Authors: Joseph Kong.
Paperback, 144 pages
Publisher: No Starch Press
Publication Date: 2007-04-10


Reviews :

    Though rootkits have a fairly negative image, they can be used for both good and evil. Designing BSD Rootkits arms you with the knowledge you need to write offensive rootkits, to defend against malicious ones, and to explore the FreeBSD kernel and operating system in the process.

Organized as a tutorial, Designing BSD Rootkits will teach you the fundamentals of programming and developing rootkits under the FreeBSD operating system. Author Joseph Kong's goal is to make you smarter, not to teach you how to write exploits or launch attacks. You'll learn how to maintain root access long after gaining access to a computer and how to hack FreeBSD.

Kongs liberal use of examples assumes no prior kernel-hacking experience but doesn't water down the information. All code is thoroughly described and analyzed, and each chapter contains at least one real-world application.

Included:

The fundamentals of FreeBSD kernel module programming

Using call hooking to subvert the FreeBSD kernel

Directly manipulating the objects the kernel depends upon for its internal record-keeping

Patching kernel code resident in main memory; in other words, altering the kernel's logic while it's still running

How to defend against the attacks described

Hack the FreeBSD kernel for yourself!...

Authors: Linda Volonino. Reynaldo Anzaldua. Jana Godwin.
Paperback, 552 pages
Publisher: Prentice Hall
Publication Date: 2006-08-31
Edition: 1

Reviews :

    For introductory and intermediate courses in computer forensics, digital investigations, or computer crime investigation By applying information systems, computer security, and criminal justice principles and practices to crime investigations and other legal actions, this text teaches students how to use forensically-sound methodologies and software to acquire admissible electronic evidence (e-evidence) with coverage of computer and email forensics, cell phone and IM forensics, and PDA and Blackberry forensics....

Authors: Andrew Vladimirov. Konstantin Gavrilenko. Andrei Mikhailovsky.
Paperback, 400 pages
Publisher: McGraw-Hill Osborne Media
Publication Date: 2005-12-15
Edition: 1

Reviews :

    Here is the first book to focus solely on Cisco network hacking, security auditing, and defense issues. Using the proven Hacking Exposed methodology, this book shows you how to locate and patch system vulnerabilities by looking at your Cisco network through the eyes of a hacker. The book covers device-specific and network-centered attacks and defenses and offers real-world case studies....

Authors: Ragnar Benson.
Paperback, 152 pages
Publisher: Paladin Press
Publication Date: 1996-09


Reviews :

    Forget about using the old "dead-baby's birth-certificate" ruse to get new ID. Everyone's on to that trick. What you need is the know-how to make your own documents on a home computer. And by following the simple instructions in here, you can....

Authors: Shaheen Shariff.
Paperback, 299 pages
Publisher: Routledge
Publication Date: 2008-04-11
Edition: 1

Reviews :

    This book looks in depth at the emerging issue of cyber-bullying. In this increasingly digital world cyber-bullying has emerged as an electronic form of bullying that is difficult to monitor or supervise because it often occurs outside the physical school setting and outside school hours on home computers and personal phones. These web-based and mobile technologies are providing young people with what has been described as: 'an arsenal of weapons for social cruelty'. These emerging issues have created an urgent need for a practical book grounded in comprehensive scholarship that addresses the policy-vacuum and provides practical educational responses to cyber-bullying.Written by one of the few experts on the topic, "Cyber-Bullying" develops guidelines for teachers, head teachers and administrators regarding the extent of their obligations to prevent and reduce cyber-bullying. The book also highlights ways in which schools can network with parents, police, technology providers and community organizations to provide support systems for victims (and perpetrators) of cyber-bullying....

Authors: Chad Steel.
Paperback, 408 pages
Publisher: Wiley
Publication Date: 2006-05-15


Reviews :

    The evidence is in--to solve Windows crime, you need Windows tools


An arcane pursuit a decade ago, forensic science today is a household term. And while the computer forensic analyst may not lead as exciting a life as TV's CSIs do, he or she relies just as heavily on scientific principles and just as surely solves crime.

Whether you are contemplating a career in this growing field or are already an analyst in a Unix/Linux environment, this book prepares you to combat computer crime in the Windows world. Here are the tools to help you recover sabotaged files, track down the source of threatening e-mails, investigate industrial espionage, and expose computer criminals.
* Identify evidence of fraud, electronic theft, and employee Internet abuse
* Investigate crime related to instant messaging, Lotus Notes(r), and increasingly popular browsers such as Firefox(r)
* Learn what it takes to become a computer forensics analyst
* Take advantage of sample forms and layouts as well as case studies
* Protect the integrity of evidence
* Compile a forensic response toolkit
* Assess and analyze damage from computer crime and process the crime scene
* Develop a structure for effectively conducting investigations
* Discover how to locate evidence in the Windows Registry...

Authors: Kyle Rankin.
Paperback, 420 pages
Publisher: Make Books
Publication Date: 2007-11-20
Edition: 2

Reviews :

    If you think Knoppix is just a Linux demo disk, think again. Klaus Knopper created an entire Linux distribution on a bootable CD (and now a DVD) so he could use his favorite open source tools on any computer. This book includes a collection of tips and techniques for using the enormous amount of software Knoppix offers-not just to work and play, but also to troubleshoot, repair, upgrade, and disinfect your system without having to install a thing.

