Syngress

Stealing the Network: How to Own the Box is NOT intended to be a "install, configure, update, troubleshoot, and defend book." It is also NOT another one of the countless Hacker books out there. So, what IS it? It is an edgy, provocative, attack-oriented series of chapters written in a first hand, conversational style. World-renowned network security personalities present a series of 25 to 30 page chapters written from the point of an attacker who is gaining access to a particular system. This book portrays the "street fighting" tactics used to attack networks and systems. Not just another "hacker" book, it plays on "edgy" market success of Steal this Computer Book with first hand, eyewitness accounts A highly provocative expose of advanced security exploits Written by some of the most high profile "White Hats", "Black Hats" and "Gray Hats" Gives readers a "first ever" look inside some of the most notorious network intrusions

How to Own the Box

Stealing The Network

The National Security Agency's INFOSEC Assessment Methodology (IAM) provides guidelines for performing an analysis of how information is handled within an organization: looking at the systems that store, transfer, and process information. It also analyzes the impact to an organization if there is a loss of integrity, confidentiality, or availability. Security Assessment shows how to do a complete security assessment based on the NSA's guidelines. Security Assessment also focuses on providing a detailed organizational information technology security assessment using case studies. The Methodology used for the assessment is based on the National Security Agency's (NSA) INFOSEC Assessment Methodology (IAM). Examples will be given dealing with issues related to military organizations, medical issues, critical infrastructure (power generation etc). Security Assessment is intended to provide an educational and entertaining analysis of an organization, showing the steps of the assessment and the challenges faced during an assessment. It will also provide examples, sample templates, and sample deliverables that readers can take with them to help them be better prepared and make the methodology easier to implement. Everything You Need to Know to Conduct a Security Audit of Your Organization Step-by-Step Instructions for Implementing the National Security Agency's Guidelines Special Case Studies Provide Examples in Healthcare, Education, Infrastructure, and more

Case Studies for Implementing the NSA IAM

Security Assessment

The only way to stop a hacker is to think like one! Sun Microsystem's venerable and well-respected operating system Solaris is currently in version 8, and runs on both Intel and Sun Hardware. Solaris is one of the most comprehensive and popular UNIX operating systems available. Hundreds of thousands of business enterprises, both small and large, depend on Sun Solaris to keep their business alive - but have they protected themselves against hackers? Hack Proofing Sun Solaris 8 is the latest addition to the popular Hack Proofing series from Syngress Publishing. Providing hands-on information written by both security professionals and self-proclaimed hackers, this book will give system administrators the edge they need to fortify their Sun Solaris operating system against the never-ending threat of hackers. - The fifth title in the popular series that brought us the bestseller Hack Proofing Your Network - Teaches strategy and techniques using forensic-based analysis - Up to the minute Web-based support with solutions@syngress.com

Hack Proofing Sun Solaris 8

This book covers what an administrator needs to plan out and integrate a DMZ into a network for small, medium and Enterprise networks. In most enterprises the perception is that a firewall provides a hardened perimeter. However, the security of internal networks and hosts is usually very soft. In such an environment, a non-DMZ system that is offering services to the Internet creates the opportunity to leapfrog to other hosts in the soft interior of your network. In this scenario your internal network is fair game for any attacker who manages to penetrate your so-called hard perimeter.- There are currently no books written specifically on DMZs- This book will be unique in that it will be the only book that teaches readers how to build a DMZ using all of these products: ISA Server, Check Point NG, Cisco Routers, Sun Servers, and Nokia Security Appliances.- Dr. Thomas W. Shinder is the author of the best-selling book on Microsoft's ISA, Configuring ISA Server 2000. Customers of the first book will certainly buy this book.

Building DMZs For Enterprise Networks

Enable enterprise-wide information access using Cisco wireless networks Wireless networks are rapidly becoming a viable alternative to traditional wired LANs (Local Area Networks), mainly because of the convenience they provide. By implementing a wireless network, companies eliminate the need and expense of installing fixed cables, outlet ports or patch panels. Building a Cisco Wireless LAN is for individuals designing and supporting a Cisco wireless LAN. The book contains detailed information on the process for the thorough and accurate network design for the Cisco 340, 350, and UBR 7200 series. The contains detailed information on the configuration and troubleshooting of a Cisco WLAN installation. The book offers an introduction to wireless technology from the fundamental principles to the actual implementation. The first book for Cisco LAN users looking to upgrade to a wireless network Ideal for Network administrators looking into wireless network technology for the first time

