Hacking For Dummies [Paperback]

Kevin Beaver (Author)

Book Description

Publication Date: January 12, 2010 | ISBN-10: 0470550937 | ISBN-13: 978-0470550939 | Edition: 3

A new edition of the bestselling guide-now updated to cover the latest hacks and how to prevent them!

It's bad enough when a hack occurs-stealing identities, bank accounts, and personal information. But when the hack could have been prevented by taking basic security measures-like the ones described in this book-somehow that makes a bad situation even worse. This beginner guide to hacking examines some of the best security measures that exist and has been updated to cover the latest hacks for Windows 7 and the newest version of Linux.

Offering increased coverage of Web application hacks, database hacks, VoIP hacks, and mobile computing hacks, this guide addresses a wide range of vulnerabilities and how to identify and prevent them. Plus, you'll examine why ethical hacking is oftentimes the only way to find security flaws, which can then prevent any future malicious attacks.

• Explores the malicious hackers's mindset so that you can counteract or avoid attacks completely
• Covers developing strategies for reporting vulnerabilities, managing security changes, and putting anti-hacking policies and procedures in place
• Completely updated to examine the latest hacks to Windows 7 and the newest version of Linux
• Explains ethical hacking and why it is essential

Hacking For Dummies, 3rd Edition shows you how to put all the necessary security measures in place so that you avoid becoming a victim of malicious hacking.

Editorial Reviews

Review

‘…it is easy to read, the presentation is clear and uncluttered, it caters for a variety of audiences…' (BCS.org, February 2010).

From the Back Cover

Get out your white hat and learn where your systems may be vulnerable

You're a good guy or gal, so why do you need to learn how to hack? Because the only way to be sure your systems are secure is to find out how the bad guys work and examine your defenses from their point of view. This guide shows you how, explains common attacks, tells you what to look for, and gives you the tools to safeguard your sensitive business information.

• Build the foundation — understand the value of ethical hacking, what's involved, and the malicious hacker's mindset

• Games people play — discover how hackers use social engineering to breach security and what to do about it

• It's the network — explore common network vulnerabilities and the creative ways they're exploited

• Down and dirty OS hacking — learn how Windows, Linux, and Novell NetWare are being attacked and how to scan for vulnerabilities

• Sneak attacks — see why applications, especially Web apps, are vulnerable and how to protect them

• Get the message — prepare for attacks on e-mail, IM, and VoIP systems

• Tools of the trade — learn about Metasploit, BackTrack, and other important security testing tools

• Now what? — find out how to use the information you gather to minimize business risks

Open the book and find:

• What makes a hacker hack

• Why you need to hack your systems

• How to gain management's approval for your ethical hacking tests

• Countermeasures to common attacks

• Linux and Novell NetWare risks

• Techniques for defending databases

• How wireless LANs are compromised

• Ten deadly mistakes to avoid

Learn to:

• Use the latest ethical hacking methods and tools

• Test your Windows or Linux systems

• Hack databases, VoIP systems, and Web applications

• Report vulnerabilities and improve information security

See all Editorial Reviews

Product Details

• Paperback: 408 pages
• Publisher: For Dummies; 3 edition (January 12, 2010)
• Language: English
• ISBN-10: 0470550937
• ISBN-13: 978-0470550939
• Product Dimensions: 7.3 x 0.9 x 9.1 inches
• Shipping Weight: 1.2 pounds
• Average Customer Review: 4.3 out of 5 stars  See all reviews (23 customer reviews)
• Amazon Best Sellers Rank: #77,206 in Books (See Top 100 in Books)
  • #54 in Books > Computers & Technology > Internet & Web Culture > Hacking
  • #82 in Books > Computers & Technology > Business & Management > Privacy

Most Helpful Customer Reviews

9 of 9 people found the following review helpful

5.0 out of 5 stars A great easy to read introduction to ehical hacking September 10, 2011

