Penetration Tester's Open Source Toolkit

Jeremy Faircloth

Jesse Varsalone

Chris Hurley

Syngress

Over 700,000 IT Professionals Have Prepared for Exams with Syngress Authored Study Guides The Security+ Study Guide &amp; Practice Exam is a one-of-a-kind integration of text and and Web-based exam simulation and remediation. This system gives you 100% coverage of official CompTIA Security+ exam objectives plus test preparation software for the edge you need to achieve certification on your first try! This system is comprehensive, affordable, and effective! * Completely Guaranteed Coverage of All Exam Objectives All five Security+ domains are covered in full: General Security Concepts, Communication Security, Infrastructure Security, Basics of Cryptography, and Operational / Organizational Security * Fully Integrated Learning This package includes a Study Guide and one complete practice exam. * Each chapter starts by explaining the exam objectives covered in the chapter You will always know what is expected of you within each of the exam’s domains. * Exam-Specific Chapter Elements Notes, Tips, Alerts, Exercises, Exam’s Eyeview, and Self Test with fully explained answers. * Test What You Learned Hundreds of self-test review questions test your knowledge of specific exam objectives. A Self Test Appendix features answers to all questions with complete explanations of correct and incorrect answers.

Security+ Study Guide

Computers & Technology

Michael Gregg

Ido Dubrawsky

Eli Faskha

Certification

I decided to write this book for a couple of reasons. One was that I’ve now written a couple of books that have to do with incident response and forensic analysis on Windows systems, and I used a lot of Perl in both books. Okay…I’ll come clean…I used nothing but Perl in both books! What I’ve seen as a result of this is that many readers want to use the tools, but don’t know how…they simply aren’t familiar with Perl, with interpreted (or scripting) languages in general, and may not be entirely comfortable with running tools at the command line. This book is intended for anyone who has an interest in useful Perl scripting, in particular on the Windows platform, for the purpose of incident response, and forensic analysis, and application monitoring. While a thorough grounding in scripting languages (or in Perl specifically) is not required, it helpful in fully and more completely understanding the material and code presented in this book. This book contains information that is useful to consultants who perform incident response and computer forensics, specifically as those activities pertain to MS Windows systems (Windows 2000, XP, 2003, and some Vista). My hope is that not only will consultants (such as myself) find this material valuable, but so will system administrators, law enforcement officers, and students in undergraduate and graduate programs focusing on computer forensics.

Perl Scripting for Windows Security: Live Response, Forensic Analysis, and Monitoring

Harlan Carvey

Elsevier, Inc

Penetration testing a network requires a delicate balance of art and science. A penetration tester must be creative enough to think outside of the box to determine the best attack vector into his own network, and also be expert in using the literally hundreds of tools required to execute the plan. This second volume adds over 300 new pentesting applications included with BackTrack 2 to the pen tester's toolkit. It includes the latest information on Snort, Nessus, Wireshark, Metasploit, Kismet and all of the other major Open Source platforms.

Penetration Tester's Open Source Toolkit, Vol. 2

Networking & Cloud Computing

Most Systems Administrators are not security specialists. Keeping the network secure is one of many responsibilities, and it is usually not a priority until disaster strikes. How to Cheat at Securing Your Network is the perfect book for this audience. The book takes the huge amount of information available on network security and distils it into concise recommendations and instructions, using real world, step-by-step instruction. The latest addition to the best selling "How to Cheat..." series of IT handbooks, this book clearly identifies the primary vulnerabilities of most computer networks, including user access, remote access, messaging, wireless hacking, media, email threats, storage devices, and web applications. Solutions are provided for each type of threat, with emphasis on intrusion detection, prevention, and disaster recovery. * A concise information source - perfect for busy System Administrators with little spare time* Details what to do when disaster strikes your network* Covers the most likely threats to small to medium sized networks

How to Cheat at Securing Your Network (How to Cheat)

Dubrawsky, Ido

CompTIA Security+ Certification Study Guide: Exam SYO-201, Third Edition, offers a practical guide for those interested in pursuing CompTIA Security+ certification. The book is organized into six parts. Part 1 deals with general security issues including security threats; hardware and peripheral security risks; the fundamentals of operating system (OS) hardening; implementing system security applications; and concepts of virtualization. Part 2 discusses the fundamentals of network security. Part 3 focuses on network access and network authentication. Part 4 explains the importance of risk assessments and risk mitigation, and how to conduct them. Part 5 reviews general cryptographic concepts and addresses the complex issues involved in planning a certificate-based public key infrastructure (PKI). Part 6 on organizational security discusses redundancy planning; environmental controls; implementing disaster recovery and incident response procedures; and the policies, procedures, and documentation upon which organizational computer security is based. Each chapter begins with Exam Objectives and concludes with Self-Test questions along with their corresponding answers.