Building a Cisco Wireless Lan

From the authors of the bestselling Hack Proofing Your Network! Yahoo!, E-Bay, Amazon. Three of the most popular, well-established, and lavishly funded Web sites in existence, yet hackers managed to penetrate their security systems and cripple these and many other Web giants for almost 24 hours. E-Commerce giants, previously thought to be impenetrable are now being exposed as incredibly vulnerable. This book will give e-commerce architects and engineers insight into the tools and techniques used by hackers to compromise their sites. The security of e-commerce sites is even more imperative than non-commerce sites, because the site has the added responsibility of maintaining the security of their customer's personal and financial information. Hack Proofing Your E-Commerce Site will provide computer architects and engineers all of the information they need to design and implement security measures. * Heightened media awareness of malicious attacks against "secure" sites guarantees a wide audience * Uses forensics-based analysis to give the reader insight to the mind of a hacker. This understanding is crucial for security professionals to defend against attacks

The Only Way to Stop a Hacker is to Think Like One

Hack Proofing Your E-commerce Web Site

Updated coverage of the most confusing Windows 2000 component in this new edition of a Syngress bestseller. Active Directory Services dramatically changes the way IT professionals design, plan, configure and administer their Windows NT networks. The primary benefits of Active Directory Services are its extensibility, scalability, and ease of management as compared to prior generations of Windows NT. Systems Engineers will probably spend much of their time over the next several years planning for and deploying Active Directory Services in many different environments. Windows 2000 Active Directory, Second Edition gives IT professionals a head start; it provides updated coverage of everything they will need to succeed. Many Windows 2000 administrators are struggling with Active Directory and need a comprehensive book on the subject The first completely updated book on Active Directory to hit the market

Windows 2000 Active Directory

MCSE Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure (Exam 70-297) Study Guide and DVD Training System is a one-of-a-kind integration of text, DVD-quality instructor led training, and Web-based exam simulation and remediation. This system gives readers 100% coverage of the official Microsoft exam objectives plus test preparation software for the edge needed to pass the exam on your first try. * DVD Provides a "Virtual Classroom": Get the benefits of instructor led training at a fraction of the cost and hassle. * Guaranteed Coverage of All Exam Objectives: If the topic is listed in Microsoft's exam objectives, it is covered here. * Fully Integrated Learning: This system includes a study guide, DVD training, and Web-based practice exams

Study Guide & DVD Training System

MCSE Designing a Windows Server 2003 Active Directory and Network Infrastructure(Exam 70-297)

Microsoft Corporation, the world's largest software vendor, and Cisco Systems, the world's largest internetworking vendor, have jointly developed a common software interface for managing Cisco hardware on Microsoft networks: Cisco Network Services for Active Directory (CNS/AD). Until now, network administrators have been forced to master two completely different product interfaces to effectively manage their networks. Configuring Cisco Network Services for Active Directory is the first book announced for this enormous Information Technology audience. This book is a practical guide to managing CNS/AD. It focuses on how to promote system efficiency and improve network service by using CNS/AD to centralize network management, using the directory as a repository for all policies that govern network usage. The book also describes how to manage Cisco Internetworking Operating System (IOS) networking features and network resources in the same unified way as other enterprise resources, such as user access controls, files, and printers. * This book coincides with the launch of Windows 2000 Server, the host system for the product * This new technology promises to reduce administrative overheads * Over 500,000 Microsoft and Cisco certification guides from Syngress have been sold over the last two years. * Cisco is red hot, and this is the merging of its technologies with Microsoft!

Building CISCO Networks for Windows 2000

Visual Basic has long been the language of choice when designing Windows-based applications and the Web. Touted as both the most popular and productive computing language, Visual Basic has amassed quite a following of devoted programmers, and is a sought after programming skill. With the introduction of .NET Enterprise, Microsoft launch VB.NET, offering a streamlined, simplified version of Visual Basic language. With increased power, scalability, functionality and reliability, VB.NET is positioned to be the most productive tool in a programmer's toolbox. VB.NET Developer's Guide is written for previous Visual Basic Programmers looking to harness the power of the new features and functionality incorporated in Visual Basic.NET. Timely coverage of newly released product which Visual Basic users will be eager to learn VB.NET Developer's Guide is one of the first comprehensive reference for programmers and developers anxious to learn about the new technology

