Authors: Joseph Kong.
Paperback, 144 pages
Publisher: No Starch Press
Publication Date: 2007-04-10


Reviews :

    Though rootkits have a fairly negative image, they can be used for both good and evil. Designing BSD Rootkits arms you with the knowledge you need to write offensive rootkits, to defend against malicious ones, and to explore the FreeBSD kernel and operating system in the process.

Organized as a tutorial, Designing BSD Rootkits will teach you the fundamentals of programming and developing rootkits under the FreeBSD operating system. Author Joseph Kong's goal is to make you smarter, not to teach you how to write exploits or launch attacks. You'll learn how to maintain root access long after gaining access to a computer and how to hack FreeBSD.

Kongs liberal use of examples assumes no prior kernel-hacking experience but doesn't water down the information. All code is thoroughly described and analyzed, and each chapter contains at least one real-world application.

Included:

The fundamentals of FreeBSD kernel module programming

Using call hooking to subvert the FreeBSD kernel

Directly manipulating the objects the kernel depends upon for its internal record-keeping

Patching kernel code resident in main memory; in other words, altering the kernel's logic while it's still running

How to defend against the attacks described

Hack the FreeBSD kernel for yourself!...

Authors: Jarod Wilson. Ed Tittel. Matthew Wright. Justin Korelc.
Paperback, 432 pages
Publisher: Wiley
Publication Date: 2006-08-28


Reviews :

    Want control? Build your own MythTV PC.

You don't do stuff like this to cut corners. You do it because you want what you want?and because it's fun. And a personalized MythTV is so much more than a PVR. You can combine HDTV, DVD, all kinds of music, radio, photos, even a plug-in videophone module. All you need is a little Linux know-how, assorted software components and plug-ins, an adventurous nature, and this book to tell you how it all goes together. Voil?he entertainment hub of your dreams.

Learn to do all this and much more:

• Choose HD capture cards and sound drivers.
• Install and configure MythTV.
• Build your program guides.
• Use xine to add DVD menu support.
• Pass raw digital streams to an external decoder.
• Do cool things with your remote control.
• Hack your own themes.
• Export MythTV .nuv recordings to other formats.

A companion Web site provides even more of the know-how you need.

Visit www.wiley.com/go/extremetech for links, updates, news about recent developments in MythTV, and resources shared by other readers like you....

Authors: ISECOM.
Paperback, 614 pages
Publisher: McGraw-Hill Osborne Media
Publication Date: 2008-07-15
Edition: 3

Reviews :

   

The Latest Linux Security Solutions

This authoritative guide will help you secure your Linux network--whether you use Linux as a desktop OS, for Internet services, for telecommunications, or for wireless services. Completely rewritten the ISECOM way, Hacking Exposed Linux, Third Edition provides the most up-to-date coverage available from a large team of topic-focused experts. The book is based on the latest ISECOM security research and shows you, in full detail, how to lock out intruders  and defend your Linux systems against catastrophic attacks.

• Secure Linux by using attacks and countermeasures from the latest OSSTMM research
• Follow attack techniques of PSTN, ISDN, and PSDN over Linux
• Harden VoIP, Bluetooth, RF, RFID, and IR devices on Linux
• Block Linux signal jamming, cloning, and eavesdropping attacks
• Apply Trusted Computing and cryptography tools for your best defense
• Fix vulnerabilities in DNS, SMTP, and Web 2.0 services
• Prevent SPAM, Trojan, phishing, DoS, and DDoS exploits
• Find and repair errors in C code with static analysis and Hoare Logic

...

Authors: Linda Volonino. Reynaldo Anzaldua. Jana Godwin.
Paperback, 552 pages
Publisher: Prentice Hall
Publication Date: 2006-08-31
Edition: 1

Reviews :

    For introductory and intermediate courses in computer forensics, digital investigations, or computer crime investigation By applying information systems, computer security, and criminal justice principles and practices to crime investigations and other legal actions, this text teaches students how to use forensically-sound methodologies and software to acquire admissible electronic evidence (e-evidence) with coverage of computer and email forensics, cell phone and IM forensics, and PDA and Blackberry forensics....

Authors: Gordon Meyer.
Paperback, 328 pages
Publisher: O'Reilly Media, Inc.
Publication Date: 2004-10-25


Reviews :

