or
Sign in to turn on 1-Click ordering.
 
 
More Buying Choices
45 used & new from $4.88
Have one to sell? Sell yours here
 
   
Express Checkout with PayPhrase
What's this? | Create PayPhrase
Sorry!
X
Hardening Network Security
 
 
Share your own customer images
Search inside this book
Tell the Publisher!
I’d like to read this book on Kindle

Don’t have a Kindle? Get your Kindle here.
 
  

Hardening Network Security [ILLUSTRATED] (Paperback)

~ John Mallery (Author), Jason Zann (Author), Patrick Kelly (Author), Wesley Noonan (Author), Eric S. Seagren (Author), (Author), Rob Kraft (Author), Mark O'Neill (Author), Robert McMullin (Author) "For many individuals tasked with securing a corporate network, the job can seem overwhelming..." (more)
Key Phrases: Microsoft Windows, Red Hat, Internet Explorer (more...)
4.7 out of 5 stars  See all reviews (3 customer reviews)
List Price: $43.95
Price: $29.01 & this item ships for FREE with Super Saver Shipping. Details
You Save: $14.94 (34%)
o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o
Upgrade this book for $3.99 more, and you can read, search, and annotate every page online. See details
In Stock.
Ships from and sold by Amazon.com. Gift-wrap available.

Want it delivered Tuesday, November 10? Choose One-Day Shipping at checkout. Details
27 new from $7.10 18 used from $4.88

Frequently Bought Together

Hardening Network Security + Hardening Network Infrastructure + Hardening Windows Systems
Price For All Three: $89.21

Show availability and shipping details

  • This item: Hardening Network Security by John Mallery

    In Stock.
    Ships from and sold by Amazon.com.
    This item ships for FREE with Super Saver Shipping. Details

  • Hardening Network Infrastructure by Wes Noonan

    In Stock.
    Ships from and sold by Amazon.com.
    This item ships for FREE with Super Saver Shipping. Details

  • Hardening Windows Systems by Roberta Bragg

    In Stock.
    Ships from and sold by Amazon.com.
    This item ships for FREE with Super Saver Shipping. Details

Customers Who Bought This Item Also Bought

Hardening Windows Systems

Hardening Windows Systems

by Roberta Bragg
4.3 out of 5 stars (10)  $29.01
Hardening Linux

Hardening Linux

by John Terpstra
3.8 out of 5 stars (4)  $43.95
Professional Windows Desktop and Server Hardening (Programmer to Programmer)

Professional Windows Desktop and Server Hardening (Programmer to Programmer)

by Roger A. Grimes
5.0 out of 5 stars (3)  $26.39
Network Security Bible

Network Security Bible

by Eric Cole
4.4 out of 5 stars (7)  $37.79
Hardening Linux

Hardening Linux

by James Turnbull
4.4 out of 5 stars (8)  $36.51
› Explore similar items

Editorial Reviews

Product Description

Take a proactive approach to network security by implementing preventive measures against attacks--before they occur. Written by a team of security experts, this hands-on resource provides concrete steps you can take immediately as well as ongoing actions to ensure long-term security. Get complete details on how to systematically harden your network from the ground up, as well as strategies for getting company-wide support for your security plan.

Features a four-part hardening methodology:

  • Do This Now!--Checklist of immediate steps to take to lockdown your system from further attack
  • Take It From The Top--Systematic approach to hardening your enterprise from the top down
  • Once Is Never Enough!--Ongoing monitoring and assessment plan to keep your network secure, including patch management and auditing
  • How to Succeed--Strategies for getting budget approval, management buy-in, and employee cooperation for your security program


From the Back Cover

Take a proactive approach to enterprise network security by implementing preventive measures against attacks before they occur. Written by a team of IT security specialists, this hands-on resource provides concrete steps you can take immediately as well as ongoing actions to ensure long-term security. Whether you’re working on a Windows, UNIX, wireless, or mixed network, you’ll get complete details on how to systematically harden your network from the ground up, as well as strategies for getting company-wide support for your security plan. With coverage of all major platforms and applications, this book is an essential security tool for on-the-job IT professionals. Features a four-part hardening methodology:

  • Do This Now!--Checklist of immediate steps to take to lockdown your system from further attack
  • Take It From The Top--Systematic approach to hardening your enterprise from the top down, focusing on network, data, and software access, storage, and communications
  • Once Is Never Enough!--Ongoing monitoring and assessment plan to keep your network secure, including patch management and auditing
  • How to Succeed at Hardening Network Security--Strategies for getting budget approval, management buy-in, and employee cooperation for your security program

John Mallery is a Managing Consultant at BKD, LLP, and a veteran security specialist.

Jason Zann, CISSP, is an Information Security Consultant for DST Systems.