VB.Net Web Developer's Guide

"Bluetooth (enabled devices) will ship in the billions of units once it gains momentum." - Martin Reynolds, Gartner Group Bluetooth is the most exciting development in wireless computing this decade! Bluetooth enabled devices can include everything from network servers, laptop computers and PDAs, to stereos and home security systems. Most Bluetooth products to hit the market in 2001 will be PC cards for laptop computers and access points, which allow up to seven Bluetooth devices to connect to a network. Reports indicate that by the end of 2003 there will be over 2 billion Bluetooth-enabled devices. Bluetooth-enabled devices communicate with each other through embedded software applications. Bluetooth Developer's Guide to Embedded Applications will provide embedded applications developers with advanced tutorials and code listings written to the latest Bluetooth's latest specification, version 1.1. Written by Bluetooth pioneers from market leaders in Bluetooth software development, Extended Systems and Cambridge Silicon Radio, this is the first advanced level Bluetooth developer title on the market. White Hot Topic While other books introduce readers to the possibilities of Bluetooth, this is the first comprehensive, advanced level programming book written specifically for embedded application developers Authors are responsible for SDK, the market-leading development tool for Bluetooth Comes with Syngress' revolutionary Credit Card CD containing a printable HTML version of the book, all of the source code and sample applications from Extended Systems and Cambridge Silicon Radio

Bluetooth Application Developer's Guide

MCSE Designing Security for a Microsoft Windows Server 2003 Network (Exam 70-298) Study Guide and DVD Training System is a one-of-a-kind integration of text, DVD-quality instructor led training, and Web-based exam simulation and remediation. This system gives you 100% coverage of the official Microsoft 70-298 exam objectives plus test preparation software for the edge you need to pass the exam on your first try: DVD Provides a "Virtual Classroom": Get the benefits of instructor led training at a fraction of the cost and hassle Guaranteed Coverage of All Exam Objectives: If the topic is listed in Microsoft's Exam 70-298 objectives, it is covered here Fully Integrated Learning: This system includes a study guide, DVD training and Web-based practice exams

Study Guide and DVD Training System

MCSE Designing Security for a Windows Server 2003 Network (Exam 70-298)

MCSE Exam 70-296 Study Guide & DVD Training System: Planning, Implementing and Maintaining a Windows Server 2003 Environment for an MCSE Certified on Windows 2000 is a one-of-a-kind integration of text, DVD-quality instructor led training, and Web-based exam simulation and remediation. This system gives you 100% coverage of the official Microsoft 70-296 exam objectives plus test preparation software for the edge you need to pass the exam on your first try. In June, 2003 Microsoft will launch beta exams for the Windows Server 2003 certification line. Exams will likely go live the following August and September. This launch is a comprehensive revamping of the MCSE (Microsoft Certified System Enginner) track with all new core exams and all new electives. In addition, the MCSA (Microsoft Certified System Administrator) certification will expand its program to include an additional upgrade exam for MCSAs wanting to become MCSEs. The launch of this new certification track means that all current MCSEs, representing an installed base of approximately 200,000 (source: MCP Magazine) will need to recertify under Windows Server 2003. In addition, any MCP looking to become an MCSE--estimates are about 1.2 million (source: MCP Magazine)--will also have to continue their certifications under the new program. Many industry experts expect the Windows 2003 certification, and product line as well, to be a more popular track since many organziations are still using NT and plan to skip 2000 and go directly to 2003. * DVD Provides a "Virtual Classroom": Get the benefits of instructor led training at a fraction of the cost and hassle. * Guaranteed Coverage of All Exam Objectives: If the topic is listed in Microsoft's Exam 70-296 objectives, it is covered here. * Fully Integrated Learning: This system includes a study guide, DVD training and Web-based practice exams.

MCSE: Planning, Implementing and Maintaining a Windows Server 2003 Environment for an MCSE Certified on Windows 2000 (Exam 70-296)

E-mail configuration for the System Administrator. Windows 2000 users will find Configuring Exchange Server 2000 valuable for its coverage of all the popular e-mail clients, such as Outlook and Outlook Express. In addition, System and E-Mail Administrators will find the coverage of large system E-Mail Providers such as Exchange indispensable. Configuring Exchange Server 2000 focuses on e-mail configuration from the standpoint of the system administrator. It covers installation and management of all the major email programs, as well as covering mobile email, web-based email, email security and implementation of email within multinational companies. * Covers the full range of e-mail security features * Avoids theory and deals in specific safeguards and solutions that are readily available to users

