Showing posts with label encryption. Show all posts
Showing posts with label encryption. Show all posts

CEH: Official Certified Ethical Hacker Review Guide: Exam 312-50 Review

CEH: Official Certified Ethical Hacker Review Guide: Exam 312-50
Average Reviews:

(More customer reviews)
This book is great. Why? Well it's not just because its a great study guide for the CEH exam (Certified Ethical Hacker), but also for the amount of info crammed into a small book. If you're wanting to learn the basics of ethical hacking, then this is the book. Its a quick read, packed full of interesting workable senarios.
What this book is:
1. A great book for your junior security people.
2. Very easy to work through the chapters as labs.
3. Lots of references to cool programs you can find and download.
What this book isn't:
1. Your not going to learn any code.
2. If you're already a better than average hacker this book is not for you.
3. You won't get CEH certified with this book as a stand alone.
4. You do need a basic understanding of networking, security and systems. (This book isnt hacking for dummies).

Click Here to see more reviews about: CEH: Official Certified Ethical Hacker Review Guide: Exam 312-50



Buy NowGet 37% OFF

Click here for more information about CEH: Official Certified Ethical Hacker Review Guide: Exam 312-50

Read More...

Security+ Guide to Network Security Fundamentals Review

Security+ Guide to Network Security Fundamentals
Average Reviews:

(More customer reviews)
I bought this book for two reasons: first I needed it for a security class this summer, second I needed a book with good testing software to prepare for the CompTIA Security+ exam. It served its purpose and I passed the exam easily.
The practice exam software is good, but I have used this exam engine from Certblaster before and the question text size they use is too small, which is very irratiting especially since there is plenty of room to use a larger text size. Unlike other books that use the same Certblaster software (usually a Course Technology publication), this one does not use the other functions that the test software offers, like providing the explanations to the questions, so you can actually learn as you go. Someone got lazy. Also the end of chapter question drills, which ask up to 20 questions, provide neither the answer OR the explanation key so you can check yourself; you have to dig through the text. End of chapter quizzes are really good learning tools, but these ones make you work too hard, and waste your time by making you hunt down the correct answers in a chapter you just read. They could at least give the answers, even if they are too lazy to provide the explanations. So, as an exam prep book, this one really falls down on its face in that area. I hate to criticize this fine book, but for almost 100.00 these overpriced Course Technology books should be doing better than this.
It is a good book as far as the text and layout go, very readable and enjoyable. But unless you need it for a class (as is often the case with Course Technology books), save your money and get the Sybex book, or Sybex+something else like the ExamCram and STILL pay less than half what this book costs.
I give it 3 stars. I would have given 5 except for the inexcusable lack of answers/explanations to the end of chapter review questions, the lack of answers/explanations to the Certblaster practice exams, and the insane price.

Click Here to see more reviews about: Security+ Guide to Network Security Fundamentals

Now in its third edition, the best-selling SECURITY+ GUIDE TO NETWORK SECURITY FUNDAMENTALS provides the most up-to-date industry information, reflecting the changes in security that have occurred since the most recent CompTIA Security+ objectives were created. The book covers all of the new CompTIA Security+ 2008 exam objectives and maps to the new Security+ 2008 exam. This updated edition features many all-new topics, including topics new to the CompTIA exams like cross site scripting, SQL injection, rootkits, and virtualization, as well as topics of increasing importance in the industry as a whole, like the latest breeds of attackers, Wi-Fi Protected Access 2, and Microsoft Windows Vista security.

Buy NowGet 25% OFF

Click here for more information about Security+ Guide to Network Security Fundamentals

Read More...

Fundamentals of Network Security Review

Fundamentals of Network Security
Average Reviews:

(More customer reviews)
The book is well written and the concepts it covers are both current and relative. It covers the concepts of basic computer and network security. It has alot of illustration figures. After each chapter there are "Key term quiz" and "Multiple choice quiz" which are helpfull for the students to test their self.
It's great.

