Penetration Testing and Network Defense

Andrew Whitaker, Daniel P. Newman

  • 出版商: Cisco Press
  • 出版日期: 2005-10-31
  • 售價: $2,150
  • 貴賓價: 9.5$2,043
  • 語言: 英文
  • 頁數: 624
  • 裝訂: Paperback
  • ISBN: 1587052083
  • ISBN-13: 9781587052088
  • 相關分類: Penetration-test
  • 立即出貨(限量) (庫存=2)



Book Description

The practical guide to simulating, detecting, and responding to network attacks 

  • Create step-by-step testing plans
  • Learn to perform social engineering and host reconnaissance
  • Evaluate session hijacking methods
  • Exploit web server vulnerabilities
  • Detect attempts to breach database security
  • Use password crackers to obtain access information
  • Circumvent Intrusion Prevention Systems (IPS) and firewall protections and disrupt the service of routers and switches
  • Scan and penetrate wireless networks
  • Understand the inner workings of Trojan Horses, viruses, and other backdoor applications
  • Test UNIX, Microsoft, and Novell servers for vulnerabilities
  • Learn the root cause of buffer overflows and how to prevent them
  • Perform and prevent Denial of Service attacks

Penetration testing is a growing field but there has yet to be a definitive resource that instructs ethical hackers on how to perform a penetration test with the ethics and responsibilities of testing in mind. Penetration Testing and Network Defense offers detailed steps on how to emulate an outside attacker in order to assess the security of a network.


Unlike other books on hacking, this book is specifically geared towards penetration testing. It includes important information about liability issues and ethics as well as procedures and documentation. Using popular open-source and commercial applications, the book shows you how to perform a penetration test on an organization’s network, from creating a test plan to performing social engineering and host reconnaissance to performing simulated attacks on both wired and wireless networks.


Penetration Testing and Network Defense also goes a step further than other books on hacking, as it demonstrates how to detect an attack on a live network. By detailing the method of an attack and how to spot an attack on your network, this book better prepares you to guard against hackers. You will learn how to configure, record, and thwart these attacks and how to harden a system to protect it against future internal and external attacks.


Full of real-world examples and step-by-step procedures, this book is both an enjoyable read and full of practical advice that will help you assess network security and develop a plan for locking down sensitive data and company resources.


“This book goes to great lengths to explain the various testing approaches that are used today and gives excellent insight into how a responsible penetration testing specialist executes his trade.”

–Bruce Murphy, Vice President, World Wide Security Services, Cisco Systems®





- 創建逐步測試計劃
- 學習進行社交工程和主機偵察
- 評估會話劫持方法
- 利用網頁伺服器漏洞進行攻擊
- 偵測企圖入侵資料庫安全性
- 使用密碼破解器獲取訪問資訊
- 繞過入侵防護系統(IPS)和防火牆保護,並干擾路由器和交換機的服務
- 掃描和入侵無線網路
- 了解特洛伊木馬、病毒和其他後門應用程式的內部運作
- 測試UNIX、Microsoft和Novell伺服器的漏洞
- 了解緩衝區溢位的根本原因以及如何預防
- 執行和防止拒絕服務攻擊





- Bruce Murphy,思科系統全球安全服務副總裁