Knoppix Hacks is just like the distribution it covers: a veritable Swiss Army knife packed full of tools. Scores of industrial-strength hacks-many of them new to this second edition-cover both the standard Knoppix CD and the feature-rich DVD "Maxi" distribution, which is included with this book. Discover how to use Knoppix to its full potential as your desktop, rescue CD, or as a launching point for your own live CD.

With Knoppix Hacks, you can:

• Investigate features of the KDE desktop and its Internet applications



• Save your settings and data between reboots with persistent storage



• Employ Knoppix as a system administration multitool to replace failed servers and more



• Use the CD/DVD as a rescue disc to repair filesystems or a system that won't boot



• Rescue Windows systems with Knoppix to back up files and settings, hack the registry, and more



• Explore other live CDs based on Knoppix that could augment your system



• Easily install the popular Debian GNU/Linux distribution with all of your hardware detected and configured



• Remaster Knoppix to include your favorite software and custom branding

Whether you're a new Linux user, power user, or system administer, this book helps you take advantage of Knoppix and customize it to your needs. You may just find ways to use Knoppix that you never considered....

Authors: David Pollino. Bill Pennington. Tony Bradley. Himanshu Dwivedi.
Paperback, 400 pages
Publisher: McGraw-Hill Osborne Media
Publication Date: 2006-04-25
Edition: 3

Reviews :

   

The stories about phishing attacks against banks are so true-to-life, it’s chilling.” --Joel Dubin, CISSP, Microsoft MVP in Security

Every day, hackers are devising new ways to break into your network. Do you have what it takes to stop them? Find out in Hacker’s Challenge 3. Inside, top-tier security experts offer 20 brand-new, real-world network security incidents to test your computer forensics and response skills. All the latest hot-button topics are covered, including phishing and pharming scams, internal corporate hacking, Cisco IOS, wireless, iSCSI storage, VoIP, Windows, Mac OS X, and UNIX/Linux hacks, and much more. Each challenge includes a detailed explanation of the incident--how the break-in was detected, evidence and clues, technical background such as log files and network maps, and a series of questions for you to solve. In Part II, you’ll get a detailed analysis of how the experts solved each incident.

...

Authors: John R. Vacca.
Paperback, 832 pages
Publisher: Charles River Media
Publication Date: 2005-05-27
Edition: 2

Reviews :

    Using personal computers as their weapons, hackers and criminals (some only 11 years old) have attacked the Internet, government agencies, financial companies, small businesses, and the credit card accounts of unsuspecting individuals. This completely updated book/CD package provides a complete overview of computer forensics from information security issues to "crime scene investigation," seizure of data, determining the "fingerprints" of the crime, and tracking down the criminals. The book's companion CD-ROM contains demos of the latest computer forensics software. Numerous exercises, case studies, and vignettes of actual crimes enhance the topics under discussion, and provide the reader with solutions to computer crime in the real world....

    The mightiest fortresses in the world can fail, and when that happens all you can do (you being the person responsible for castle security) is figure out what went wrong, what damage was done, and by whom. If the castle was located in the right kind of kingdom--to take a metaphor too far--you can hope to prosecute the perpetrator. Computer Forensics: Computer Crime Scene Investigation explains how to gather evidence of computer crimes in such a way that it will be more likely to lead to a conviction in a criminal court. It's an interesting legal area--after all, it's almost always you, and not any law enforcement agency doing the surveillance and evidence-gathering on your computer systems--and John Vacca has done a fair bit of research. This book will probably expand your thinking on the subject of information security.

On the other hand, though Vacca gives good general advice (don't lose volatile information by shutting a compromised machine down midattack; do be prepared to translate memory dumps into jury-readable form), he sometimes meanders into generalizations and irrelevancies. The fact that terrorists distribute their plans via public Web sites is certainly scary, but hardly helpful to someone wanting to prosecute the guy who vandalized the corporate Web site. Similarly interesting, but practically irrelevant to most of us, are discussions of high-energy radio frequency (HERF) and electromagnetic pulse (EMP) weapons that can knock out information systems from a distance. More focus on evidence collection in organizational computing environments would make this book useful, rather than just generally informative. --David Wall

Topics covered: How to gather evidence of a hack attack after the fact, and a lot of general-interest information on the state of crime and law enforcement in computer technology. Coverage is almost all general in nature, dealing with how to formulate a strategy and deal with events without getting into details of any operating system or computing environment....

Authors: Stuart McClure. Joel Scambray. George Kurtz.
Paperback, 752 pages
Publisher: McGraw-Hill Osborne Media
Publication Date: 2009-02-02
Edition: 6

Reviews :

   

The tenth anniversary edition of the world's bestselling computer security book!

The original Hacking Exposed authors rejoin forces on this new edition to offer completely up-to-date coverage of today's most devastating hacks and how to prevent them. Using their proven methodology, the authors reveal how to locate and patch system vulnerabilities. The book includes new coverage of ISO images, wireless and RFID attacks, Web 2.0 vulnerabilities, anonymous hacking tools, Ubuntu, Windows Server 2008, mobile devices, and more.

Hacking Exposed 6 applies the authors' internationally renowned computer security methodologies, technical rigor, and "from-the-trenches" experience to make computer technology usage and deployments safer and more secure for businesses and consumers.

"A cross between a spy novel and a tech manual." --Mark A. Kellner, Washington Times

Andquot;The seminal book on white-hat hacking and countermeasures . . . Should be required reading for anyone with a server or a network to secure.Andquot; --Bill Machrone, PC Magazine

Andquot;A must-read for anyone in security . . . One of the best security books available.Andquot; --Tony Bradley, CISSP, About.com

....