Security Warrior
Cyrus Peikari, Anton Chuvakin
- 出版商: O'Reilly
- 出版日期: 2004-02-03
- 售價: $1,430
- 貴賓價: 9.5 折 $1,359
- 語言: 英文
- 頁數: 556
- 裝訂: Paperback
- ISBN: 0596005458
- ISBN-13: 9780596005450
-
相關分類:
資訊安全
-
相關翻譯:
防駭戰士 (Security Warrior) (繁中版)
下單後立即進貨 (約1週~2週)
買這商品的人也買了...
-
$680$578 -
$1,330$1,260 -
$920$782 -
$880$695 -
$1,050$998 -
$350$298 -
$650$553 -
$590$466 -
$1,490$1,416 -
$690$538 -
$750$638 -
$800$760 -
$560$476 -
$420$328 -
$850$723 -
$280$218 -
$480$379 -
$750$638 -
$720$569 -
$780$616 -
$780$663 -
$590$460 -
$540$459 -
$1,100$1,078 -
$299$254
相關主題
商品描述
When it comes to network security, many users and administrators are running
scared, and justifiably so. The sophistication of attacks against computer
systems increases with each new Internet worm.
What's the worst an
attacker can do to you? You'd better find out, right? That's what Security
Warrior teaches you. Based on the principle that the only way to defend
yourself is to understand your attacker in depth, Security Warrior
reveals how your systems can be attacked. Covering everything from reverse
engineering to SQL attacks, and including topics like social engineering,
antiforensics, and common attacks against UNIX and Windows systems, this book
teaches you to know your enemy and how to be prepared to do battle.
Security Warrior places particular emphasis on reverse
engineering. RE is a fundamental skill for the administrator, who must be aware
of all kinds of malware that can be installed on his machines -- trojaned
binaries, "spyware" that looks innocuous but that sends private data back to its
creator, and more. This is the only book to discuss reverse engineering for
Linux or Windows CE. It's also the only book that shows you how SQL injection
works, enabling you to inspect your database and web applications for
vulnerability.
Security Warrior is the most comprehensive and
up-to-date book covering the art of computer war: attacks against computer
systems and their defenses. It's often scary, and never comforting. If you're on
the front lines, defending your site against attackers, you need this book. On
your shelf--and in your hands.
Table of Contents
Preface
Part I. Software Cracking
1. Assembly Language
Registers
ASM Opcodes
References2. Windows Reverse Engineering
History of RCE
Reversing Tools
Reverse Engineering Examples
References3. Linux Reverse Engineering
Basic Tools and Techniques
A Good Disassembly
Problem Areas
Writing New Tools
References4. Windows CE Reverse Engineering
Windows CE Architecture
CE Reverse Engineering Fundamentals
Practical CE Reverse Engineering
Reverse Engineering serial.exe
References5. Overflow Attacks
Buffer Overflows
Understanding Buffers
Smashing the Stack
Heap Overflows
Preventing Buffer Overflows
A Live Challenge
ReferencesPart II. Network Stalking
6. TCP/IP Analysis
A Brief History of TCP/IP
Encapsulation
TCP
IP
UDP
ICMP
ARP
RARP
BOOTP
DHCP
TCP/IP Handshaking
Covert Channels
IPv6
Ethereal
Packet Analysis
Fragmentation
References7. Social Engineering
Background
Performing the Attacks
Advanced Social Engineering
References8. Reconnaissance
Online Reconnaissance
Conclusion
References9. OS Fingerprinting
Telnet Session Negotiation
TCP Stack Fingerprinting
Special-Purpose Tools
Passive Fingerprinting
Fuzzy Operating System Fingerprinting
TCP/IP Timeout Detection
References10. Hiding the Tracks
From Whom Are You Hiding?
Postattack Cleanup
Forensic Tracks
Maintaining Covert Access
ReferencesPart III. Platform Attacks
11. Unix Defense
Unix Passwords
File Permissions
System Logging
Network Access in Unix
Unix Hardening
Unix Network Defense
References12. Unix Attacks
Local Attacks
Remote Attacks
Unix Denial-of-Service Attacks
References13. Windows Client Attacks
Denial-of-Service Attacks
Remote Attacks
Remote Desktop/Remote Assistance
References14. Windows Server Attacks
Release History
Kerberos Authentication Attacks
Kerberos Authentication Review
Defeating Buffer Overflow Prevention
Active Directory Weaknesses
Hacking PKI
Smart Card Hacking
Encrypting File System Changes
Third-Party Encryption
References15. SOAP XML Web Services Security
XML Encryption
XML Signatures
ReferencePart IV. Advanced Defense
16. SQL Injection
Introduction to SQL
SQL Injection Attacks
SQL Injection Defenses
PHP-Nuke Examples
References17. Wireless Security
Reducing Signal Drift
Problems with WEP
Cracking WEP
Practical WEP Cracking
VPNs
TKIP
SSL
Airborne Viruses
References18. Audit Trail Analysis
Log Analysis Basics
Log Examples
Logging States
When to Look at the Logs
Log Overflow and Aggregation
Challenge of Log Analysis
Security Information Management
Global Log Aggregation
References19. Intrusion Detection Systems
IDS Examples
Bayesian Analysis
Hacking Through IDSs
The Future of IDSs
Snort IDS Case Study
IDS Deployment Issues
References20. Honeypots
Motivation
Building the Infrastructure
Capturing Attacks
References21. Incident Response
Case Study: Worm Mayhem
Definitions
Incident Response Framework
Small Networks
Medium-Sized Networks
Large Networks
References22. Forensics and Antiforensics
Hardware Review
Information Detritus
Forensics Tools
Bootable Forensics CD-ROMs
Evidence Eliminator
Forensics Case Study: FTP Attack
ReferencesPart V. Appendix
Appendix: Useful SoftICE Commands and Breakpoints
Index