Router Security Strategies and over one million other books are available for Amazon Kindle. Learn more
Trade in your item
Get a $16.08
Gift Card.
Have one to sell?
Flip to back Flip to front
Listen Playing... Paused   You're listening to a sample of the Audible audio edition.
Learn more

Router Security Strategies: Securing IP Network Traffic Planes Paperback

ISBN-13: 978-1587053368 ISBN-10: 1587053365 Edition: 1st

See all 4 formats and editions Hide other formats and editions
Amazon Price New from Used from Collectible from
Kindle
"Please retry"
Paperback
"Please retry"
$44.95 $34.77

Free%20Two-Day%20Shipping%20for%20College%20Students%20with%20Amazon%20Student



NO_CONTENT_IN_FEATURE

Sell Your Books
Get up to 75% back when you sell your books on Amazon. Ship your books for free and get Amazon.com Gift Cards. Learn more.

Product Details

  • Paperback: 672 pages
  • Publisher: Cisco Press; 1 edition (January 8, 2008)
  • Language: English
  • ISBN-10: 1587053365
  • ISBN-13: 978-1587053368
  • Product Dimensions: 9.1 x 7.4 x 1.5 inches
  • Shipping Weight: 2.4 pounds
  • Average Customer Review: 4.8 out of 5 stars  See all reviews (5 customer reviews)
  • Amazon Best Sellers Rank: #905,904 in Books (See Top 100 in Books)

Editorial Reviews

About the Author

Gregg Schudel,CCIE No. 9591 (Security), joined Cisco in 2000 as a consulting system engineer supporting the U.S. Service Provider Organization. Gregg focuses on IP core network and services security architectures and technology for inter-exchange carriers, web services providers, and mobile providers. Gregg is also part of a team of Corporate and Field resources focused on driving Cisco Service Provider Security Strategy. Prior to joining Cisco, Gregg worked for many years with BBN Technologies, where he supported network security research and development, most notably in conjunction with DARPA and other federal agencies involved in security research. Gregg holds an MS in engineering from George Washington University, and a BS in engineering from Florida Institute of Technology. Gregg can be contacted through e-mail at gschudel@cisco.com.

 

David J. Smith, CCIE No. 1986 (Routing and Switching), joined Cisco in 1995 and is a consulting system engineer supporting the Service Provider Organization. Since 1999 David has focused on service provider IP core and edge architectures, including IP routing, MPLS technologies, QoS, infrastructure security, and network telemetry. Between 1995 and 1999, David supported enterprise customers designing campus and global WANs. Prior to joining Cisco, David worked at Bellcore developing systems software and experimental ATM switches. David holds an MS in information networking from Carnegie Mellon University, and a BS in computer engineering from Lehigh University. David can be contacted through e-mail at dasmith@cisco.com.


More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

4.8 out of 5 stars
5 star
4
4 star
1
3 star
0
2 star
0
1 star
0
See all 5 customer reviews
Router Security Strategies is a book about protecting ip networks by dividing them into different segments.
John Gordon Ainsworth
I particularly liked the idea of overall structure and quality of contents in the book which relate to both a casual and an advanced reader!
AK
As for actual subject matter I was very pleased to find a book that discussed the various "planes" within Cisco IOS.
Rik Guyler

Most Helpful Customer Reviews

7 of 7 people found the following review helpful By Richard Bejtlich on February 11, 2008
Format: Paperback
Router Security Strategies (RSS) is the sort of Cisco security book I like to read. Some of you were surprised by my three star review of another recent Cisco security book -- LAN Switch Security (LSS). I suggest the authors of that book take a look at RSS as a model for writing a second edition of LSS. RSS is well-organized, very clear, and backed by plenty of actionable command syntax. Were it not for a tendency to unnecessarily repeat and summarize material, I would have rated RSS five stars. Nevertheless, anyone operating Cisco routers would do well to consider how RSS approaches the network security problem.

