Hack proofing your internetwork : internet tradecraft

The E-mail Virus Protection Handbook is organised around specific e-mail clients, server environments, and anti-virus software. The first eight chapters are useful to both users and network professionals; later chapters deal with topics relevant mostly to professionals with an emphasis on how to use e-mail filtering software to monitor all incoming documents for malicious behaviour. In addition, the handbook shows how to scan content and counter email address forgery attacks. A chapter on mobile code applications, which use Java applets and Active X controls to infect email and, ultimately, other applications and whole systems is presented. The book covers spamming and spoofing: Spam is the practice of sending unsolicited email to users. One spam attack can bring down an entire enterprise email system by sending thousands of bogus messages or "mailbombing," which can overload servers. Email spoofing means that users receive messages that appear to have originated from one user, but in actuality were sent from another user. Email spoofing can be used to trick users into sending sensitive information, such as passwords or account numbers, back to the spoofer. Highly topical! Recent events such as the LoveBug virus means the demand for security solutions has never been higher Focuses on specific safeguards and solutions that are readily available to users Too many network administrators depend on the "big sky" principle of network security - they believe that the large number of Internet-connected machines out there will keep black-hat hackers away. Hack Proofing Your Network: Internet Tradecraft points out that statistics are no defense, and that such an attitude is irresponsible. The book shows steps that you can take to harden your resources against attack. Although most of the material in this book isn't up-to-the-minute (how could it be, when the tactics of attackers change daily), you can discourage hackers by implementing the strategies that it describes. Many antihacking texts assume a fair bit of knowledge, but this one doesn't. Ryan Russell and coauthors explain many terms and concepts, such as traffic sniffing, cryptography, and file differentiation ("diffing"), and the tools that evildoers use to wreak havoc on the systems that they attack - complete with Internet addresses from which you can download them. The book walks you through sample attacks, too, such as hijacking a connection by using a tool called Hunt. Overall, this is a fine introductory-to-intermediate antihacking volume that leads well into more current and advanced resources. You might want to supplement it with two other practical computer-security books: Hacking Exposed catalogues many of the tools that bad guys use, while Network Intrusion Detection helps you analyze security logs and spot attacks in progress. - David Wall Topics covered: Modes of attack, and means of defending against them Political environment governing software and networking Laws and policies springing from that environment Approaches to the problem of breaking into systems or denying their services to legitimate users Spoofing Sniffing Transmission interception Several other popular tactics" The E-mail Virus Protection Handbook is organised around specific e-mail clients, server environments, and anti-virus software. The first eight chapters is useful to both users and network professionals; later chapters deal with topics relevant mostly to professionals with an emphasis on how to use e-mail filtering software to monitor all incoming documents for malicious behaviour. In addition, the handbook shows how to scan content and counter email address forgery attacks. A chapter on mobile code applications, which use Java applets and Active X controls to infect email and, ultimately, other applications and whole systems is presented.
The book covers spamming and spoofing: Spam is the practice of sending unsolicited email to users. One spam attack can bring down an entire enterprise email system by sending thousands of bogus messages or "mailbombing," which can overload servers. Email spoofing means that users receive messages that appear to have originated from one user, but in actuality were sent from another user. Email spoofing can be used to trick users into sending sensitive information, such as passwords or account numbers, back to the spoofer.

* Highly topical! Recent events such as the LoveBug virus means the demand for security solutions has never been higher
* Focuses on specific safeguards and solutions that are readily available to users

