Tuesday, July 30, 2013

Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning, 1th Edition, Gordon Fyodor Lyon


Nmap Network Scanning is the official guide to the Nmap Security Scanner, a free and open source utility used by millions of people for network discovery, administration, and security auditing. From explaining port scanning basics for novices to detailing low-level packet crafting methods used by advanced hackers, this book suits all levels of security and networking professionals. A 42-page reference guide documents every Nmap feature and option, while the rest of the book demonstrates how to apply those features to quickly solve real-world tasks. Examples and diagrams show actual communication on the wire.
Topics include subverting firewalls and intrusion detection systems, optimizing Nmap performance, and automating common networking tasks with the Nmap Scripting Engine. Hints and instructions are provided for common uses such as taking network inventory, penetration testing, detecting rogue wireless access points, and quashing network worm outbreaks. Nmap runs on Windows, Linux, and Mac OS X.

Nmap's original author, Gordon "Fyodor" Lyon, wrote this book to share everything he has learned about network scanning during more than 11 years of Nmap development. Visit http://nmap.org/book for more information and sample chapters.

Earlier this year Fyodor sent me a pre-publication review copy of his new self-published book, Nmap Network Scanning (NNS). I had heard of Fyodor's book when I wrote my 3 star review of Nmap in the Enterprise in June, but I wasn't consciously considering what could be in Fyodor's version compared to the Syngress title. Although the copy I read was labelled "Pre-Release Beta Version," I was very impressed by this book. Now that I have the final copy (available from Amazon) in my hands, I am really pleased with the product. In short, if you are looking for *the* book on Nmap, the search is over: NNS is a winner.

I've reviewed dedicated "tool" books before, including titles about Snort, Nessus, and Nagios. NNS dives into the internals of Nmap unlike any other title I've read. Without Nmap author Fyodor as the author, I think any competitor would need to have thoroughly read the source code of the application to have a chance at duplicating the level of detail Fyodor includes in NNS.

Instead of just describing how to use Nmap, Fyodor explains how Nmap works. Going even further, he describes the algorithms used to implement various tests, and why he chose those approaches. The "Idle Scan Implementation Algorithsm" section in Ch 5 is a great example of this sort of material. I will probably just refer students of my TCP/IP Weapons School class to this part of NNS when we discuss the technique!

One of the best parts of NNS, mentioned but explained in no other text, is the Nmap Scripting Engine (NSE). Ch 9 is all about NSE, with a brief intro to Lua and excellent documentation of using and building upon NSE. Beyond this groundbreaking material readers will find many examples of Nmap case studies from users. This and other sections help make NNS a practical book, showing how people use Nmap in their environments for a variety of purposes.

Product Details :
  • Paperback: 468 pages
  • Publisher: Nmap Project (January 1, 2009)
  • Language: English
  • ISBN-10: 0979958717
  • ISBN-13: 978-0979958717
  • Product Dimensions: 1 x 7.3 x 9.6 inches

More Details about Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning, 1th Edition

or

Download Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning, 1th Edition PDF Ebook

Hacking Exposed Mobile Security Secrets & Solutions, 1th Edition, Neil Bergman


Proven security tactics for today's mobile apps, devices, and networks

Hacking Exposed Mobile continues in the great tradition of the Hacking Exposed series, arming business leaders and technology practitioners with an in-depth understanding of the latest attacks and countermeasures--so they can leverage the power of mobile platforms while ensuring that security risks are contained." -- Jamil Farshchi, Senior Business Leader of Strategic Planning and Initiatives, VISA

Identify and evade key threats across the expanding mobile risk landscape. Hacking Exposed Mobile: Security Secrets & Solutions covers the wide range of attacks to your mobile deployment alongside ready-to-use countermeasures. Find out how attackers compromise networks and devices, attack mobile services, and subvert mobile apps. Learn how to encrypt mobile data, fortify mobile platforms, and eradicate malware. This cutting-edge guide reveals secure mobile development guidelines, how to leverage mobile OS features and MDM to isolate apps and data, and the techniques the pros use to secure mobile payment systems.

Tour the mobile risk ecosystem with expert guides to both attack and defense
Learn how cellular network attacks compromise devices over-the-air
See the latest Android and iOS attacks in action, and learn how to stop them
Delve into mobile malware at the code level to understand how to write resilient apps
Defend against server-side mobile attacks, including SQL and XML injection
Discover mobile web attacks, including abuse of custom URI schemes and JavaScript bridges
Develop stronger mobile authentication routines using OAuth and SAML
Get comprehensive mobile app development security guidance covering everything from threat modeling to iOS- and Android-specific tips
Get started quickly using our mobile pen testing and consumer security checklists

Neil Bergman is a senior security consultant at Cigital, a leading software security firm, where he conducts and leads penetration testing, code review, and threat modeling of software on behalf of major organizations.

Mike Stanfield is a security consultant at Cigital where he specializes in security assessments for the iOS, Android, and Blackberry platforms.

Jason Rouse is a security architect on the team responsible for the security of Bloomberg LP’s products and services.