    So much of what is commonplace today was once considered impossible, or at least wishful thinking. Laser beams in the operating room, cars with built-in guidance systems, cell phones with email access. There's just no getting around the fact that technology always has, and always will be, very cool. But technology isn't only cool; it's also very smart. That's why one of the hottest technological trends nowadays is the creation of smart homes. At an increasing rate, people are turning their homes into state-of-the-art machines, complete with more switches, sensors, and actuators than you can shake a stick at. Whether you want to equip your home with motion detectors for added security, install computer-controlled lights for optimum convenience, or even mount an in-home web cam or two purely for entertainment, the world is now your oyster. Ah, but like anything highly technical, creating a smart home is typically easier said than done. Thankfully, Smart Home Hacks takes the guesswork out of the process. Through a seemingly unending array of valuable tips, tools, and techniques, Smart Home Hacks explains in clear detail how to use Mac, Windows, or Linux to achieve the automated home of your dreams. In no time, you'll learn how to turn a loose collection of sensors and switches into a well-automated and well-functioning home no matter what your technical level may be. Smart Home Hacks covers a litany of stand-alone and integrated smart home solutions designed to enhance safety, comfort, and convenience in new and existing homes. Kitchens, bedrooms, home offices, living rooms, and even bathrooms are all candidates for smart automation and therefore are all addressed in Smart Home Hacks. Intelligently written by engineering guru and George Jetson wannabe, Gordon Meyer, Smart Home Hacks leaves no stone unturned. From what to purchase to how to use your remote control, it's the ultimate guide to understanding and implementing complete or partial home automation....

Authors: David Endler. Mark Collier.
Paperback, 539 pages
Publisher: McGraw-Hill Osborne Media
Publication Date: 2006-11-28
Edition: 1

Reviews :

   

Sidestep VoIP Catastrophe the Foolproof Hacking Exposed Way

"This book illuminates how remote users can probe, sniff, and modify your phones, phone switches, and networks that offer VoIP services. Most importantly, the authors offer solutions to mitigate the risk of deploying VoIP technologies." --Ron Gula, CTO of Tenable Network Security

Block debilitating VoIP attacks by learning how to look at your network and devices through the eyes of the malicious intruder. Hacking Exposed VoIP shows you, step-by-step, how online criminals perform reconnaissance, gain access, steal data, and penetrate vulnerable systems. All hardware-specific and network-centered security issues are covered alongside detailed countermeasures, in-depth examples, and hands-on implementation techniques. Inside, you'll learn how to defend against the latest DoS, man-in-the-middle, call flooding, eavesdropping, VoIP fuzzing, signaling and audio manipulation, Voice SPAM/SPIT, and voice phishing attacks.

• Find out how hackers footprint, scan, enumerate, and pilfer VoIP networks and hardware
• Fortify Cisco, Avaya, and Asterisk systems
• Prevent DNS poisoning, DHCP exhaustion, and ARP table manipulation
• Thwart number harvesting, call pattern tracking, and conversation eavesdropping
• Measure and maintain VoIP network quality of service and VoIP conversation quality
• Stop DoS and packet flood-based attacks from disrupting SIP proxies and phones
• Counter REGISTER hijacking, INVITE flooding, and BYE call teardown attacks
• Avoid insertion/mixing of malicious audio
• Learn about voice SPAM/SPIT and how to prevent it
• Defend against voice phishing and identity theft scams

...

Authors: Bruce Schneier.
Hardcover, 432 pages
Publisher: John Wiley & Sons
Publication Date: 2000-08-14
Edition: 1

Reviews :

    Praise for Sectrets and Lies "This is a business issue, not a technical one, and executives can no longer leave such decisions to techies. That's why Secrets and Lies belongs in every manager's library." Business Week "Clear and passionate, this is the definitive book on Internet security from the leading thinker on the subject." The Industry Standard "Startlingly lively...a jewel box of little surprises you can actually use." Fortune "Secrets is a comprehensive, well-written work on a topic few business leaders can afford to neglect." Business 2.0 "Instead of talking algorithms to geeky programmers, [Schneier] offers a primer in practical computer security aimed at those shopping, communicating or doing business online almost everyone, in other words." The Economist "Schneier peppers the book with lively anecdotes and aphorisms, making it unusually accessible." Los Angeles Times...

    Whom can you trust? Try Bruce Schneier, whose rare gift for common sense makes his book Secrets and Lies: Digital Security in a Networked World both enlightening and practical. He's worked in cryptography and electronic security for years, and has reached the depressing conclusion that even the loveliest code and toughest hardware still will yield to attackers who exploit human weaknesses in the users. The book is neatly divided into three parts, covering the turn-of-the-century landscape of systems and threats, the technologies used to protect and intercept data, and strategies for proper implementation of security systems. Moving away from blind faith in prevention, Schneier advocates swift detection and response to an attack, while maintaining firewalls and other gateways to keep out the amateurs.

Newcomers to the world of Schneier will be surprised at how funny he can be, especially given a subject commonly perceived as quiet and dull. Whether he's analyzing the security issues of the rebels and the Death Star in Star Wars or poking fun at the giant software and e-commerce companies that consistently sacrifice security for sexier features, he's one of the few tech writers who can provoke laughter consistently. While moderately pessimistic on the future of systems vulnerability, he goes on to relieve the reader's tension by comparing our electronic world to the equally insecure paper world we've endured for centuries--a little smart-card fraud doesn't seem so bad after all. Despite his unfortunate (but brief) shill for his consulting company in the book's afterword, you can trust Schneier to dish the dirt in Secrets and Lies. --Rob Lightner ...