By Mike Tremblay, CISSP, GCIH

Format:Paperback|Amazon Verified Purchase

I actually got to read this book for free online via work. However, I enjoyed it so much that I bought a copy so that I could try some of the tools out on my home network. (Word of warning: Be careful if you use these tools even on your home network, I use a separate set of computers that are isolated from the internet and that I don't mind reloading from scratch if things go wrong.) I have liked most of the Dummies series of books that I've read as they're extremely easy reading and lay a good foundation on the subject most of the time and this one was no different. You're not going to become a hacking expert reading this and it doesn't really cover programming or get very technical. What it does is give you a great overview of hacking methodologies and introduce you to a lot of the basic tools used such as nmap, superscan, metasploit, netcat, etc. It covers a lot of the major subjects such as social engineering, physical security, OS vulnerabilites, wireless vulnerabilities, and different types of attacks as well as basic countermeasures that can be taken to help protect your networks. There's also a section on how to get the all important management buy in, if you're tasked with implementing any type of security at work then this is very important. At the back is a great appendix of tools and resources which is another reason I bought this book, it can serve as a great reference.

12 of 15 people found the following review helpful

2.0 out of 5 stars What to do, not how to do February 20, 2012

By Random

Format:Paperback|Amazon Verified Purchase

So I'm going to split this review into a few different parts:

1. IF YOU WANT TO LEARN 'HOW' TO BE AN ETHICAL HACKER DON'T BUY THIS BOOK

This book just tells you what do do WITH hacking skills. If you want to learn how to hack because: You're computer guru, Trying to improve your home security, looking to get into the Security Consultant business, THIS BOOK IS NOT FOR YOU! I CANNOT STRESS THIS MORE!

2. IF YOU ARE A SECURITY PROFESSIONAL KNOW HOW TO HACK BUT DON'T KNOW WHERE TO GO NEXT

This would be a good book. It has tons of info on what to make your system secure with.

3. IF YOU INTEND ON DOING STUFF THAT IS ILLEGAL

Think about it man. Prison would be waste of your talent. Do something awesome with your life, and help people be safer from the black hats. Security Consultants get A LOT of money, and LEGALLY.

4 of 4 people found the following review helpful

5.0 out of 5 stars Up-to-date primer on penetration testing October 31, 2011

By Vincent Poirier

Format:Paperback|Amazon Verified Purchase

Hacking for Dummies could have been more accurately titled "Penetration Testing For Dummies" but that would have made for a less dramatic title and maybe cost it a few sales.

As it is, Kevin Beaver presents us with an excellent primer on how to announce, initiate, and conduct penetration tests within your organization. I say within but in fact he includes instructions on how to test systems from the outside as well.

The first part is titled "Building the Foundations of Ethical Hacking". It is vital. You simply cannot begin breaking into networks without letting people know what you are doing, especially in the United States where prosecutors are joyfully sending people to jail on felony charges for breaking privacy laws.

You should first plan your hacking tests, determine how far you are willing to go, balance the need to test with the risk that testing could damage the target system, or at least disrupt access. Then take your plan and have it authorized by the appropriate managers. If the organization wants you to conduct a stealth test, you should nevertheless get the OK from a few senior managers in IT and other departments.

Part Two gives an overview of social engineering hacks, i.e. circumventing security by getting people with authorized access to let you in, for instance by posing as tech support and getting people to reveal their password.

Parts one and two will stay relevant for many years because they deal with people rather than specific technologies.

Parts three to six are more hands on and describe tools you can use to hack into operating systems and networks. Beaver covers Windows, Linux, and Novell. Much of what you find in the Linux sections applies to any flavour of Unix. Some of the tools described are freely available while others are for-purchase security tools. Part seven, the traditional For Dummies "Parts of Ten" section sums everything up nicely.

Overall, Hacking for Dummies in an excellent introduction to hands-on IT security testing for organization.

Vincent Poirier, Tokyo