Page 34 of Computer Books Fall 2005 by O'Reilly

security security build password policies that won t be ignored programming .net security by adam freeman allen jones june 2003 isbn 0-596-00442-7 714 pages $44.95 no starch press silence on the wire by michal zalewski april 2005 isbn 1-59327-046-1 312 pages $39.95 syngress publishing new os x for hackers at heart by bruce potter chris hurley johnny long tom owad russ rodgers october 2005 isbn 1-597-49040-7 512 pages $49.95 new insider threat by dr eric cole and sandra ring november 2005 isbn 1-597-49048-2 350 pages $34.95 new securing im and p2p applications for the enterprise by paul piccard october 2005 isbn 1-597490-17-2 650 pages $49.95 with the spread of web-enabled desktop clients and web-server based applications developers can no longer afford to treat security as an afterthought it s one topic in fact that .net forces you to address since microsoft has placed security-related features at the core of the .net framework yet because a developer s carelessness or lack of experience can still allow a program to be used in an unintended way programming .net security shows you how the various tools will help you write secure applications author michal zalewski is respected in the hacking and security communities for his intelligence curiosity and creativity and this book is truly unlike anything else silence on the wire is no humdrum white paper or howto manual for protecting one s network rather this narrative explores a variety of unique uncommon and often elegant security challenges that defy classification and eschew the traditional attacker-victim model secure coding principles practices by mark g graff kenneth r van wyk june 2003 isbn 0-596-00242-4 224 pages $29.95 as great as os x is out of the box hackers are eager to push the boundaries by tweaking and tuning the software and hardware in order to do the things that really excite them such as penetration testing or software development this book attempts to capture these purpose-driven modifications and shows how the best and brightest use os x to do cutting edge research development and just plain fooling around as network defense perimeters get stronger and stronger it security law enforcement and intelligence professionals are realizing that the greatest threats to their networks are increasingly coming from within their own organizations these insiders comprised of current and former employees or contractors can use their inside knowledge of a target network to carry out acts of sabotage espionage and theft of data crackproof your software by pavol cerven november 2002 isbn 1-886411-79-4 272 pages includes cd-rom $34.95 new configuring check point ngx vpn-1/firewall-1 by barry j stiefel simon desmeules october 2005 isbn 1-597490-31-8 608 pages $49.95 new rfid security by pete lindstrom frank thornton november 2005 isbn 1-597-49047-4 448 pages $49.95 as an it professional you know that the majority of the workstations on your network now contain im and p2p applications that you did not select test install or configure as a result malicious hackers as well as virus and worm writers are targeting these inadequately secured applications for attack this book teaches you how to take back control of your workstations and reap the benefits provided by these applications while protecting your network from the inherent dangers new perfect passwords selection protection authentication by mark burnett november 2005 isbn 1-597-49041-5 200 pages $24.95 despite their myriad manifestations and different targets nearly all attacks on computer systems have one fundamental cause the code used to run far too many systems today is not secure flaws in its design implementation testing and operations allow attackers all-too-easy access secure coding principles practices looks at the problem of bad code in a new way this concise book explains why so much code today is filled with vulnerabilities and tells you what you must do to avoid writing code that can be exploited by attackers this essential resource for software developers highlights the weak points in well-protected software shows how crackers break common protection schemes and how to defend against crackers includes in-depth discussions of anti-debugging and anti-disassembling the cd-rom contains compression and encoding software debuggers and anti-debugging tricks practical protection demonstrations and extended examples from the book practical unix internet security 3rd edition by simson garfinkel gene spafford alan schwartz 3rd edition february 2003 isbn 0-596-00323-4 986 pages $54.95 bestseller hacking the art of exploitation by jon erickson november 2003 isbn 1-59327-007-0 264 pages $39.95 wal-mart was the main force behind the widespread adoption of bar codes in the 80s they now have started the conversion from bar codes to rfid tags and are requiring all suppliers to switch to rfid tags as well or lose their business rfid will become a mainstream technology whether liked or not and anyone using barcode technology needs to have their rfid solution in place quickly this book teaches you about the security implications of rfid configuring check point ngx vpn-1/firewall-1 is the perfect reference for anyone migrating from earlier versions of check point s flagship firewall/vpn product as well as those deploying vpn-1/firewall-1 for the first time ngx includes dramatic changes and new enhanced features to secure the integrity of your network s data communications and applications from the plethora of blended threats which can breech your security through your network perimeter web access and increasingly common internal threats nessus snort ethereal power tools customizing open source security applications by brian caswell gilbert ramirez jay beale noam rathaus august 2005 isbn 1-59749-020-2 400 pages $39.95 new penetration tester s open source toolkit by hd moore jay beale roelof temmingh haroon meer charl van der walt october 2005 isbn 1-597-49021-0 750 pages includes cd-rom $59.95 new security log management by jacob babbin october 2005 isbn 1-597-49042-3 450 pages $49.95 if you have snort nessus and ethereal up and running and now you re ready to customize code and torque these tools to their fullest potential this book is for you it provides the inside scoop on coding the most effective and efficient snort rules nessus plug-ins with nasl and ethereal capture and display filters when done with this book you will be a master at coding your own tools to detect malicious traffic scan for vulnerabilities and capture only the packets you really care about practical unix internet security 3rd edition provides detailed coverage of today s security and networking issues in addition to covering the four most popular unix variants today solaris linux freebsd and mac os x the authors have added far more information about linux security policy and cryptography and have added new sections on embedded systems biometrics additional internet protocols new authentication systems such as ldap and pam and anti-theft technologies a comprehensive introduction to the techniques of exploitation and creative problem-solving methods commonly referred to as hacking it shows how hackers exploit programs and write exploits instead of just how to run other people s exploits this book explains the technical aspects of hacking including stack-based overflows heap-based overflows string exploits returninto-libc shellcode and cryptographic attacks on 802.11b this unique book shows you how to use a combination of open source software such as tcpdstats and snort perfmonitor to create succinct meaningful reports to give you the big picture of your network s overall health and well being so if you need to analyze and prioritize everything from how much of your bandwidth is devoted to browsing espn.com to the most targeted machines in your ids logs this is the book for you this is the first fully integrated penetration testing book and bootable linux cd containing the auditor security collection which includes over 300 of the most effective and commonly used open source attack and penetration testing tools this powerful tool kit and authoritative reference is written by the security industry s foremost penetration testers including hd moore jay beale and sensepost this unique package provides you with a completely portable and bootable linux attack distribution and authoritative reference to the toolset included and the required methodology order toll free · 800-998-9938 · weekdays 7am­3:30pm pacific time user passwords are the keys to the network kingdom yet most users choose overly simplistic passwords that anyone could guess while system administrators demand impossible to remember passwords littered with obscure characters and random numerals author mark burnett has accumulated and analyzed over 2,000,000 user passwords and in this highly entertaining and informative book filled with dozens of illustrations reveals his findings and balances the rigid needs of security professionals against the ease of use desired by users this book teaches you how to cope with the world of password policies password crackers and human predictability it teaches specific password patterns that will meet even the most unyielding security policy requirements but that users will remember in a snap 67 66 order online anytime www.oreilly.com

[close]