Computer Investigations?

>> Click Here to See All Customer Reviews & Ratings Now

Read More...

UNIX and Linux Forensic Analysis DVD Toolkit Review

Average Reviews:

(More customer reviews)Are you looking to buy UNIX and Linux Forensic Analysis DVD Toolkit? Here is the right place to find the great deals. we can offer discounts of up to 90% on UNIX and Linux Forensic Analysis DVD Toolkit. Check out the link below:

>> Click Here to See Compare Prices and Get the Best Offers

UNIX and Linux Forensic Analysis DVD Toolkit ReviewThe title may mislead readers to believe that this book discusses actual forensics of Unix and Linux systems. It does not. The authors waste precious pages in this short book discussing their favorite cool Linux apps like Nessus and Metasploit but don't have any meaningful discussion about the various flavors of Unix: AIX, Solaris, *BSD, etc. Their "Unix and Linux" forensic book is almost entirely about Linux. There is no thoughtful discussion about filesystem forensics; no technical detail helpful to Forensic Examiners.
The few moments where the authors approach a meaningful forensic topic, the reader is redirected to an online resource rather than provided an analysis or explanation within the book.
The book title may lead readers to believe that an accompanying DVD contains a Unix forensic toolkit of some kind. In fact, there is only 1.8 MB of documents and no tools save for a few (4) short Bash scripts that hardly cover a thorough forensics examination: live or otherwise. One of the scripts is only one line. One of these documents is an incomplete 3.5 page summary of Sleuthkit tools. By "incomplete" I mean that it is apparent that the author decided to quit writing. Apparently there was no room in this 236 page, 14-gauge font book to cover in any detail the different Unix filesystems, data acquisition, data carving or static filesystem analysis. But the authors make plenty of room to discuss scanning with Unix tools (nmap, nessus, etc.).
There is a section entitled "Malware" except that no malware sample is actually examined. The reader is briefly introduced to Panda's AV scanner and is walked through how to use ClamAV as if that is the only AV scanner available for either a Unix user or Forensic Examiner. Forensic Examiners should pay very close attention to AntiVirus product comparative reviews.
The book cover boasts that this is the "only digital forensic analysis book for *nix". Indeed there may be little in the way of books solely dedicated to Unix forensics but other books cover Unix forensics with greater detail than this one. For example, Brian Carrier's "Filesystem Forensic Analysis" or Jones, Bejtlich and Rose's "Real Digital Forensics".
The book cover also boasts that readers can "Hit the ground running" with the information within. Unfortunately, if readers expect the content to help them bridge a gap between Windows and Unix, they will hit the ground with a resounding thud. If any Forensics Examiner finds value in the content of this book for actual Unix forensic investigations, I would question that examiner's experience and training.
If the authors wanted to write a book about cool Linux tools or network scanning, they should have entitled the book differently. Perhaps "A Beginner's Guide to Using Linux and Linux Security Applications".
I felt the title was misleading and false advertising. The authors take advantage of the word "Forensics" to sell a book that is not about forensics. For $53.95 I expected much more and was extremely disappointed and disgusted at the inferiority of the content.UNIX and Linux Forensic Analysis DVD Toolkit OverviewThis book addresses topics in the area of forensic analysis of systems running on variants of the UNIX operating system, which is the choice of hackers for their attack platforms. According to a 2007 IDC report, UNIX servers account for the second-largest segment of spending (behind Windows) in the worldwide server market with $4.2 billion in 2Q07, representing 31.7% of corporate server spending. UNIX systems have not been analyzed to any significant depth largely due to a lack of understanding on the part of the investigator, an understanding and knowledge base that has been achieved by the attacker. The companion DVD provides a simulated or "live" UNIX environment where readers can test the skills they've learned in the book and use custom tools developed by the authors.The book begins with a chapter to describe why and how the book was written, and for whom, and then immediately begins addressing the issues of live response (volatile) data collection and analysis.The book continues by addressing issues of collecting and analyzing the contents of physical memory (i.e., RAM).The following chapters address /proc analysis, revealing the wealth of significant evidence, and analysis of files created by or on UNIX systems.Then the book addresses the underground world of UNIX hacking and reveals methods and techniques used by hackers, malware coders, and anti-forensic developers.The book then illustrates to the investigator how to analyze these files and extract the information they need to perform a comprehensive forensic analysis.The final chapter includes a detailed discussion of Loadable Kernel Modules and Malware. The companion DVD provides a simulated or "live" UNIX environment where readers can test the skills they've learned in the book and use custom tools developed by the authors.Throughout the book the author provides a wealth of unique information, providing tools, techniques and information that won't be found anywhere else.Not only are the tools provided, but the author also provides sample files so that after completing a detailed walk-through, the reader can immediately practice the new-found skills.* The companion DVD for the book contains significant, unique materials (movies, spreadsheet, code, etc.) not available any place else.* This book contains information about UNIX forensic analysis that is not available anywhere else. Much of the information is a result of the author's own unique research and work.* The authors have the combined experience of Law Enforcement, Military, and Corporate forensics. This unique perspective makes this book attractive to ALL forensic investigators.

Want to learn more information about UNIX and Linux Forensic Analysis DVD Toolkit?

>> Click Here to See All Customer Reviews & Ratings Now

Read More...