Click Here to see more reviews about: Fundamentals of Network Security

This hands-on, project-based approach to the fundamentals of network security concepts and skills helps students understand security best practices, laws, and standards that will enable them to build a complete security program.This book introduces a strong foundation that includes security policy, planning, and development of good processes.A step-by-step design teaches students security implementation using recent advances in security tools, such as firewalls, VPN's, encryption, techniques, and intrusion detection devises.Platform-specific defenses are revealed for the desktop, Windows networks, UNIX, Internet, and wireless systems.Laws and government regulation are also covered, including the Patriot Act, homeland security initiatives, and special information on relevant state laws.

Buy Now

Click here for more information about Fundamentals of Network Security

Read More...

Security of Information and Communication Networks (IEEE Press Series on Information & Communication Networks Security) Review

Security of Information and Communication Networks (IEEE Press Series on Information and Communication Networks Security)
Average Reviews:

(More customer reviews)
This book was evidently written in haste with little editing. There are too many errors, grammatical and technical, throughout the book; e.g. the numerical work in 8.2.1 (page 176) is incorrect. Chapter 2, Mathematical Foundations, should be longer, with more examples and exercises for the reader who would be exposed to this material for the first time. There are also errors in this chapter; e.g. on page 43, line 11, "random" should be "prime".


Click Here to see more reviews about: Security of Information and Communication Networks (IEEE Press Series on Information & Communication Networks Security)

Information and communications security is a hot topic in private industry as well as in government agencies. This book provides a complete conceptual treatment of securing information and transporting it over a secure network in a manner that does not require a strong mathematical background. It stresses why information security is important, what is being done about it, how it applies to networks, and an overview of its key issues. It is written for anyone who needs to understand these important topics at a conceptual rather than a technical level.

Buy NowGet 25% OFF

Click here for more information about Security of Information and Communication Networks (IEEE Press Series on Information & Communication Networks Security)

Read More...

Hacking Exposed: Network Security Secrets and Solutions, Sixth Edition Review

Hacking Exposed: Network Security Secrets and Solutions, Sixth Edition
Average Reviews:

(More customer reviews)
Hardly a week goes by that CNN does not report a high-profile Web site being defiled or an e-commerce site being penetrated. While most people know why these incidents occurred, Hacking Exposed explains how they occurred and, more important, how to prevent them from occurring.
The cover of Hacking Exposed announces that "Network security is Y2K without the deadline." That alarmist statement, however, is the only hype in the book. The work is packed with real-world examples and links to tools needed to assess the security of any type of client/server and Web system. As they detail the myriad vulnerabilities in different types of systems, the authors provide countermeasures for each of them.
Well organized, the book progresses in an orderly fashion. It methodically goes through the process of exploiting a target to penetrate a system--from identification and enumeration to actual penetration. The authors provide detailed instructions and explanations for many security features and flaws in Unix, Linux, Windows, NetWare, routers, firewalls, and more. Topics covered include state-of-the-art computer and network penetration, as viewed by both the attacker and the defender; remote system identification; vulnerability identification; war dialers; firewall circumvention; and denial-of-service attacks. An appendix explores the security characteristics of Windows 2000.
Some may argue that books such as this one only serve to motivate and educate hackers. The truth is that hackers are already aware of the book's contents. This book is designed for system administrators and managers who need to know their systems' risks and vulnerabilities and how to address them. When they are done with this book, system administrators and managers will be familiar with such critical topics as back channels, port redirection, banner grabbing, and buffer overflows. Hacking Exposed is a must-read for anyone who wants to know what is really happening on their network....

Click Here to see more reviews about: Hacking Exposed: Network Security Secrets and Solutions, Sixth Edition



Buy NowGet 37% OFF

Click here for more information about Hacking Exposed: Network Security Secrets and Solutions, Sixth Edition

Read More...