configuring exchange server 2000

Kevin Clague

Miguel Agullo

Create Virtual 3D LEGO Models Using LEGO Software Power Tools LEGO Master Builders have created a powerful set of tools that are distributed as freeware to the LEGO community to assist LEGO fans in their building adventures. Until now, these tools have been difficult to find, and even more difficult to configure to work with one another. Here, in one book, readers will find steps for installing and using all of the most popular LEGO freeware applications. Also, all of the applications are consolidated into one simple-to-install program that allows readers to be up and running in minutes Ø Wide market appeal. This book will appeal to the huge established consumer base of the LEGO community, as well as to children, parents, and teachers who may have been intimidated by the difficulties of bringing all of these applications under one roof. Ø The only book of its kind to cover the wide variety of applications available. Some books in the past have touched on one or two of these LEGO applications, but none has covered them all in such detail. Ø CD provides all of these freeware applications in one easy to install program. Included CD packs more than 8 applications into one easy-to-use format, making it easy for readers to have access to all of these applications in minutes and avoid the headaches of trying to download, install, configure, set up folder structures, and troubleshoot such a wide variety of loosely related freeware applications. Ø Will coincide with the release of Lpub. This will be the first in-depth look at LPub, the new creation of Kevin Clague, which ties LDraw, MLCad, L3P, and POV-Ray together to allow users to easily create professional quality LEGO instructions for both the printed page and the web.

Lego Software Power Tools With LDraw MLCad and LPub

A new edition the most popular Hack Proofing book around! IT professionals who want to run secure networks, or build secure software, need to know about the methods of hackers. The second edition of the best seller Hack Proofing Your Network, teaches about those topics, including: · The Politics, Laws of Security, Classes of Attack, Methodology, Diffing, Decrypting, Brute Force, Unexpected Input, Buffer Overrun, Sniffing, Session Hijacking, Spoofing, Server Holes, Client Holes, Trojans and Viruses, Reporting Security Problems, Choosing Secure Systems The central idea of this book is that it's better for you to find the holes in your network than it is for someone else to find them, someone that would use them against you. The complete, authoritative guide to protecting your Windows 2000 Network. Updated coverage of an international bestseller and series flagship Covers more methods of attack and hacker secrets Interest in topic continues to grow - network architects, engineers and administrators continue to scramble for security books Written by the former security manager for Sybase and an expert witness in the Kevin Mitnick trials A great addition to the bestselling "Hack Proofing..." series Windows 2000 sales have surpassed those of Windows NT Critical topic. The security of an organization's data and communications is crucial to its survival and these topics are notoriously difficult to grasp Unrivalled web support at www.solutions@syngress.com

Hack Proofing Your Network

This book provides system administrators with all of the information as well as software they need to run Ethereal Protocol Analyzer on their networks. There are currently no other books published on Ethereal, so this book will begin with chapters covering the installation and configuration of Ethereal. From there the book quickly moves into more advanced topics such as optimizing Ethereal's performance and analyzing data output by Ethereal. Ethereal is an extremely powerful and complex product, capable of analyzing over 350 different network protocols. As such, this book also provides readers with an overview of the most common network protocols used, as well as analysis of Ethereal reports on the various protocols. The last part of the book provides readers with advanced information on using reports generated by Ethereal to both fix security holes and optimize network performance. Provides insider information on how to optimize performance of Ethereal on enterprise networks. Book comes with a CD containing Ethereal, Tethereal, Nessus, Snort, ACID, Barnyard, and more! Includes coverage of popular command-line version, Tethereal.

Ethereal Packet Sniffing

Check Point Software Technologies is the worldwide leader in securing the Internet. The company's Secure Virtual Network (SVN) architecture provides the infrastructure that enables secure and reliable Internet communications. Check Point recently announced a ground-breaking user interface that meets the industry's next generation Internet security requirements, including simplified security management for increasingly complex environments. Built upon Check Point's Secure Virtual Network (SVN) architecture, the Next Generation User Interface revolutionizes the way security administrators define and manage enterprise security by further integrating management functions into a security dashboard and creating a visual picture of security operations. The Next Generation User Interface delivers unparalleled ease-of-use, improved security and true end-to-end security management. Check Point's revenues have more than doubled in each of the last two years, while capturing over 50% of the VPN market and over 40% of the firewall market according to IDC Research. The explosive growth of the company is further evidenced by over 29,000 IT professionals becoming Check Point Certified so far. This book will be the complimentary to Syngress' best-selling Check Point Next Generation Security Administration, which was a foundation-level guide to installing and configuring Check Point NG. This book will assume that readers have already mastered the basic functions of the product and they now want to master the more advanced security and VPN features of the product. Written by a team of Check Point Certified Instructors (the most prestigious Check Point certification) this book will provide readers with a complete reference book to Check Point NG and advanced case studies that illustrate the most difficult to implement configurations. Although not a Study Guide, this book will cover all of the objectives on Check Point's CCSE Exam. · The reader will learn to design and configure a Virtual Private Network (VPN). · The reader will learn to configure Check Point NG for High Availability (HA), which is the ability of a system to perform its function continuously (without interruption) for a significantly longer period of time than the reliabilities of its individual components would suggest. · The reader will learn to use SeucureUpdate, which allows them to perform simultaneous, secure, enterprise-wide software updates.