The E-mail Virus Protection Handbook is organised around specific e-mail clients, server environments, and anti-virus software. The first eight chapters is useful to both users and network professionals; later chapters deal with topics relevant mostly to professionals with an emphasis on how to use e-mail filtering software to monitor all incoming documents for malicious behaviour. In addition, the handbook shows how to scan content and counter email address forgery attacks. A chapter on mobile code applications, which use Java applets and Active X controls to infect email and, ultimately, other applications and whole systems is presented. The book covers spamming and spoofing: Spam is the practice of sending unsolicited email to users. One spam attack can bring down an entire enterprise email system by sending thousands of bogus messages or "mailbombing," which can overload servers. Email spoofing means that users receive messages that appear to have originated from one user, but in actuality were sent from another user. Email spoofing can be used to trick users into sending sensitive information, such as passwords or account numbers, back to the spoofer. * Highly topical! Recent events such as the LoveBug virus means the demand for security solutions has never been higher * Focuses on specific safeguards and solutions that are readily available to users If you dont hack your systems, who will? One of the reasons I put this book project together is that I believe security professionals should be hackers. In this case, by hackers, I mean people who are capable of defeating security measures. This book purports to teach people how to be hackers. In reality, most of the people who buy this book will do so because they want to protect their own systems and those of their employer. So, how can you prevent break-ins to your system if you dont know how they are accomplished? How do you test your security measures? How do you make a judgment about how secure a new system is? When youre through reading Hack Proofing Your Network, youll understand terms like smashing the stack, blind spoofing, building a backward bridge, steganography, buffer overflow and youll see why you need to worry about them. You will learn how to protect your servers from attacks by using a 5-step 1. Planning 2. Network/Machine Recon 3. Research/Develop 4. Execute Attack and Achieve Goal 5. Cleanup And youll understand the theory of hacking, how to fend off local and remote attacks, and how to report and evaluate security problems. The Only Way to Stop a Hacker Is to Think Like One. ---Ryan Russell, Hack Proofing Your Network Read the business pages or computer press and you will find a major news story involving a breech of network security. Windows NT, as the premier network platform, has many important security features but they are difficult to configure and manage. With the launch of Windows 2000 Server (the successor to NT Server 4.0), Microsoft has announced several new security features that must be quickly understood by network administrators. This book provides information about the Microsoft Windows 2000 operating system security services, including security management using the Microsoft Security Configuration Tool Set, support for IP Security, the Encrypting File System, Public Key Infrastructure, smart cards, and Kerberos. * The release of this book is targeted to correspond with the release of Windows 2000 Server * The security of an organization's data and communications is critical to its survival * Brings Clarity to topics that are notoriously difficult to grasp As more and more companies take their critical applications and business functions online, they need to know that their networks, systems, and data are protected. Cisco Systems, the world's largest internetworking vendor, has developed hardware and software solutions that provide security by tracking access by customers and business partners and prohibiting access by unauthorized outsiders. Configuring Cisco IP Security covers the full range of Cisco Secure hardware and software solutions, including PIX Firewall, Intrusion Detection System, and Authentication Agent, to help engineers and administrators protect their ISPs, corporate networks, and e-commerce sites. The book's user-friendly format includes a technology overview, a "fast-track" summary, easy-to-read chapters written by subject-matter experts, and dozens of helpful illustrations, screen shots, and captions. Network security has become an increasing problem, with stories about sometimes significant security breaches a common feature of the nightly news. The premier network platform, Windows NT, has many important security features but they are difficult to configure and manage. With the launch of its successor, Windows 2000 Server, Microsoft has announced new security features that must be quickly grasped by network administrators.

This book addresses this new technology in depth. Written in the practical, results-oriented style for which Syngress Media books are noted, it provides detailed analysis and nuts-and-bolts information about 2000's operating system security services, including the Microsoft Security Configuration Tool Set, support for IP security, the Encrypting File System, Public Key Infrastructure, smart cards, and Kerberos.

Don't wait until it's too late to find out you have security holes in your Cisco network. As security threats to enterprise networks continue to mount, it is critical that network managers know how to properly deploy and configure the Cisco Secure family of products. This book describes in detail how to detect network security incidents, measure vulnerability and policy compliance, and manage security policy across an extended organization. Readers will find coverage of the following security products which make up the Cisco Secure Cisco Secure PIX Firewall Cisco Secure Access Control Server Cisco Secure Integrated Software Cisco Secure Scanner Cisco Secure Integrated VPN Software Cisco Secure Intrusion Detection System Cisco Secure VPN Client Cisco Secure Policy Manager The "2000 CSI/FBI Computer Crime and Security Survey," conducted in early 2000 by the Computer Security Institute (CSI) with participation by the San Francisco office of the Federal Bureau of Investigation (FBI), showed that 90 percent of survey participants from large U.S. corporations, financial institutions, medical institutions, universities, and government agencies detected security breaches in 1999. "E-mail Virus Protection Handbook will help systems administrators and end-users secure their e-mail. It shows how e-mail servers work, and discusses the vulnerabilities common to e-mail clients and servers. It shows how to encrypt e-mail messages, use antivirus and personal firewall software, and secure the operating system from attack."--Jacket This work provides information about the Microsoft Windows 2000 operating system security devices, including security management using the Microsoft Security Configuratin Tool Set, support for IP security, the Encrypting File System, Public Key Infrastructure, smart cards and Kerberos. Developed for IT professionals, this text details the strategies, tactics, and methods for designing, configuring, and maintaining Cisco Secure networks. It includes discussions on topics ranging from secure VPNs and intranets, to protected LANs and WANs. Showing IT professionals how to make a security assessment of their own system, the theory here is backed by real-world examples from Unix, Windows and Cisco routers and switches.