Joe Grand's Best of Hardware, Wireless, and Game Console Hacking Review

Joe Grand's Best of Hardware, Wireless, and Game Console Hacking
Average Reviews:

(More customer reviews)
OK, of course I say it's a nice collection; I'm the author. :) This combination book/DVD is a selection of our favorite hacks from Hardware Hacking: Have Fun While Voiding Your Warranty and Game Console Hacking. If you're curious about modifying hardware and electronic products to do things they weren't intended to do, then this collection is for you. It's a great way to get involved in the hobby without breaking the bank. Cheaper than either of the previously mentioned larger books, only 4 chapters are printed (Tools of the Warranty-Voiding Trade, Electrical Engineering Basics, Operating Systems Overview, and Coding 101) The actual hacks (the rest of the material) is on the included DVD in PDF and HTML format with high-resolution images (most of them in color, as opposed to the black and white of the previous books). Some of the hacks include: Declawing your Cuecat, hacking the Playstation 2, hacking the iPod, modifications for the classic/retro Atari 2600, 5200, 7800, and 8-bit systems, hacking the Xbox, and how to build your own DVR/Home Theater PC. Don't be afraid to modify or hack your hardware - have fun voiding your warranty!

Click Here to see more reviews about: Joe Grand's Best of Hardware, Wireless, and Game Console Hacking



Buy Now

Click here for more information about Joe Grand's Best of Hardware, Wireless, and Game Console Hacking

Read More...

Security In Wireless LANS And MANS (Artech House Computer Security) Review

Security In Wireless LANS And MANS (Artech House Computer Security)
Average Reviews:

(More customer reviews)
When wireless LANS were beginning to be developed, security was a concern. But as the systems were developed and marketed security became less important than getting to market quickly and of course price. As a result, the seurity features built into the initial systems was fairly weak. While the home user typically didn't care about security, the enterprise user was very concerned. After security flaws were discovered and published the widespread use at the enterprise level was halted. The IEEE standards community completed the revision of the security related components of the 802.11 standard in 2004, and equipment meeting the new standard is just becoming available.
This book covers the security aspects of WLANS, first discussing the initial designs and then how they were corrected in the new protocols.
The last part of the book is on the 802.16 Wireless Metropolitan Area Networks which have the promise, or perhaps the hope of dramatically increasing broadband access in areas not covered by cable systems and at distances too great for DSL service.

Click Here to see more reviews about: Security In Wireless LANS And MANS (Artech House Computer Security)



Buy NowGet 5% OFF

Click here for more information about Security In Wireless LANS And MANS (Artech House Computer Security)

Read More...

Hacking Exposed Wireless: Wireless Security Secrets & Solutions Review

Hacking Exposed Wireless: Wireless Security Secrets and Solutions
Average Reviews:

(More customer reviews)
I have a ton of those red covered books on the book shelf. The Hacking Exposed series has been good to me and good to every person trying to learn security. So, I was excited to have my new green covered Hacking Exposed Wireless book show up at the house so I could learn some wireless hacking. The first 60 pages or so of background technical content is interesting but not totally necessary to get going with the topic. I do realize to be a good "hacker" you need to understand the technology, but the other HE's have been able to balance giving us the background and still able to use the tools for some hacking action.
I felt that once we finally got into the technical content (starts with 802.11 discovery) that they talked around topics but really didn't cover how to actually "do" anything. There isn't much to running kismet after configuring the one or two lines of the conf file. Then its a simple #kismet or $sudo kismet and it runs. Netstumbler is even easier since you have GUI to help you out and its on Windows and same same with KisMAC on OS X.
The cracking WEP section starts out with saying use an old kernel and the madwifi-old drivers. That may have been great advice when the book was published but it is certainly not useful for the average user today especially since it appears the bugs have been worked out of the new madwifi driver and aircrack-ng. (We do have to take into account that I read the book in Sep 07 and it was published in March 07). The section on using aircrack to break WEP on linux on pages 180-182 was decent but certainly not anything you cant get on the aircrack-ng homepage. A little more content on how we do fake authentication attempts and then why and how we have aireplay send our ARP packets would have been nice. The current version of aireplay when you run that capture makes you pick which capture we want to use, since they don't cover what packet to use it may be difficult for the person following along. The shell of the instructions are there, but the details are missing.
The opportunity to shine by talking about the Fragmentation and ChopChop attacks is devoid of actually using aircrack-ng or other tools to launch the attacks, so it falls short.
The Hacking Hotspots section (CH 9) looked to be the redeeming section at first glance but much like the WEP cracking section is lacking any useful screenshots or how to use any of the tools they mention. The most frustrating part was the author telling us how they have a slick SSH set up to use public hotspots but provides no information on how to set up one of our own. The tunneling using ozymanDNS attack gives no useful information on how to use the tool, the billing attacks section gives no useful information either. While I understand its illegal to steal wifi, if you aren't going to actually cover it, don't bother talking all around it. The client attack section consisted of installing nmap and nessus and running it against clients on the LAN. That section was the perfect set up to really cover KARMA in-depth, sadly a missed opportunity.
The bluetooth section (CH 10) that looks to be written by Kevin Finisterre was excellent and met the high standards previous HE books set. He walks us through a fictional scenario with real code and explains how we can use the code to exploit bluetooth vulnerabilities on OSX and gives us the link to the code :-)
Overall I was disappointed in the book which is unfortunate because the authors are known to be very knowledgeable and skilled people in the security industry. It can be a good reference on wifi background and hardware if you need one but it falls a bit short IMO of being as useful as some of the other HE titles.

Click Here to see more reviews about: Hacking Exposed Wireless: Wireless Security Secrets & Solutions



Buy Now

Click here for more information about Hacking Exposed Wireless: Wireless Security Secrets & Solutions

Read More...

WarDriving and Wireless Penetration Testing Review

WarDriving and Wireless Penetration Testing
Average Reviews:

(More customer reviews)
Disclaimer: I know the guy who wrote the forward, although I don't think in any way this has influenced my review of this book.
I'm not a wireless hacker, although I've dabbled some in examining networks and some of the software in the book. That said, I think I learned quite a bit by reading this book. I didn't know what to expect with "Wardriving & Wireless Penetration Testing", but what I found was a focused, well prepared book with clear examples. Now, this book is very heavy on network discovery and mapping and not as complete on wireless attacks, although this topic does get coverage in a full chapter and parts of others.
What I like about the book is that it's comprehensive without being exhaustive. It covers WiFi hacking from Windows and Linux, which you would expect, and also from OS X (not so common) and also from, very pleasantly, handheld devices. The software covered is mainly using Kismet/Kismac and the NetStumbler family of software, which is not unexpected. These are premier tools and offer everything you would want. Several minor tools are also discussed.
Various attacks covered include breaking the security mechanisms of WEP, WPA and LEAP, not surprisingly, and how to commit MITM attacks. In all of these, the instructions are clear and straightforward with clear illustrations.
Lest you think this book is all about software, there's good coverage of hardware, both wireless cards and adapters as well as antennas. Also, some GPS software and its integration with wireless mapping efforts is also covered in detail. Another surprise is the coverage of the OpenWRT software kit for the WRT54G device, which can easily be loaded into a functional, dedicated wireless pentest and attack tool. The authors provide valuable tips and insights along the way. A short "bonus" chapter on wireless video device hacking is also included. Appendix B covers driver static analysis and testing, which is becoming a hot topic right now in vulnerability research.
Screenshots, examples, and images were generally well done. A handful of Linux-specific screenshots (ie for the kernel configuration) were poorly reproduced, unfortunately.
While I'm not an expert at wireless (either the security protocols, the auth protocols, or the physics) I didn't spot any obvious mistakes in their background material.
I found "Wardriving & Wireless Penetration Testing" to be well written and full of useful information, all clearly and well presented. The authors have prepared a good, timely book on the subject, and cover the topic in full, sharing insights and tips along the way.

Click Here to see more reviews about: WarDriving and Wireless Penetration Testing



Buy NowGet 33% OFF

Click here for more information about WarDriving and Wireless Penetration Testing

Read More...