Patrick Kelly, CISSP, CCSE, MCSE, MCP+I, is an Information Assurance Engineer for ComGlobal Systems, Inc.

Paul Love, MS Network Security, CISSP, CISM, CISA, is a Security Manager with a large financial institution.

Wesley Noonan, MCSE, CCNA, CCDA, NNCSS, Security+, is a Senior Network Consultant for Collective Technologies, LLC.

Eric S. Seagren, CISSP, ISSAP, SCNP, CCNA, CNE, MCP+I, MCSE, is an IT architect, designing secure, scalable, and redundant networks.

Rob Kraft is the director of software development for KCX, Inc. Mark O’Neil is the CTO of Vordel and principal author of Web Services Security.

Series Editor and author Roberta Bragg, CISSP, MCSE: Security, Security+, writes a column for Redmond Magazine and writes the weekly Security Watch newsletter. She is the author of Hardening Windows Systems and several other information security books.

See all Editorial Reviews

Product Details

  • Paperback: 608 pages
  • Publisher: McGraw-Hill Osborne Media; 1 edition (January 11, 2005)
  • Language: English
  • ISBN-10: 0072257032
  • ISBN-13: 978-0072257038
  • Product Dimensions: 8.9 x 7.4 x 4.7 inches
  • Shipping Weight: 2.2 pounds (View shipping rates and policies)
  • Average Customer Review: 4.7 out of 5 stars  See all reviews (3 customer reviews)
  • Amazon.com Sales Rank: #817,770 in Books (See Bestsellers in Books)

    •  Would you like to update product info or give feedback on images?

More About the Author

Paul Love
Discover books, learn about writers, read author blogs, and more.

› Visit Amazon's Paul Love Page
Front Cover | Table of Contents | First Pages | Index | Back Cover | Surprise Me!
Search Inside This Book:
Inside This Book (learn more)
First Sentence:
For many individuals tasked with securing a corporate network, the job can seem overwhelming. Read the first page
Key Phrases - Capitalized Phrases (CAPs): (learn more)
Microsoft Windows, Red Hat, Internet Explorer, Active Directory, Mixed Network, Sarbanes-Oxley Act, Control Panel, Gramm-Leach-Bliley Act, Hardening Network Infrastructure, Task Manager, Windows Update, Work Order, Automatic Updates, Click Start, File Folder, Read Permissions, Roberta Bragg, System Configuration Utility, Use Add Wizard, Windows Firewall, Advanced Encryption Standard, Break the Network, Enterprise Manager, Hardening Windows Systems, Jason Zann
New!
Concordance | Text Stats
Browse Sample Pages:
Front Cover | Table of Contents | First Pages | Index | Back Cover | Surprise Me!
Search Inside This Book:
Citations (learn more)
This book cites 15 books:
See all 15 books this book cites
 
2 books cite this book:

What Do Customers Ultimately Buy After Viewing This Item?

Hardening Network Security
50% buy the item featured on this page:
Hardening Network Security 4.7 out of 5 stars (3)
$29.01
Hardening Network Infrastructure
22% buy
Hardening Network Infrastructure 5.0 out of 5 stars (6)
$31.19
Hardening Windows Systems
12% buy
Hardening Windows Systems 4.3 out of 5 stars (10)
$29.01
Professional Windows Desktop and Server Hardening (Programmer to Programmer)
9% buy
Professional Windows Desktop and Server Hardening (Programmer to Programmer) 5.0 out of 5 stars (3)
$26.39
Explore similar items

Suggested Tags from Similar Products

 (What's this?)
Be the first one to add a relevant tag (keyword that's strongly related to this product).
 
(41)
(31)
(21)
(20)
(16)
(14)
(9)
(8)
(8)
(8)
(7)

Your tags: Add your first tag
 
See most popular tags

Sell a Digital Version of This Book in the Kindle Store

If you are a publisher or author and hold the digital rights to a book, you can sell a digital version of it in our Kindle Store. Learn more
 

Customer Reviews

3 Reviews
5 star:
 (2)
4 star:
 (1)
3 star:    (0)
2 star:    (0)
1 star:    (0)
 
 
 
 
 
Average Customer Review
4.7 out of 5 stars (3 customer reviews)
 
 
 
 
Share your thoughts with other customers:
Most Helpful Customer Reviews

 
7 of 7 people found the following review helpful:
4.0 out of 5 stars Thorough overview of security improvement, but beware some details, February 4, 2006
As a security consultant I am sometimes asked for reference books for new security managers. These individuals need help bringing their enterprise under control. Hardening Network Security is a good book for this sort of problem, although it is important to recognize a few technical errors outlined below.

