Internet Site Security (Paperback)

The authors--all engineers from the same security consultancy, one of whom has his Certified Information Security Systems Professional (CISSP) rating--do a good job of explaining some of the ways in which nefarious types come after your servers. Readers learn what a denial-of-service attack is, and how a man-in-the-middle scheme works. It's all accurate and fairly comprehensive, though there's nothing really revolutionary about it. This is just solid coverage of the security issues surrounding servers that provide Internet services to a wide and generally unsecured audience. If you've not read about that before, this book is a decent choice. --David Wall

Topics covered: The sorts of attacks to which Internet-connected servers are subject, explained in a TCP/IP-centric and generally operating-system-neutral way.

From the Back Cover

In this book you'll learn all the fundamental techniques and technologies needed to develop a secure connection to the Internet. Before selecting a firewall, VPN, or intrusion detection system, you must define exactly what your information assets are, who needs to get to them, and what the external and internal threats to those assets are. Internet Site Security walks you through the process of assessing your Internet environment and developing the procedural and technical policies required to protect your critical information and network resources.

After helping you develop an information security program, this book details the technologies required to implement network and server security measures. You will learn about the real-world details (and "gotchas") of firewalls, virtual private networks, authentication, and intrusion detection. You'll then put the pieces together using several architectures suitable for the enterprise and for small business networks. Finally, the book examines the common mistakes that custom Internet application developers often make and provides solutions that all software developers should know to ensure that their code can weather the harsh environment of the Internet.

In Internet Site Security you will

• Learn how to develop a complete strategy for deploying a secure Internet site
• Examine typical Internet site architectures and security considerations using real-world examples
• Learn strategies for justifying a security budget to management
• Understand how to secure Windows NT^®/2K and Unix^® operating systems
• Develop secure Internet applications
• Create secure Internet site architectures that integrate firewalls, intrusion detection,
• networking components, and policy
• Build an Incident Response Plan and learn how to conduct forensic investigations