| |
New Titles |
| |
Buffer Overflow Attacks
The SANS Institute maintains a list of the "Top 10 Software Vulnerabilities." At the current time, over half of these vulnerabilities are exploitable by Buffer Overflow attacks, making this class of attack one of the most common and most dangerous weapon used by malicious attackers. This is the first book specifically aimed at detecting, exploiting, and preventing the most common and dangerous attacks.
|
Hacking a Terror Network
Written by a certified Arabic linguist from the Defense Language Institute with extensive background in decoding encrypted communications, this cyber-thriller uses a fictional narrative to provide a fascinating and realistic "insider's look" into technically sophisticated covert terrorist communications over the Internet. The accompanying CD-ROM allows readers to "hack along" with the story line, by viewing the same Web sites described in the book containing encrypted, covert communications.
|
Configuring NetScreen Firewalls
Configuring NetScreen Firewalls is the first book to deliver an in-depth look at the NetScreen firewall product line. It covers all of the aspects of the NetScreen product line from the SOHO devices to the Enterprise NetScreen firewalls. Advanced troubleshooting techniques and the NetScreen Security Manager are also covered.
|
| |
Upcoming Titles |
| |
Cisco Voice Over IP Security
(April)
After struggling for years, you finally think you've got your network secured from malicious hackers and obnoxious spammers. Just when you think it's safe to go back into the water, VoIP finally catches on. Now your newly converged network is vulnerable to DoS attacks, hacked gateways leading to unauthorized free calls, call eavesdropping, malicious call redirection, and spam over Internet Telephony (SPIT). This book details both VoIP attacks and defense techniques and tools.
|
InfoSec Career Hacking
(April)
Do you spend hours coding on an application for the sheer joy and challenge? How about taking the time to analyze every piece of traffic that crosses your network, dissecting packets, and making sure nothing hidden is going on? If you want to refine these skills (and learn many new ones) to build an InfoSec career in a top corporation or government agency, this book is for you!
|
Sockets, Shellcode, Porting, and Coding
(March)
In this ground breaking book, best-selling author James C. Foster provides never before seen detail on how the fundamental building blocks of software and operating systems are exploited by malicious hackers and provides working code and scripts in C/C++, Java, Perl and NASL to detect and defend against the most dangerous attacks.
The book is logically divided into the Five, main categories representing the major skill sets required by security professionals and software developers: Coding, Sockets, Shellcode, Porting Applications, and Coding Security Tools. Topics covered include:
- Writing and automating exploits on windows systems with all new exploits.
- Perform Zero-Day exploit forensics through reverse engineering.
- Enhance nikto by up to 7000 percent with custom code.
- Step-by-step guides on porting public exploits to work on Windows, Linux, Unix, and even Mac!
- Custom, optimized shellcode that can exploit nearly any systems.
- Custom COM objects to wrap and automate exploit binaries and security tools such as netcat and hping.
- Never before seen Nmap-style IP input function included, detailed, and implemented.
|
Cisco PIX Firewalls
(March)
Cisco PIX Firewall is the world's most used network firewall, protecting internal networks from unwanted intrusions and attacks. Virtual Private Networks (VPNs) are the means by which authorized users are allowed through PIX Firewalls. Network engineers and security specialists must constantly balance the need for air-tight security (Firewalls) with the need for on-demand access (VPNs).
In this book, Umer Khan, author of the #1 best selling PIX Firewall book, provides a concise, to-the-point blueprint for fully integrating these two essential pieces of any enterprise network. It is fully current with the newest PIX Software Version 7 and is appropriate for the new CSPFA exam covering PIX Software Version 7.
|
Network+ Study Guide & Practice Exams
(March)
Over 750,000 IT professionals have prepared for exams using Syngress-authored study guides. The Network+ Study Guide & Practice Exams is the new title from Syngress covering the revised Network+ exam, to be released in early 2005 and rendering all existing study guides obsolete. The Network+ Study Guide & Practice Exams covers all the objectives on the CompTIA exam, including the features and functions of networking components, and ensuring that you have the knowledge and skills needed to install, configure and troubleshoot basic networking hardware, protocols and services.
|
Black Hat Physical Device Security
(February)
This book provides you a methodology to approach and detect similar types of vulnerabilities in individual security devices that plague the software industry. Bypassing key components in a security system can negate the presence of other subsystems. Our content supplies an applicable process of assessment that will never age. As long as hardware and software work together and data is sent over wires or airwaves the methods contained in this book will help detect flaws and information leakage in physical security devices. Not only do we supply a methodology and checklist for finding common exposures, our book also supplies real world scenarios and show how bypassing specific equipment can render a security system powerless.
|
Microsoft Log Parser Toolkit
(February)
Do you want to find Brute Force Attacks against your Exchange Server? Would you like to know who is spamming you? Do you need to monitor the performance of your IIS Server? Are there intruders out there you would like to find? Would you like to build user logon reports from your Windows Server? Would you like working scripts to automate all of these tasks and many more for you? If so, "Microsoft Log Parser Toolkit" is the book for you.
|
Software Piracy Exposed
(February)
For every $2 worth of software purchased legally, $1 worth of software is pirated illegally. For the first time ever, the dark underground of how software is stolen and traded over the internet is revealed. The technical detail provided will open the eyes of software users and manufacturers worldwide! This book is a tell-it-like-it-is exposé of how tens of billions of dollars worth of software is stolen every year.
|
Cyber Spying
(February)
Have you ever wondered about that friend your spouse e-mails, or who they spend hours chatting online with? Are you curious about what your children are doing online, who they meet, and what they talk about? Do you worry about them finding drugs and other illegal items online, and wonder what they look at? This book shows you how to monitor and analyze your family's online behavior.
|
Aggressive Network Self-Defense
(February)
Are you tired of feeling vulnerable to the latest security vulnerabilities? Are you fed up with vendors who take too long to release security patches, while criminals waste no time in exploiting those very same holes? Do you want to know who, exactly, is really trying to hack your network? Do you think EVERYONE should be responsible for securing their owns systems so they can't be used to attack yours? Do you think you have the right to defend yourself, your network, and ultimately your business against aggressors and adversaries? If so, Aggressive Network Self-Defense is the book for you. Learn how you can take your security into your own hands to identify, target, and nullify your adversaries.
|
Apple I Replica Creation
(February)
Computers like the Apple I are incredibly simple machines. Even if you have no experience with electronics, this book will teach you how to build your own replica of the Apple I, show you how to program it yourself, and introduce you to exciting ways to expand your Apple I to control lights, motors, and more.
|
Deploying Citrix MetaFrame Presentation Server 3.0 with Windows Server 2003 Terminal Services
(January)
Whether you are a systems administrator managing the day to day aspects of a Server Based Computing environment or an Engineer, Architect or Consultant looking to build and implement Thin Client solutions, you will find this book a constant companion that will assist you in the design and implementation phases.
|
Intrusion Prevention and Active Response
There are many books that exhaust the topic of Intrusion Detection, but there are few that cover with any depth the concept of Intrusion Prevention. This book serves as a reference for next generation IDS technology that provides active response and Intrusion Prevention functions both at the network and host level.
|