Search results for "Offensive Security Using Python"
Items we need to order for you
Hacking Exposed Unified Communications & VoIP Security Secrets & Solutions, Second Edition
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.The latest techniques for averting UC disaster“This book is a must-read for any security professional responsible for VoIP or UC infrastructure. This new edition is a powerful resource that will help you keep your communications systems secure.” —Dan York, Producer and Co-Host, Blue Box: The VoIP Security Podcast“The original edition, Hacking Exposed: Voice over IP Secrets & Solutions, provided a valuable resource for security professionals. But since then, criminals abusing VoIP and UC have become more sophisticated and prolific, with some high-profile cases ringing up huge losses. This book is a welcome update that covers these new threats with practical examples, showing the exact tools in use by the real attackers.” —Sandro Gauci, Penetration Tester and Security Researcher, Author of SIPVicious“Powerful UC hacking secrets revealed within. An outstanding and informative book. Hacking Exposed: Unified Communications & VoIP Security Secrets & Solutions walks the reader through powerful yet practical offensive security techniques and tools for UC hacking, which then informs defense for threat mitigation. The authors do an excellent job of weaving case studies and real-world attack scenarios with useful references. This book is essential for not only IT managers deploying UC, but also for security practitioners responsible for UC security.” —Jason Ostrom, UC Security Researcher, Stora SANS Institute, co-author, SEC540 class“After reading Hacking Exposed: Unified Communications & VoIP Security Secrets & Solutions, I was saddened to not have had this book published years ago. The amount of time and money I could have saved myself, and my clients, would have been enormous. Being a professional in an ITSP/MSP, I know firsthand the complexities and challenges involved with auditing, assessing, and securing VoIP-based networks. From the carrier level, right down to the managed PBX level, and everything in between, Hacking Exposed: Unified Communications & VoIP Security Secrets & Solutions is a de facto must-have book. For those learning VoIP security to those heavily involved in any VoIP-related capacity, this book is worth its weight in gold.” —J. Oquendo, Lead Security Engineer, E–Fensive Security Strategies“Hacking Exposed: Unified Communications & VoIP Security Secrets & Solutions, includes more sophisticated attack vectors focused on UC and NGN. The authors describe in depth many new tools and techniques such as TDoS and UC interception. Using these techniques, you will learn how you can identify the security problems of VoIP/UC. This book is a masterpiece.” —Fatih Ozavci, Senior Security Consultant at Sense of Security, Author of viproy“This book provides you with the knowledge you need to understand VoIP threats in reality. No doom and gloom, overhyped, never to
R 1,694.00
Hacking Exposed Malware & Rootkits: Security Secrets and Solutions, Second Edition
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.Arm yourself for the escalating war against malware and rootkitsThwart debilitating cyber-attacks and dramatically improve your organization’s security posture using the proven defense strategies in this thoroughly updated guide. Hacking Exposed™ Malware and Rootkits: Security Secrets & Solutions, Second Edition fully explains the hacker’s latest methods alongside ready-to-deploy countermeasures. Discover how to block pop-up and phishing exploits, terminate embedded code, and identify and eliminate rootkits. You will get up-to-date coverage of intrusion detection, firewall, honeynet, antivirus, and anti-rootkit technology.• Learn how malware infects, survives, and propagates across an enterprise• See how hackers develop malicious code and target vulnerable systems• Detect, neutralize, and remove user-mode and kernel-mode rootkits • Use hypervisors and honeypots to uncover and kill virtual rootkits• Defend against keylogging, redirect, click fraud, and identity theft• Block spear phishing, client-side, and embedded-code exploits• Effectively deploy the latest antivirus, pop-up blocker, and firewall software• Identify and stop malicious processes using IPS solutions
R 2,352.04
Hacking Exposed Windows: Microsoft Windows Security Secrets and Solutions, Third Edition
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.The latest Windows security attack and defense strategies"Securing Windows begins with reading this book." --James Costello (CISSP) IT Security Specialist, Honeywell Meet the challenges of Windows security with the exclusive Hacking Exposed "attack-countermeasure" approach. Learn how real-world malicious hackers conduct reconnaissance of targets and then exploit common misconfigurations and software flaws on both clients and servers. See leading-edge exploitation techniques demonstrated, and learn how the latest countermeasures in Windows XP, Vista, and Server 2003/2008 can mitigate these attacks. Get practical advice based on the authors' and contributors' many years as security professionals hired to break into the world's largest IT infrastructures. Dramatically improve the security of Microsoft technology deployments