In today's round-the-clock, hyper-connected, all-digital economy, computer security is everyone's business. Hacking Exposed: Network Security Secrets & Solutions, Second Edition brings even more in-depth insight into how hackers infiltrate e-business, and how they can be stopped. Security insiders Stuart McClure, Joel Scambray, and George Kurtz present more than 220 all-new pages of technical detail and case studies in an easy-to-follow style. The world of Internet security moves even faster than the digital economy, and all of the brand-new tools and techniques that have surfaced since the publication of the best-selling first edition are covered here. Use the real-world countermeasures in this one-of-a-kind volume to plug the holes in your network today--before they end up in the headlines tomorrow. New and Updated Material: Brand new "Hacking the Internet User" chapter covers insidious Internet client attacks against web browsers, email software, and active content, including the vicious new Outlook email date field buffer overflow and ILOVEYOU worms. A huge new chapter on Windows 2000 attacks and countermeasures covers offline password database attacks and Encrypting File System (EFS) vulnerabilities. Coverage of all the new Distributed Denial of Service (DDoS) tools and techniques that almost broke down the Internet in February 2000 (Trinoo, TFN2K, Stacheldraht). Significantly updated e-commerce hacking methodologies including new IIS and Cold Fusion vulnerabilities. A revised and updated dial-up chapter with new material on PBX and voicemail system hacking. New network discovery tools and techniques, including an updated section on Windows-based scanners, how to carry out eavesdropping attacks on switched networks using ARP redirection, and RIP spoofing attacks. Coverage of new back doors and forensic techniques, including defenses against Win9x back doors like Sub7. Updated coverage of security attacks against Windows 9x, Windows Me, Windows 2000, Windows NT, UNIX, Linux, NetWare, and dozens of other platforms, with appropriate countermeasures.
About the Author
Joel Scambray (Lafayette, CA) is a Manager in the Information Systems Audit and Advisory Services practice of Ernst & Young. Joel has over five years experience working with a variety of computer and communications technologies from both an operational and strategic standpoint--ranging from Director of IS for a major commercial real estate firm to Technology Analyst for Info World Magazine. Stuart McClure (Sunnyvale, CA) is a Senior Manager in the Information Security Services of Ernst & Young. Stuart has over nine years of network and systems security experience. Beginning his career at University of Colorado, Boulder and eventually starting his own consulting company, he has the vast security knowledge from working in both corporate and government environments. George Kurtz brings his extensive knowledge of Unix security to the book to ensure its truly comprehensive network security coverage.