Assessing Network Security

by Ben Smith (Author), Kevin Lam (Author), David LeBlanc (Author)

3 customer reviews

ISBN-13: 978-8120326606

ISBN-10: 0735620334

Why is ISBN important?

Have one to sell? Sell on Amazon

Share <Embed>

Buy used

$3.81

Condition: Used - Good

In Stock. Sold by Goodwill Charlotte Books

Access codes and supplements are not guaranteed with used items.

13 Used from $3.81

+ $3.99 shipping

Turn on 1-Click ordering

More Buying Choices

9 New from $10.95 13 Used from $3.81

22 used & new from $3.81

See All Buying Options

Free%20Two-Day%20Shipping%20for%20College%20Students%20with%20Amazon%20Student

Don’t wait for an attacker to find and exploit your security vulnerabilities—take the lead by assessing the state of your network’s security. This book delivers advanced network testing strategies, including vulnerability scanning and penetration testing, from members of the Microsoft security teams. These real-world practitioners provide hands-on guidance on how to perform security assessments, uncover security vulnerabilities, and apply appropriate countermeasures. The companion CD features time-saving tools and scripts that you can use to reveal and help correct security vulnerabilities in your own network.

Sharpen and advance your security assessment skills, including how to:

Detect vulnerabilities and perform penetration tests
Conduct and properly report an IT security audit
Find hidden hosts by using DNS, WINS, and NetBIOS
Sweep your network to analyze network topology, existing hosts, and multi-homed systems
Determine the status of ICP and UDP ports by using port scanning

Recognize and help counter common network threats, including:

War dialing, war driving, and Bluetooth attacks
Packet and network sniffing
IP, e-mail, and DNS spoofing
Password cracking
Communication interceptions and modifications
IDS and IPS attacker detection avoidance
Spam and other e-mail abuses

CD features:

Tools for testing e-mail, databases, and Web servers
Scripts for finding common information leaks and other potential security issues
Complete eBook in PDF format

A Note Regarding the CD or DVD

The print version of this book ships with a CD or DVD. For those customers purchasing one of the digital formats in which this book is available, we are pleased to offer the CD/DVD content as a free download via O'Reilly Media's Digital Distribution services. To download this content, please visit O'Reilly's web site, search for the title of this book to find its catalog page, and click on the link below the cover image (Examples, Companion Content, or Practice Files). Note that while we provide as much of the media content as we are able via free download, we are sometimes limited by licensing restrictions. Please direct any questions or concerns to booktech@oreilly.com.

Assessing Network Security

Available from these sellers.

Customers Who Bought This Item Also Bought

Page 1 of 1 Start overPage 1 of 1

This shopping feature will continue to load items. In order to navigate out of this carousel please use your heading shortcut key to navigate to the next or previous heading.

Elizabeth D. Zwicky

31

Paperback
$48.89
W. Richard Stevens

103

Hardcover
Linda Null

62

Paperback
Mary L. Tucker

10

Hardcover
$154.87
Gayle Laakmann…

334

in Computer Security & Encryption
Paperback
$28.23

Sponsored Products Related To This Item (What's this?)

Page 1 of 1 Start over

Feedback

Richard Stiennon

14

Kindle Edition

$4.99
Feedback

James Smith

Are you safe online? Don't wait until it's too late! Step-by-step instructions to improve your privacy and security online.

60

Kindle Edition

$2.99
Feedback

Cyberpunk University

The PROVEN Python Guide. Learn Python Programming Within 12 Hours. We Teach You What To Do, But More Important, HOW TO DO IT! Including 50+ Exercises.

50

Kindle Edition

$2.99
Feedback

Earnest Wish

This book is made for beginners who have programming experience. With only home PC, you can test all the examples provided here.

3

Kindle Edition

$9.99

Customers Viewing This Page May Be Interested In These Sponsored Links

(What's this?)

Editorial Reviews

About the Author

p>Ben Smith is a senior security strategist at Microsoft, where he works on developing the company's long-term security strategy. Prior to joining the Microsoft Security Strategies team, he was the lead subject matter expert on security for Microsoft Training & Certification. In addition to being a featured speaker at IT industry conferences, Ben recently consulted with the U.S. National Science Foundation on creating methods for preparing a cyber security workforce. Ben is also the chair of the vendor-neutral security certification, CompTIA Security+. He is a Microsoft Certified Systems Engineer (MCSE), Microsoft Certified Trainer (MCT), Certified Information Systems Security Professional (CISSP), and a Cisco Certified Network Associate (CCNA). Ben lives near Redmond, Washington, with his wife Beth Boatright.

Kevin Lam is a Microsoft security technologist, part of the team responsible for assessing the security status of Microsoft products, network infrastructure, and services. He’s also worked as technical lead on penetration testing teams for several leading security companies.

David LeBlanc, Ph.D., is a founding member of the Trustworthy Computing Initiative at Microsoft®. He has been developing solutions for computing security issues since 1992 and has created award-winning tools for assessing network security and uncovering security vulnerabilities. David is a senior developer in the Microsoft Office Trustworthy Computing group.