of all sizes when you learn to: Establish business relevance and context for security by highlighting real-world risksTake a tour of the Windows security architecture from the hacker's perspective, exposing old and new vulnerabilities that can easily be avoidedUnderstand how hackers use reconnaissance techniques such as footprinting, scanning, banner grabbing, DNS queries, and Google searches to locate vulnerable Windows systems Learn how information is extracted anonymously from Windows using simple NetBIOS, SMB, MSRPC, SNMP, and Active Directory enumeration techniquesPrevent the latest remote network exploits such as password grinding via WMI and Terminal Server, passive Kerberos logon sniffing, rogue server/man-in-the-middle attacks, and cracking vulnerable servicesSee up close how professional hackers reverse engineer and develop new Windows exploitsIdentify and eliminate rootkits, malware, and stealth softwareFortify SQL Server against external and insider attacksHarden your clients and users against the latest e-mail phishing, spyware, adware, and Internet Explorer threats Deploy and configure the latest Windows security countermeasures, including BitLocker, Integrity Levels, User Account Control, the updated Windows Firewall, Group Policy, Vista Service Refactoring/Hardening, SafeSEH, GS, DEP, Patchguard, and Address Space Layout Randomization
R 1,876.00
Hacking Exposed Industrial Control Systems: ICS and SCADA Security Secrets & Solutions
Learn to defend crucial ICS/SCADA infrastructure from devastating attacks the tried-and-true Hacking Exposed wayThis practical guide reveals the powerful weapons and devious methods cyber-terrorists use to compromise the devices, applications, and systems vital to oil and gas pipelines, electrical grids, and nuclear refineries. Written in the battle-tested Hacking Exposed style, the book arms you with the skills and tools necessary to defend against attacks that are debilitating—and potentially deadly. Hacking Exposed Industrial Control Systems: ICS and SCADA Security Secrets & Solutions explains vulnerabilities and attack vectors specific to ICS/SCADA protocols, applications, hardware, servers, and workstations. You will learn how hackers and malware, such as the infamous Stuxnet worm, can exploit them and disrupt critical processes, compromise safety, and bring production to a halt. The authors fully explain defense strategies and offer ready-to-deploy countermeasures. Each chapter features a real-world case study as well as notes, tips, and cautions.Features examples, code samples, and screenshots of ICS/SCADA-specific attacksOffers step-by-step vulnerability assessment and penetration test instruction Written by a team of ICS/SCADA security experts and edited by Hacking Exposed veteran Joel Scambray
R 2,041.31
Principles of Computer Security Lab Manual, Fourth Edition
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.Practice the Computer Security Skills You Need to Succeed!40+ lab exercises challenge you to solve problems based on realistic case studiesStep-by-step scenarios require you to think criticallyLab analysis tests measure your understanding of lab resultsKey term quizzes help build your vocabularyLabs can be performed on a Windows, Linux, or Mac platform with the use of virtual machinesIn this Lab Manual, you'll practiceConfiguring workstation network connectivityAnalyzing network communicationEstablishing secure network application communication using TCP/IP protocolsPenetration testing with Nmap, metasploit, password cracking, Cobalt Strike, and other toolsDefending against network application attacks, including SQL injection, web browser exploits, and email attacksCombatting Trojans, man-in-the-middle attacks, and steganographyHardening a host computer, using antivirus applications, and configuring firewallsSecuring network communications with encryption, secure shell (SSH), secure copy (SCP), certificates, SSL, and IPsecPreparing for and detecting attacksBacking up and restoring dataHandling digital forensics and incident responseInstructor resources available:This lab manual supplements the textbook Principles of Computer Security, Fourth Edition, which is available separatelyVirtual machine filesSolutions to the labs are not included in the book and are only available to adopting instructors
R 1,985.57
Security Information and Event Management (SIEM) Implementation
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.Implement a robust SIEM systemEffectively manage the security information and events produced by your network with help from this authoritative guide. Written by IT security experts, Security Information and Event Management (SIEM) Implementation shows you how to deploy SIEM technologies to monitor, identify, document, and respond to security threats and reduce false-positive alerts. The book explains how to implement SIEM products from different vendors, and discusses the strengths, weaknesses, and advanced tuning of these systems. You’ll also learn how to use SIEM capabilities for business intelligence. Real-world case studies are included in this comprehensive resource. Assess your organization’s business models, threat models, and regulatory compliance requirementsDetermine the necessary SIEM components for small- and medium-size businessesUnderstand SIEM anatomy—source device, log collection, parsing/normalization of logs, rule engine, log storage, and event monitoring Develop an effective incident response programUse the inherent capabilities of your SIEM system for business intelligenceDevelop filters and correlated event rules to reduce false-positive alertsImplement AlienVault’s Open Source Security Information Management (OSSIM)Deploy the Cisco Monitoring Analysis and Response System (MARS)Configure and use the Q1 Labs QRadar SIEM systemImplement ArcSight Enterprise Security Management (ESM) v4.5 Develop your SIEM security analyst skills
