|
Showing 1 - 4 of
4 matches in All Departments
Cisco IOS (the software that runs the vast majority of Cisco
routers and all Cisco network switches) is the dominant routing
platform on the Internet and corporate networks. This widespread
distribution, as well as its architectural deficiencies, makes it a
valuable target for hackers looking to attack a corporate or
private network infrastructure. Compromised devices can disrupt
stability, introduce malicious modification, and endanger all
communication on the network. For security of the network and
investigation of attacks, in-depth analysis and diagnostics are
critical, but no book currently covers forensic analysis of Cisco
network devices in any detail.
Cisco Router and Switch Forensics is the first book devoted to
criminal attacks, incident response, data collection, and legal
testimony on the market leader in network devices, including
routers, switches, and wireless access points.
Why is this focus on network devices necessary? Because criminals
are targeting networks, and network devices require a fundamentally
different approach than the process taken with traditional
forensics. By hacking a router, an attacker can bypass a network's
firewalls, issue a denial of service (DoS) attack to disable the
network, monitor and record all outgoing and incoming traffic, or
redirect that communication anywhere they like. But capturing this
criminal activity cannot be accomplished with the tools and
techniques of traditional forensics. While forensic analysis of
computers or other traditional media typically involves immediate
shut-down of the target machine, creation of a duplicate, and
analysis of static data, this process rarely recovers live system
data. So, when an investigation focuses on live network activity,
this traditional approach obviously fails. Investigators must
recover data as it is transferred via the router or switch, because
it is destroyed when the network device is powered down. In this
case, following the traditional approach outlined in books on
general computer forensics techniques is not only insufficient, but
also essentially harmful to an investigation.
Jargon buster: A network switch is a small hardware device that
joins multiple computers together within one local area network
(LAN). A router is a more sophisticated network device that joins
multiple wired or wireless networks together.
* The only book devoted to forensic analysis of routers and
switches, focusing on the operating system that runs the vast
majority of network devices in the enterprise and on the
Internet
* Outlines the fundamental differences between router forensics and
traditional forensics, a critical distinction for responders in an
investigation targeting network activity
* Details where network forensics fits within the entire process of
an investigation, end to end, from incident response and data
collection to preparing a report and legal testimony
New security risks, continuously evolving regulation and increasing
security standards have created new and growing needs for secure
internal information transfers, which SSH provides. This book
addresses these new trends in depth, offering the most up-to-date
information on the integration of SSH into a security environment.
It covers the newest features and applications of SSH-2 (which
received Proposed Standard status from the IETF in 2006). SSH2 is
more secure than previous versions and has many expanded uses on a
wider variety of computing platforms. Another particular note
driving new SSH2 adoption are the requirements of recent
legislation (PCI/HIPAA/SOX/FISMA). SSH 2 has become an even more
valuable tool, as it provides communications security compliance
with the latest standards.
This book offers the most up-to-date information on SSH2 in a
practical, hands-on, tutorial-style reference that goes well beyond
UNIX implementation. It concentrates on the latest version of SSH 2
with all new information.
* Discover why SSH2 offers more robust security than SSH1 and how
to incorporate it into your network administration software
toolbox.
Life Lines: Selected Poems 1990-2009 is a collection of 201 poems
representing nearly two decades of work by acclaimed upstate New
York poet, Charles James. A natural maverick, James learned through
life's experiences that purpose and meaning are within the person,
not "out there somewhere." Charlie, as he's known to friends, says
"jubilation and grief are all part of living." Led to poetry by his
grandfather, Charlie wrote "abominable trash" for too long. "Now I
try and I do with no way of knowing how." As for his 6-1/2 years in
federal courts to affirm his Ist Amendment rights, he only shrugs.
He wonders what makes others ask if he'd do it again. "Impossible,"
he says. "Any more than I can stick my foot in the same stream
twice. There is no again. Everything in life is once." James' poems
express life's lessons with urgency and beauty, making his work
stand with the best of contemporary free verse.
A firewall is as good as its policies and the security of its VPN
connections. The latest generation of firewalls offers a dizzying
array of powerful options; they key to success is to write concise
policies that provide the appropriate level of access while
maximizing security.
This book covers the leading firewall products: Cisco PIX, Check
Point NGX, Microsoft ISA Server, Juniper s NetScreen Firewall, and
SonicWall. It describes in plain English what features can be
controlled by a policy, and walks the reader through the steps for
writing the policy to fit the objective. Because of their
vulnerability and their complexity, VPN policies are covered in
more depth with numerous tips for troubleshooting remote
connections.
. The only book that focuses on creating policies that apply to
multiple products.
. Included is a bonus chapter on using Ethereal, the most popular
protocol analyzer, to monitor and analyze network traffic.
. Shows what features can be controlled by a policy, and walks you
through the steps for writing the policy to fit the objective at
hand"
|
|