My favorite part of the book is Ch 1 ("Do these seven things before you do anything else"). The seven are (1) change default account settings; (2) use administrator accounts for administrator tasks only; (3) identify unused or unnecessary ports; (4) disable/shut down/remove unused and unnecessary services and daemons; (5) remove rogue connections; (6) set up filters for malicious content; and (7) test backup and restore procedures. Ch 1 was the most helpful section, in my opinion. The author should have mentioned Windows tools from SysInternals, however, and warned that rootkits obscure processes, files, and other information reported by compromised operating systems.

Part II gives hardening recommendations for the enterprise. Segmentation, identity management, authentication, Web services, mobile devices, stored data, databases, OS access control, encrypting transport, remote access, wireless, UNIX, IDS and incident response, malware, and "wetware" appear in Part II. Part III discusses operational issues like assessments, change management, patching, and security reviews. Part IV finishes with management politics and "security apathy."

A great deal of the material is helpful. Most of the book takes a high-level approach to enterprise security. Some sections (like the Web services chapter) are far too complex for managers; their eyes will cross while reviewing SOAP headers. Some sections have a dated feel, like the mention of standard and extended Cisco ACLs (Ch 2) without discussion of reflexive or other modern ACLs. The same chapter says routers filter at layer 3, ignoring the fact that the extended ACLs just mentioned operate at layer 4 (where TCP and UDP ports appear). Page 54 in Ch 2 says "circuit-level firewalls work at Layer 6, the presentation layer...[and] verify the handshaking process of each connection (SYN,ACK,SYN-ACK)." Ouch, that is wrong on multiple levels. One note on a typo -- in Figure 11.3, Zone 1 and Zone 3 should be interchanged.

Ch 6 mentions Bluetooth, but says Bluetooth attacks are "relatively close proximity" problems where "attacks on these types of devices [are] limited to 10 meters." We know this is not true. Ch 14 covers intrusion detection and response, which I reviewed closely. Page 369 makes the following odd statement: "Spanning and mirroring have inherent weaknesses, as they will not forward 100 percent of the traffic to the NIDS port. In addition, the mirrored switch can produce collisions, and the operation of the switch begins to approach the same functionality of a hub." That is a really bizarre claim, especially because the author's "solution" to this problem is worse than a SPAN port. He advocates using taps (on each "resource to monitor", which is expensive), and shows in Figure 14-1 connecting the tap outputs to a hub, where the IDS also listens. That configuration is guaranteed to drop traffic due to collisions; please see my blog for details.

There is a lot of good material in Hardening Network Security, so I didn't want to lower my rating for the several serious technical shortcomings I previously identified. Rather, buy the book, cross out the incorrect material listed, and enjoy the rest.
Comment Comment | Permalink | Was this review helpful to you? Yes No (Report this)



 
2 of 2 people found the following review helpful:
5.0 out of 5 stars Common sense advice, February 22, 2005
By Paul Klahn (Kansas City, MO) - See all my reviews
(REAL NAME)   
This book is a useful compilation of common sense, practical security recommendations and procedures for the everyday manager or administrator. It is written in a way that covers a variety of critical topics without getting overly technical or talking of the sake of talking.

There are frequent references to additional resources you can use to drill down in any of the topic areas. The use of several authors to share their stronger areas makes this a better resource. The book does a good job of approaching timely security risks such as database and application security, as well as devoting several chapters to management issues of great use to technical staff and management.

The recurring "HEADS UP!" type of reference boxes are overly annoying, but I assume this is a publisher issue and they really don't detract from the content.
Comment Comment | Permalink | Was this review helpful to you? Yes No (Report this)



 
1 of 3 people found the following review helpful:
5.0 out of 5 stars Good book with solid topic coverage, February 22, 2005
This book has some really good coverage. A lot of it is kindof high level, but good information none the less. This would be an ideal book for a technical manager to gain a broad understanding of the covered topics.
Comment Comment | Permalink | Was this review helpful to you? Yes No (Report this)


Share your thoughts with other customers: Create your own review
 
 
 
Only search this product's reviews


Customer Discussions

This product's forum
Discussion Replies Latest Post
No discussions yet

Ask questions, Share opinions, Gain insight
Start a new discussion
Topic:
First post:
Prompts for sign-in
 


Active discussions in related forums
Search Customer Discussions
Search all Amazon discussions
   

Product Information from the Amapedia Community

Beta (What's this?)

Look for Similar Items by Category

Look for Similar Items by Subject

Search Books by subject:















i.e., each book must be in subject 1 AND subject 2 AND ...
 

Feedback

If you need help or have a question for Customer Service, contact us.
 Would you like to update product info or give feedback on images?
Is there any other feedback you would like to provide?

Your comments can help make our site better for everyone.


Your Recent History

 (What's this?)

After viewing product detail pages or search results, look here to find an easy way to navigate back to pages you are interested in.