RSS focuses on ways to protect transit, receive, and exception IP traffic in the data, control, management, and service planes of Enterprise and Service Provider (SP) networks. That one sentence almost summarizes the entire table of contents, where Chs 4-7 cover the four planes, Chs 8 and 9 provide case studies for Enterprise and SP networks, respectively, and Chs 1-3 provide introductory and conceptual material. This is how to write a technical book! Tangential material appears in four appendices, and the authors keep the reader on track through the entire text.

RSS makes a compelling case for network security in a world where applications and Web 2.0 are all the rage. I believe many people who scoff at network security have no real idea of the complexities inherent in modern network infrastructure. Too many application-centric people take it for granted that they can reach whatever Web victim they're attacking; perhaps that is a credit to network engineers who've made their creations just work and not be the center of attention.
Read more ›
Comment Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback. If this review is inappropriate, please let us know.
Sorry, we failed to record your vote. Please try again
1 of 1 people found the following review helpful By AK on March 23, 2008
Format: Paperback
That's just yet another great title from Cisco Press!. This book does a great job of logically dividing the overall router security into each logical context by way of describing the router's planes. I also found very elaborate and diverse "Further Reading" towards the end of each chapter very useful. I particularly liked the idea of overall structure and quality of contents in the book which relate to both a casual and an advanced reader!

Book is structured into four Parts;

Part I focuses on laying the foundation for the rest of the book. It achieves this purpose by talking about the Enterprise and SP network fundamentals. This also includes day-in-the-life-of-a-packet through various router switching mechanisms. Chapter 2 re-hashes the network security/threat models but does a nice job of dividing it into various aspects of architectures including various IP VPNs scenarios.

For an advanced reader, this should serve as a nice refresher!

Part II introduces you to real meat of router security, i.e., securing the router planes in both IP and MPLS networks. Authors do a good job of describing the details of each component. Chapters in this section contain working details and IOS configuration snippets to enhance the understanding of various concepts discussed. An advanced user will find all the details given here very useful, and prefer read them cover to cover.

Part III walks you through various case studies to further the concepts explained in the prior chapters. I particularly like the idea of covering both Enterprise and SP case studies.
Read more ›
Comment Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback. If this review is inappropriate, please let us know.
Sorry, we failed to record your vote. Please try again
1 of 1 people found the following review helpful By John Gordon Ainsworth on March 16, 2008
Format: Paperback
Router Security Strategies is a book about protecting ip networks by dividing them into different segments. Network engineers for service providers and larger enterprise networks will benefit most from this manual.

Chapters 1 through 7 are not a cookbook that you can look up sample configurations, but a broad coverage of security concerns. The authors spend these chapters leading the reader to an understanding of how ip traffic can be broken down into different categories, and how to define them as well as the particular vulnerabilities each has.

Schudel and Smith describe a three dimensional way of looking at security. Whereas we may have previously thought of securing each interface in a path, this book explodes this view into a multi-dimensional paradigm of data, control, management, and services. Like parallel universes each must be addressed separately while maintaining a big picture of how each plane can affect the other. The data plane is the actual payload for applications. The control plane indicates protocols that keep the traffic flowing to their destination. The management plane concerns the network administrator's access to the equipment. Special features such as Virtual Private Networks and Quality of Service constitute the services plane.
Chapters 8 and 9 give case studies that include diagrams, numbered line configurations, with documentation.

Appendix B details of each section of IP, TCP, and other protocol packets with vulnerabilities for each part. This is the first time I have seen this type of break down and found it made several aspects of attacks clearer to me. There are several other appendices that cover the IOS XR image and an excellent section on security incident handling that one could use as an outline for their company to use. I give Router Security Strategy 5 stars.
Comment Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback. If this review is inappropriate, please let us know.
Sorry, we failed to record your vote. Please try again

Product Images from Customers

Search
ARRAY(0xa4b72ac8)

What Other Items Do Customers Buy After Viewing This Item?