Defend I.T.: Security by Example

Ajay Gupta, Scott Laliberte

  • 出版商: Addison Wesley
  • 出版日期: 2004-05-29
  • 定價: $1,400
  • 售價: 2.1$299
  • 語言: 英文
  • 頁數: 384
  • 裝訂: Paperback
  • ISBN: 0321197674
  • ISBN-13: 9780321197672
  • 相關分類: 資訊安全

立即出貨(限量) (庫存=2)

買這商品的人也買了...

商品描述

Table of Contents:

Preface.

About the Authors.

Introduction.

I. BASIC HACKING.

1. Getting to Know the Enemy: Nmap the Target Network.

Network Architecture.

Port Scans.

OS Identification.

Additional OS Identification Tools.

Partial Picture.

Hiding.

Lessons Learned.

2. Home Architecture.

Introduction.

Background.

The Incident.

The Monthly Bill.

The E-mail.

The Investigation.

The Disclosure.

The Investigation at REM.

Incident Reconstruction.

Repercussions.

The Hacker.

Aspen's Response.

Lessons Learned.

Access Logs.

Responding to Changing Usage Patterns.

User Names and Passwords.

Architecture.

3. No Service for You!

The Discovery.

The Response.

The Process.

DoS Root Kit.

DDoS IRC Bots.

Lessons Learned.

References.

II. CURRENT METHODS.

4. Look, Ma, No Wires!

Introduction.

Background.

The Project.

Existing Security.

Recommendations.

The End State.

5. Virus Outbreak I.

Introduction.

How Did You Get In?

How Much Have We Lost?

Lessons Learned.

6. Virus Outbreak II: The Worm.

Introduction.

Background.

The Worm Infection.

Diagnosis.

Plan of Attack.

Count Your Losses.

Lessons Learned.

System Backups.

Constant Monitoring.

Contingency Plans.

Corrective Actions.

7. Changing Face.

Introduction.

The Assessment.

Lessons Learned.

And What Did the Consultant Learn?

III. ADDITIONAL ITEMS ON THE PLATE.

8. Protecting Borders: Perimeter Defense with an IDS.

Background.

The Company.

Developing Requirements.

Market Research.

Pilot Testing.

Test Plans.

Implementation on Production.

Implementation Follow-up.

Lessons Learned.

9. Disaster All Around.

Introduction.

Disaster Strikes.

Analyzing the Incident.

The Negatives.

The Positives.

The Solution.

IT Risk Assessment.

Agency Tasks.

Lessons Learned.

10. Security Is the Best Policy.

Introduction.

The Company.

The Call.

The Interviews.

Evaluating the Interviews.

The Initial Writing.

The Review Stage.

You Have a Policy . . . Now What?

Policy Awareness.

11. HIPAA: Security by Regulation.

Introduction.

The Assessment.

The Client.

The External Review.

The Internal Review.

Analysis.

Consequences.

The Solution.

Conclusion.

IV. OLD SCHOOL.

12. A War-Dialing Attack.

War Dialing.

The Attack.

Lessons Learned.

Restricting Access.

Implementing User Privileges.

Maintaining Logs.

Creating a Demilitarized Zone.

Installing Digital Lines.

Placing Controls on Vendor Accounts.

13. A Low-Tech Path into the High-Tech World.

Introduction.

Doing Your Homework.

The Hack.

The Fallout.

Lessons Learned.

IV. COMPUTER FORENSICS.

14. Industrial Espionage.

Spies All around Us.

The Investigation.

Acquire Evidence.

Authenticate the Evidence.

Analyze the Evidence.

Archive the Evidence.

Lessons Learned.

Intellectual Asset Protection.

Additional Intellectual Asset Considerations.

Chain of Custody.

Federal Guidelines of Computer Evidence Admissibility.

15. Executive Fraud.

Introduction: The Whistle-Blower.

Preparation.

The Nature and Source of the Allegation.

Evidence Collection and Chain of Custody.

Take Your Hands off That Keyboard and Slowly Back Away.

Drive Imaging.

Review of the Logical File Structure.

Review of Unallocated Space and File Slack.

Smoking Gun.

Reporting.

Lessons Learned.

16. Cyber Extortion.

Introduction.

To Press or Not to Press Charges.

The Investigation.

Acquire Evidence.

Authenticate the Evidence.

Analyze the Evidence.

Archive the Evidence and Results.

Lessons Learned.

What Would Be Done Differently Today?

Hardware.

Software.

Conclusion.

Recommended Reading.

Index