Joel Scambray, CISSP, is a managing principal at Cigital and the bestselling coauthor of seven editions of Hacking Exposed.

Product Details :
  • Paperback: 320 pages
  • Publisher: McGraw-Hill Osborne Media; 1 edition (July 9, 2013)
  • Language: English
  • ISBN-10: 0071817018
  • ISBN-13: 978-0071817011
  • Product Dimensions: 9.1 x 7.3 x 0.8 inches

More Details about Hacking Exposed Mobile Security Secrets & Solutions, 1th Edition

or

Download Hacking Exposed Mobile Security Secrets & Solutions, 1th Edition PDF Ebook

Cisco CCNA Routing and Switching 200-120 Official Cert Guide Library, Academic Edition, 1st Edition, Wendell Odom


The new edition of bestselling CCNA 200-120 Cert Guide Library, Academic Edition by Wendell Odom textbook and study package for a beginner to intermediate-level networking course. The two books in this package: CCENT/CCNA ICND1 100-101 Official Cert Guide, Academic Edition and CCNA ICND2 200-101 Official Cert Guide, Academic Edition have been completely revised to align to Cisco's new CCNA 200-120 exam. Material is presented in a concise manner, focusing on increasing student's retention and recall of exam topics. The books are printed in four color, allowing students to benefit from carefully crafted figures that utilize color to convey concepts. Students will organize their study through the use of the consistent features in the chapters, including:

• Foundation Topics – These sections make up the majority of the page count, explaining concepts, configurations, with emphasis on the theory and concepts, and with linking the theory to the meaning of the configuration commands.
• Key Topics – Inside the Foundation Topics sections, every figure, table, or list that should absolutely be understood and remembered for the exam is noted with the words “Key Topic” in the margin. This tool allows the reader to quickly review the most important details in each chapter.
• Chapter-ending Summaries – These bulleted lists provide a quick and concise review of the key topics covered in each chapter.
• Chapter-ending Review Questions – Each chapter provides a set of multiple choice questions that help student’s test their knowledge of the chapter concepts, including answers and full explanations.
• Chapter-ending Exercises – Each chapter concludes with a series of exercises designed to help students increase their retention of the chapter content including key term reviews, key topic tables, command review exercises, and memory table exercises.
• Part Reviews – This new edition includes a new part review feature that helps students consolidate their knowledge of concepts presented across multiple chapters. A new mind mapping exercise helps students build strong mental maps of concepts. A new exam bank of part review questions helps students test themselves with scenario-based questions that span multiple topics.

In addition to these powerful chapter learning, review, and practice features, this book also contains several other features that make it a truly effective and comprehensive study package, including:

• Getting Started chapters at the beginning of each book. These are great overviews of the books and offer terrific advice for how to build an effective study plan.
• The DVD contains over 150 minutes of video mentoring from the author on challenging topics such as CLI navigation, router configuration, switch basics, VLANs, subnetting, OSPF, EIGRP, EIGRP Metrics, PPP, and CHAP.
• The books come complete with the CCENT ICND1 and CCNA ICND2 Network Simulator Lite software, providing students with the opportunity to practice their hands-on command line interface skills with Cisco routers and switches. The 26 labs included for free with this product cover a range of IP addressing and EIGRP configuration and troubleshooting exercises.
• The Pearson IT Certification Practice Test software that comes with the books includes 4 full ICND1 exams, 4 full ICND2 exams and 8 full CCNA exams, providing tons of opportunities to assess and practice. Including the book review questions and part review questions, the exam banks includes more than 900 unique practice questions.
• This book also comes with free versions of the Premium Edition eBooks, allowing students to access the digital copies in PDF, EPUB, or Kindle format on their computer or mobile device.
• Final Preparation Chapters help students review for final exams and prepare to take the official Cisco CCNA exams, if they want to achieve that certification.
• Study Plan Templates are included on the DVD to help students organize their study time.

Wendell Odom, CCIE No. 1624, has been in the networking industry since 1981. He has worked as a network engineer, consultant, systems engineer, instructor, and course developer; he currently works writing and creating certification tools. He is author of all the previous books in the Cisco Press CCNA Official Certification Guide series, as well as the CCNP ROUTE 642-902 Official Certification Guide, the QoS 642-642 Exam Certification Guide, coauthor of the CCIE Routing and Switch Official Certification Guide, and several other titles. He is also a consultant for the CCNA 640-802 Network Simulator from Pearson and for a forthcoming replacement version of that product. He maintains study tools, links to his blogs, and other resources at www.certskills.com.

Product Details :
  • Hardcover: 1700 pages
  • Publisher: Cisco Press; 1 edition (July 15, 2013)
  • Language: English
  • ISBN-10: 1587144875
  • ISBN-13: 978-1587144875
  • Product Dimensions: 10.3 x 8.2 x 2.5 inches

More Details about Cisco CCNA Routing and Switching 200-120 Official Cert Guide Library, Academic Edition, 1st Edition

or

Download Cisco CCNA Routing and Switching 200-120 Official Cert Guide Library, Academic Edition, 1st Edition PDF Ebook