Advanced Configuration and Troubleshooting

CheckPoint NG VPN 1/Firewall 1

Special Ops: Internal Network Security Guide is the solution for the impossible 24-hour IT work day. By now, most companies have hardened their perimeters and locked out the "bad guys," but what has been done on the inside? This book attacks the problem of the soft, chewy center in internal networks. We use a two-pronged approach-Tactical and Strategic-to give readers a complete guide to internal penetration testing. Content includes the newest vulnerabilities and exploits, assessment methodologies, host review guides, secure baselines and case studies to bring it all together. We have scoured the Internet and assembled some of the best to function as Technical Specialists and Strategic Specialists. This creates a diversified project removing restrictive corporate boundaries. The unique style of this book will allow it to cover an incredibly broad range of topics in unparalleled detail. Chapters within the book will be written using the same concepts behind software development. Chapters will be treated like functions within programming code, allowing the authors to call on each other's data. These functions will supplement the methodology when specific technologies are examined thus reducing the common redundancies found in other security books. This book is designed to be the "one-stop shop" for security engineers who want all their information in one place. The technical nature of this may be too much for middle management; however technical managers can use the book to help them understand the challenges faced by the engineers who support their businesses. Ø Unprecedented Team of Security Luminaries. Led by Foundstone Principal Consultant, Erik Pace Birkholz, each of the contributing authors on this book is a recognized superstar in their respective fields. All are highly visible speakers and consultants and their frequent presentations at major industry events such as the Black Hat Briefings and the 29th Annual Computer Security Institute Show in November, 2002 will provide this book with a high-profile launch. Ø The only all-encompassing book on internal network security. Windows 2000, Windows XP, Solaris, Linux and Cisco IOS and their applications are usually running simultaneously in some form on most enterprise networks. Other books deal with these components individually, but no other book provides a comprehensive solution like Special Ops. This book's unique style will give the reader the value of 10 books in 1.

Special Ops: Host and Network Security for Microsoft Unix and Oracle

This book covers Exam 200-14 in great detail, digging into some of the most important details involved in locking down Windows systems and networks and taking a systemic approach to keeping Windows networks and systems secured. Boasting a one-of-a-kind integration of text, DVD-quality instructor-led training, and Web-based exam simulation and remediation, this study guide & DVD training system gives students 100% coverage of official Microsoft MCSA exam objectives plus realistic test prep. The System package consists of: 1) MCSE Implementing and Administering Security in a Windows 2000 Network Study Guide: Syngress's 1 million study guide users will find tried-and-true features and exciting new enhancements; included are step-by-step exercises plus end-of-chapter bulleted objectives reviews, FAQs, and realistic test prep questions in the same format as those on the actual exam. 2) Security DVD: A full hour of instructor-led training, complete with on-screen configurations and networking schematics, demystifying the toughest exam topics. 3) Security from solutions@syngress.com. Accompanying Web site provides students with authentic interactive exam-simulation software that grades their results and automatically links to e-book study guide for instant review of answer concepts. Covers Critical Security Exam. This exam was created to meet the demand for a security-based examination which verifies an administrator's ability to implement and maintain secure Windows 2000 network. Fast growing certification gains in popularity. The new MCSE certification launched in March and already there are 17,000 MCSA-certified professionals (data as of May, 31, 2002, Microsoft Corp.). This exam also serves as an elective for MCP status and other certifications. Best selling author with over 150,000 copies in print. Tom Shinder's books have over 150,000 copies in print and he's a regular speaker at the security industry's leading Black Hat Briefings. His Configuring ISA Server 2000, has sold over 45,000 units worldwide in a year. First in-depth security exam from Microsoft. As Microsoft certification guru Ed Tittell points out, "this is the first real, nuts-and-bolts security exam in the MCP line-up. This exam is the first MCP test to really dig into some of the most important details involved in locking down Windows systems and networks in the first place, and to step systematically through the processes involved in keeping Windows networks and systems secured thereafter." $2,000 worth of training wrapped in a $60 book/DVD/Web-enhanced training system. Certification Magazine's 2001 reader survey revealed that the average certification costs nearly $2,000. So our low-priced study package delivers unsurpassed value for cost-conscious IT departments and trainees.

Syngress

Books

Your next favorite book is out there