NO_CONTENT_IN_FEATURE

Product Details

Paperback: 592 pages
Publisher: Microsoft Press (July 21, 2004)
Language: English
ISBN-10: 0735620334
ISBN-13: 978-8120326606
Product Dimensions: 7.3 x 1.6 x 9 inches
Shipping Weight: 2.6 pounds
Average Customer Review: 5.0 out of 5 stars See all reviews (3 customer reviews)
Amazon Best Sellers Rank: #1,142,375 in Books (See Top 100 in Books)
- #75 in Books > Computers & Technology > Networking & Cloud Computing > Network Administration > Disaster & Recovery
- #291 in Books > Computers & Technology > Certification > CompTIA
- #744 in Books > Computers & Technology > Networking & Cloud Computing > Networks, Protocols & APIs > Networks

Customers Viewing This Page May Be Interested In These Sponsored Links

(What's this?)

Customer Reviews

5.0 out of 5 stars

5 star		100%
4 star		0%
3 star		0%
2 star		0%
1 star		0%

Write a customer review

See all verified purchase reviews

Top Customer Reviews

The best pentesting book I've seen

ByAntonon October 5, 2004

Now, I've read some pretty bad books on penetration testing and nobody seemed to get this fun subject right! Good news - this time somebody did! This great tome ("Assessing Network Security") comes to us direct from the bunkers of Redmond. Written by three Microsoft security researchers, the book provides a great overview as well as in-depth coverage of assessing security via pen testing, scanning, IT audit and other means.

The books starts from a nice overview of key principles of security (definitely not news for industry practitioners, but nice anyway), and then goes on to defines vulnerability assessment, penetration testing and security audit. A critically important section on reporting the findings is also nicely written and shows that the authors are knowledgeable about the subject. The book then goes into developing and maintaining the pentesting skills, and descends into choosing the training and resources (nice for those starting in the field). The actual pentesting process is split into non-intrusive (combining the usual "intelligence gathering" with port scans, sweeps and various host queries) and intrusive tests (such as running a vulnerability scanner, brute-forcing passwords, DoS testing and others). Some entries seem to belong in both categories (such as sniffing) but are placed into the intrusive section, for whatever reason. All the host latest content (wireless, Bluetooth and web assessments) is well represented in the book. A fairly insightful social engineering testing section (that touched on dumpster diving and other non-network assessment methods) is also present. My favorite chapter was the one on 'case studies' - examples of specific threats/tests against web, email, VPN and domain controller systems.

Among other features that I liked were 'notes from the field' sidebars with fun stories related by authors and FAQs at the end of each section. On the down side, the book is somewhat Windows-focused (although it is amazingly vendor-neutral in most respects, considering the source). The book is also somewhat dry, although sidebars provide the needed relief when the text gets too process-oriented at times.

The book is largely about methodology, but I'd have preferred to see a bit more technical content, since it is a 600-page volume. I think checklists, present in the Appendix, are a great step in that direction.

Overall, I enjoyed the book and think it is both a great guide and a reference for most security professionals, especially for those starting to be involved with penetration testing.

Anton Chuvakin, Ph.D., GCIA, GCIH is a Security Strategist with a major security information management company. He is the author of the book "Security Warrior" (O'Reilly, 2004) and a contributor to "Known Your Enemy II (AWL, 2004). His areas of infosec expertise include intrusion detection, UNIX security, forensics, honeypots, etc. In his spare time, he maintains his security portal info-secure.org

0Comment 18 people found this helpful. Was this review helpful to you?YesNo

An Excellent First Book on Pen Testing

ByDavid Veuveon November 11, 2007

I purchased this book a year and a half ago, after it was recommended to me, but didn't read it until now. Boy was I pleased to have picked it up, though.

This was my first book on the practice of Penetration Testing, so the processes, methodologies and general underlying theories it presented were extremely valuable. In my day to day course of work as a Sys Admin, I found myself reanalyzing my network with newly gained perspectives. I found it to be very effective in turning the vague unknown threat into something visible and tangible -- instead of following what best practices I was aware of to create security, this book helped greatly in defining -why- those best practices created a secure front, and which would be more valuable to implement in my organization.

I also echo the other reviews who said it was fairly dry in general, but the sidebars and real life stories were very enjoyable. All in all, I would highly recommend this to anyone, particularly if they're entering the world of security from a Microsoft background.

0CommentWas this review helpful to you?YesNo

the ring of truth, the sound of experience

ByJohn Matlockon November 18, 2004

Just the basic concept of this book is interesting. If anyone wanted to do a denial of service attack on my web site, or was really interested in coming in -- well, why would they care. But the Microsoft site, if you could bring it down you would certainly have bragging rights in certain circles.

So if you really want to know about security, who better to read than people responsible for keeping the Microsoft site up and running.

The book has four major sections:

Planning and Performing Security assessments

Penetration Testing for Nonintrusive Attacks

Penetration Testing for Instrusive Attacks

Security Assessment Case Studies.

One thing I really appreciate in this book is the little stories from the real world. In between the description and tutorials (this is computer stuff, it's pretty dry) there are little notes of what really happened in a situation where this particular area was being tested. It gives the book the ring of truth, the sound of experience.

Highly Recommended.

0Comment 7 people found this helpful. Was this review helpful to you?YesNo

Customers Who Viewed This Item Also Viewed

Page 1 of 1 Start overPage 1 of 1

This shopping feature will continue to load items. In order to navigate out of this carousel please use your heading shortcut key to navigate to the next or previous heading.

Elizabeth D. Zwicky

31

Paperback
$48.89
Paperback
W. Richard Stevens

103

Hardcover
Ross J. Anderson

60

Hardcover
$64.97
Linda Null

62

Hardcover

Conditions of Use
Privacy Notice
Interest-Based Ads
© 1996-2017, Amazon.com, Inc. or its affiliates