Authors: Kyle Rankin.
Paperback, 420 pages
Publisher: Make Books
Publication Date: 2007-11-20
Edition: 2

Reviews :

    If you think Knoppix is just a Linux demo disk, think again. Klaus Knopper created an entire Linux distribution on a bootable CD (and now a DVD) so he could use his favorite open source tools on any computer. This book includes a collection of tips and techniques for using the enormous amount of software Knoppix offers-not just to work and play, but also to troubleshoot, repair, upgrade, and disinfect your system without having to install a thing.

Knoppix Hacks is just like the distribution it covers: a veritable Swiss Army knife packed full of tools. Scores of industrial-strength hacks-many of them new to this second edition-cover both the standard Knoppix CD and the feature-rich DVD "Maxi" distribution, which is included with this book. Discover how to use Knoppix to its full potential as your desktop, rescue CD, or as a launching point for your own live CD.

With Knoppix Hacks, you can:

• Investigate features of the KDE desktop and its Internet applications



• Save your settings and data between reboots with persistent storage



• Employ Knoppix as a system administration multitool to replace failed servers and more



• Use the CD/DVD as a rescue disc to repair filesystems or a system that won't boot



• Rescue Windows systems with Knoppix to back up files and settings, hack the registry, and more



• Explore other live CDs based on Knoppix that could augment your system



• Easily install the popular Debian GNU/Linux distribution with all of your hardware detected and configured



• Remaster Knoppix to include your favorite software and custom branding

Whether you're a new Linux user, power user, or system administer, this book helps you take advantage of Knoppix and customize it to your needs. You may just find ways to use Knoppix that you never considered....

Authors: Thomas Akin.
Paperback, 190 pages
Publisher: O'Reilly Media, Inc.
Publication Date: 2002-02
Edition: 1

Reviews :

    As a network administrator, auditor or architect, you know the importance of securing your network and finding security solutions you can implement quickly. This succinct book departs from other security literature by focusing exclusively on ways to secure Cisco routers, rather than the entire network. The rational is simple: If the router protecting a network is exposed to hackers, then so is the network behind it. Hardening Cisco Routers is a reference for protecting the protectors. Written by Thomas Akin, an experienced Certified Information Systems Security Professional (CISSP) and Certified Cisco Academic Instructor (CCAI), the book emphasizes practicality and a hands-on approach. At the end of each chapter, Akin includes a Checklist that helps you double-check the configurations you have been instructed to make. They serve as quick references for future security procedures. Concise and to the point, Hardening Cisco Routers supplies you with all the tools necessary to turn a potential vulnerability into a strength....

    To harden a router is to render it more heavily defended and more difficult to attack. Because routers (by definition) serve as points of entry into your network, it makes sense to devote extra effort to their security. Hardening Cisco Routers shows how to make adjustments to the configurations of routers from Cisco Systems to improve their resistance to attack, particularly external attack. This is essentially a book of specialized Internetwork Operating System (IOS) commands, as well as explanations of their behavior. It'll appeal to the router administrator--employed either by an organization's internal network staff, an outside consultancy, or a service provider--who wants to know which IOS commands he or she should add to routers' configuration files to tighten their security without a lot of hassle.

The great thing about this book is that you can approach it in either of two ways. If you just want to clamp down on your routers' security weaknesses as soon as possible, you can begin with the checklists at the end of each chapter (each of which focuses on a particular area, like SMTP) or the big one in an appendix, which is comprehensive. These checklists include both "how" and "why" information, as exemplified by "Disable ICMP broadcasts with the no ip directed-broadcast command." If you want more information on the big picture, or want to prepare for a specific kind of attack, read the individual chapters for detailed advice on how to set IOS to behave as you want. --David Wall

Topics covered: Internetwork Operating System (IOS) commands you can use to protect Cisco Systems routers from a variety of attacks. Specialized sections deal with security assessment, auditing, access control, privileges, optional services, and the legal importance of your login banners' contents....

Authors: Tim Bitson.
Paperback, 504 pages
Publisher: Wiley
Publication Date: 2006-10-16


Reviews :

    Do more than TALK about the weather

Maybe you can't change it, but you can measure it. And onceyou build your weather station, the sky's the limit. You can shareupdates on your own weather Web site. Create a smart sprinklerfor a lot less than thatfancy system on TV. Freeup your PC with a stand-alone weather station.Protect against lightning strikes with a surgesuppressor. Take yourweather station with you. Finding out which waythe wind is blowing canbe a lot of fun.

The Toys
* 1-Wire weather station
* Sensors for humidity, wind, rainfall, barometric pressure, lightning, and temperature
* Weather Web server
* Lightning surge suppressor
* LED weather display
* Smart sprinkler timer
* Appliance controller
* Smart home thermostat
* Stand-alone weather station

Complete instructions and code for these andother hardware and software projects--build them all or pick and choose!

Companion Web site

At www.weathertoys.net you'll find a complete weather station software package, source code, and specialized software tools to support these projects, plus lots of additional resources....