Hacking Wireless Networks For Dummies (For Dummies (Computers)) Review

Hacking Wireless Networks For Dummies (For Dummies (Computers))
Average Reviews:

(More customer reviews)
Think your wireless network is secure from unauthorized use or attack? It's probably not. I just finished reading Hacking Wireless Network For Dummies by Kevin Beaver and Peter T. Davis, and this is one of the most practical books I've ever read for testing a network against attack.
Contents:
Part 1 - Building the Foundation for Testing Wireless Networks: Introduction to Wireless Hacking; The Wireless Hacking Process; Implementing a Testing Methodology; Amassing Your War Chest
Part 2 - Getting Rolling with Common Wi-Fi Hacks: Human (in)Security; Containing the Airwaves; Hacking Wireless Clients; Discovering Default Settings; Wardriving
Part 3 - Advanced Wi-Fi Hacks: Still at War; Unauthorized Wireless Devices; Network Attacks; Denial-of-Service Attacks; Cracking Encryption; Authenticating Users
Part 4 - The Part of Tens: Ten Essential Tools for Hacking Wireless Networks; Ten Wireless Security-Testing Mistakes; Ten Tips for Following Up after Your Testing
Part 5 - Appendixes: Wireless Hacking Resources; Glossary of Acronyms
Index
The target of this book is the security professional involved in testing networks to make them more secure. There's a heavy emphasis on "ethical hacking", or learning how to test a network's security without doing harm or using the information in a destructive fashion. A security consultant using this book would learn how to pre-plan a test, work with the company to make sure they were properly authorized, and then write up the results in a professional manner. That aspect of the book is impressive, and it helps to frame the information in the right light (not as a textbook on how to break into networks).
From a practical standpoint, this book excels. Each of the chapters covers the theory behind how or why a certain aspect of a wireless network would be vulnerable to an attack or exploit. Then the authors cover a number of open source and commercial software packages that are available to focus on that area. For instance, chapter 14 goes into why WEP encryption is flawed and how it can be broken with relatively little effort. It's followed by an explanation on how WPA addresses some of those issues. Finally you get coverage on available tools that are used to crack WEP and how you can use them to test your own network.
Highly practical and heavy on application... If you're a security professional with responsibility for your organization's wireless network, you need to read this book. And if you're a techno-geek with your own wireless network, you'll want to get this book to play around. I know I will be doing a little hacking at Chez Duffbert...

Click Here to see more reviews about: Hacking Wireless Networks For Dummies (For Dummies (Computers))

Become a cyber-hero - know the common wireless weaknesses
"Reading a book like this one is a worthy endeavor toward becoming an experienced wireless security professional."--Devin Akin - CTO, The Certified Wireless Network Professional (CWNP) Program
Wireless networks are so convenient - not only for you, but also for those nefarious types who'd like to invade them. The only way to know if your system can be penetrated is to simulate an attack. This book shows you how, along with how to strengthen any weak spots you find in your network's armor.
Discover how to:
Perform ethical hacks without compromising a system
Combat denial of service and WEP attacks
Understand how invaders think
Recognize the effects of different hacks
Protect against war drivers and rogue devices


Buy NowGet 34% OFF

Click here for more information about Hacking Wireless Networks For Dummies (For Dummies (Computers))

Read More...

CWSP Guide to Wireless Security Review

CWSP Guide to Wireless Security
Average Reviews:

(More customer reviews)
Like how the information is presented throughout the book. Easy to read and contains good images. Many essential terms/subjects and a very good book for anyone wanting to learn about wireless networks and security.

Click Here to see more reviews about: CWSP Guide to Wireless Security

CWSP Guide to Wireless Security is a hands-on guide to defending wireless networks against attacks. It prepares students for the Certified Wireless Security Professional (CWSP) certification from Planet3.

Buy NowGet 56% OFF

Click here for more information about CWSP Guide to Wireless Security

Read More...