CompTIA Security+ Certification Study Guide: Exam SY0-201 3E

The only way to stop a hacker is to think like one! The World Wide Web Consortium's Extensible Markup Language (XML) is quickly becoming the new standard for data formatting and Internet development. XML is expected to be as important to the future of the Web as HTML has been to the foundation of the Web, and has proven itself to be the most common tool for all data manipulation and data transmission. Hack Proofing XML provides readers with hands-on instruction for how to secure the Web transmission and access of their XML data. This book will also introduce database administrators, web developers and web masters to ways they can use XML to secure other applications and processes. The first book to incorporate standards from both the Security Services Markup Language (S2ML) and the Organization for the Advancement of Structured Information Standards (OASIS) in one comprehensive book Covers the four primary security objectives: Confidentiality, Integrity, Authentication and Non-repudiation Not only shows readers how to secure their XML data, but describes how to provide enhanced security for a broader range of applications and processes

Hack Proofing XML with CDROM

Loeb, Larry

Ken Ftu

Everett, Carter

Franklin, Curtis, Jr.

Programming Languages

Java Programmers, Preprare for Microsoft's .NET initiative while enhancing your repertoire and marketability with C# for Java Progammers! C# for Java Programmers will prepare readers for the .NET framework by building on what they already know about object-oriented languages and give them the means to maintain their flexibility and effectiveness in an un-certain marketplace. This book will compare and contrast the advantages and disadvantages of both Java and C# to allow programmers to make their own decisions regarding what each language is best used for. Whatever your feelings are about Microsoft and its .NET initiative, there can be no denying that C# is here to stay. The C# language, a close cousin to Java, is a new object-oriented programming language (OOPL) designed to work within the .NET framework. It improves upon many of the vague or ill-defined areas of C++ that frequently lead programmers into trouble. C# is a strongly-typed, object-oriented language designed to give the optimum blend of simplicity, expressiveness, and performance.

C# for Java Programmers

Stephen Goldberg

Harold Cabrera

Programming

The incredible low maintenance costs of Snort combined with its powerful security features make it one of the fastest growing IDSs within corporate IT departments. Snort 2.0 Intrusion Detection is written by a member of Snort.org. The book provides a valuable insight to the code base of Snort and in-depth tutorials of complex installation, configuration, and troubleshooting scenarios. The primary reader will be an individual who has a working knowledge of the TCP/IP protocol, expertise in some arena of IT infrastructure, and is inquisitive about what has been attacking their IT network perimeter every 15 seconds.

Snort 2.0 Intrusion Detection

Brian Caswell

Jay Beale

James C. Foster

Web Development & Design

The SSCP Study Guide and DVD Training System is a unique and comprehensive combination of text, DVD-quality instructor-led training, and Web-based exam simulation and remediation. These components will give the student 100% coverage of all (ISC)² official exam objectives and realistic exam simulation. The SSCP Study Guide and DVD Training System consists of: 1. SSCP Study Guide The 1,000,000 readers who have read previous Syngress Study Guides will find many familiar features in the Study Guide along with many new enhancements including: · Exercises: There will be frequent use of step-by-step exercises with many screen captures and line drawings. Exercises will be presented in sidebar-like style, and will run 1 to 2 pages. · Anatomy of a Question: Question types will be diagrammed and analyzed to give readers access to the theory behind the questions themselves. · Teacher's Pet: These will be written from the instructor's perspective and will provide insight into the teaching methodologies applied to certain objectives that will give readers the "$2,000 worth of training in a $60 book feel." These will be presented in sidebar-like style and will run about 1 page. · Objectives Fast Track: End of chapter element containing each A-head from the chapter and succinct bullet points reviewing most important information from each section (same as current Solutions Fast Track). · FAQs: End of Chapter Frequently Asked Questions on objective content. These are not exam preparation questions (same as our current FAQ). · Test What You Learned: End of chapter exam preparation questions, which are in the format of the real exam. 2. SSCP DVD: The DVD will contain 1 hour of instructor-led training covering the most difficult to comprehend topics on the exam. The instructor's presentation will also include on-screen configurations and networking schematics. SSCP from solutions@syngress.com The accompanying Web site will provide students with realistic exam-simulations software. The exam will emulate the content and the look and feel of the real-exam. Students will be able to grade their performance on the Web-based exam and automatically link to the accompanying e-book for further review of difficult concepts

SSCP Study Guide and DVD Training System

Business & Money

Jeffrey Posulns

Robert J. Shimonski

Management & Leadership

See the best price to sell, buy, or rent books by Jeremy Faircloth. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Jeremy Faircloth