Microsoft® Encyclopedia of Security [Paperback]

Mitch Tulloch (Author)

Book Description

ISBN-10: 0735618771 | ISBN-13: 978-0735618770 | Publication Date: July 16, 2003 | Edition: 1

Get the single resource that defines—and illustrates—the rapidly evolving world of computer and network security. The MICROSOFT ENCYCLOPEDIA OF SECURITY delivers more than 1000 cross-referenced entries detailing the latest security-related technologies, standards, products, services, and issues—including sources and types of attacks, countermeasures, policies, and more. You get clear, concise explanations and case scenarios that deftly take you from concept to real-world application—ready answers to help maximize security for your mission-critical systems and data.

• Know your vulnerabilities—understand the ways black-hat attackers footprint and enumerate systems, exploit security holes, crack passwords, elevate privileges, and cover their tracks.
• Deploy your best defense—review fundamental concepts of intrusion detection systems, encryption technologies, virus protection, and computer forensics.
• Stay one step ahead—keep pace with emerging security technologies, such as Wi-Fi Protected Access and XML Encryption; recent government legislation; and the latest industry trends.
• Decipher security acronyms—from AES to XMLDSIG and 3DES to 802.11i, decode essential terms.
• Build your own network of resources—from professional associations and standards organizations to online communities and links to free information, know how to stay current.
• Get an edge in certification preparation—ideal reference for anyone pursuing Security+, MCSE, CISSP, GIAC, and other professional certifications.

Entries include:

• Advanced Encryption Standard
• backdoors
• CERT/CC
• cookie poisoning
• digital rights management
• dynamic packet filtering
• E-SIGN Act
• file slack
• hacking
• honeypots
• ICMP tunneling
• IPSec
• John the Ripper
• keystroke logging
• L2TP
• L0phtCrack
• managed security service providers
• message digests
• NIAP
• Nmap
• Qchain
• one-time passwords
• password cracking
• PKI
• port scanning
• privacy
• reverse Telnet
• Safe Harbor Agreement
• spoofing
• Tcp_wrapper
• Trin00
• UDP scanning
• viruses
• wardriving
• Windows® cryptographic API
• XML signatures
• Web services security
• worms
• zombie zapper
• and more

Editorial Reviews

About the Author

Mitch Tulloch is a trainer, consultant, and author living in Winnipeg, Canada. In addition to his Nutshell books for O'Reilly listed below, Mitch is also the author of the Microsoft Encyclopedia of Networking and Microsoft Encyclopedia of Security, both from Microsoft Press, and a string of best-selling books on IIS from Osborne/McGraw-Hill. If you're interested you can find out more about Mitch on his website www.mtit.com. In addition to his O'Reilly weblog, Mitch also maintains a "techblog" at mitchtulloch.blogspot.com containing random thoughts, ideas, suggestions, tips, and resources for network and system administrators.

Product Details

• Paperback: 480 pages
• Publisher: Microsoft Press; 1 edition (July 16, 2003)
• Language: English
• ISBN-10: 0735618771
• ISBN-13: 978-0735618770
• Product Dimensions: 9.2 x 7.4 x 1.2 inches
• Shipping Weight: 2 pounds
• Average Customer Review: 3.0 out of 5 stars  See all reviews (2 customer reviews)
• Amazon Best Sellers Rank: #1,841,130 in Books (See Top 100 in Books)

More About the Author

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information about Mitch, see his website at www.mtit.com.

Customer Reviews

Most Helpful Customer Reviews

8 of 8 people found the following review helpful:

4.0 out of 5 stars Very useful encyclopedia for security, July 4, 2003

By 

D. M Swaney (Oxnard, CA) - See all my reviews
(REAL NAME)   

Amazon Verified Purchase

This review is from: Microsoft® Encyclopedia of Security (Paperback)

As a new student to the realm of security I've been hit hard with new terminology and after a while sometimes I find it hard to rememberr what an acronym stands for or what it means.

This book makes it easy to look it up quickly for a refresher without having to flip through various books or search the internet. Great if you are a student like myself and working late at night cramming for an exam and you can't remember what PFS stands for.

This book I will keep near me at home, school, and at work because it is just a great reference book.

I gave it four stars instead of five because it would have been great if Microsoft included a CD with the book in electronic format so instead of carrying the book around I could just load it up on my computer and have quick access whenever I need it without having to remember where I left the book this time.

1 of 1 people found the following review helpful:

2.0 out of 5 stars Good knowledge, however big mistakes and omissions., September 14, 2005

By 

coffee_fan (Seattle, WA United States) - See all my reviews

This review is from: Microsoft® Encyclopedia of Security (Paperback)

I changed my review - I previously gave a 3 to this book, as I had done a cursory browsing and it looked great. Lately I have been focusing on security and trying to use the book as an actual reference and found it has some big omissions and mistakes and is NOT a reference -- Which deserves a 1 -- I am however giving it a 2 because it has coverage of lots of subjects which are important.

If you are a beginner in the security area, this book may prove valuable, but be forwarned that you may be de-railed in some concepts as they are plain wrong. So far what I have found:

Notable omissions: Subject, Object, Domain (not the NT one), Capability, Protected susbsystem, TCB, Reference monitor.

Errors: RBAC, Principal, Ticket.


FWIW here goes my previous review:

Handy Reference - 3

This encyclopedia is a good "1st base" reference that gets you closer to security definitions and perspectives.

Security is a constantly moving target, so some definitions are dated or lack accuracy, which is why I say it is just the 1st base. You may need to seek your 2nd and 3rd bases of information on the internet or via updated security information sources.

Nevertheless, the book has value in that it allows me to avoid some amount of googling.