R 2,336.60
Wireless Network Security A Beginner's Guide
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.Security Smarts for the Self-Guided IT ProfessionalProtect wireless networks against all real-world hacks by learning how hackers operate. Wireless Network Security: A Beginner's Guide discusses the many attack vectors that target wireless networks and clients--and explains how to identify and prevent them. Actual cases of attacks against WEP, WPA, and wireless clients and their defenses are included.This practical resource reveals how intruders exploit vulnerabilities and gain access to wireless networks. You'll learn how to securely deploy WPA2 wireless networks, including WPA2-Enterprise using digital certificates forauthentication. The book provides techniques for dealing with wireless guest access and rogue access points. Next-generation wireless networking technologies, such as lightweight access points and cloud-based wirelesssolutions, are also discussed. Templates, checklists, and examples give you the hands-on help you need to get started right away.Wireless Network Security: A Beginner's Guidefeatures:Lingo--Common security terms defined so that you’rein the know on the jobIMHO--Frank and relevant opinions based on theauthor's years of industry experienceIn Actual Practice--Exceptions to the rules of securityexplained in real-world contextsYour Plan--Customizable checklists you can use onthe job nowInto Action--Tips on how, why, and when to applynew skills and techniques at workThis is an excellent introduction to wireless security and their security implications. The technologies and tools are clearly presented with copious illustrations and the level of presentation will accommodate the wireless security neophyte while not boring a mid-level expert to tears. If the reader invests the time and resources in building a lab to follow along with the text, s/he will develop a solid, basic understanding of what "wireless security" is and how it can be implemented in practice. This is definitely a recommended read for its intended audience. - Richard Austin, IEEE CIPHER, IEEE Computer Society's TC on Security and Privacy (E109, July 23, 2012)
R 958.00
Architectural Security Codes and Guidelines
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.In-depth, “what-to-do-now” building strategies to secure structures against natural forces as well as terrorismThis unique, practical resource is written for building owners, architects, engineers, construction managers, and other building professionals who must meet today's urgent security needs. Architectural Security Codes and Guidelines delivers effective, permanent solutions to securing structures right now. The only resource to provide such on-the-job guidance, Architectural Security Codes and Guidelines defines all relevant issues, including the environment, sustainability, energy, information technology, changing demographics, safety vs. affordability, and much more, and outlines the roles and responsibilities of all participants. Provides step-by-step “best practices” guidelines and at-a-glance checklists for disaster preparation, mitigation, response, and recoveryFully addresses topics such as risk-threat assessments, recommended HVAC systems and emergency generators…how to ensure that the elderly/handicapped can exit buildings quickly and safely…moreLists the newest technologies and materials relevant to creating more secure structures…explains their advantages and disadvantages…tells how to incorporate them into new construction and/or use them for retrofitting INSIDE Architectural Security Codes and GuidelinesConstruction Regulation Then and Now • Defining the Issues and Roles • Existing Codes • Existing Structures: Inspecting and Retrofitting • Before New Codes Are in Place: Interim Solutions • Preparation, Mitigation, Response and Recovery for Terrorism and Natural Disasters • New Technologies and Materials • Security and the Future Direction of Construction Industry • Resources for Additional Information
R 4,360.00
24 Deadly Sins of Software Security: Programming Flaws and How to Fix Them
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.Eradicate the Most Notorious Insecure Designs and Coding VulnerabilitiesFully updated to cover the latest security issues, 24 Deadly Sins of Software Security reveals the most common design and coding errors and explains how to fix each one-or better yet, avoid them from the start. Michael Howard and David LeBlanc, who teach Microsoft employees and the world how to secure code, have partnered again with John Viega, who uncovered the original 19 deadly programming sins. They have completely revised the book to address the most recent vulnerabilities and have added five brand-new sins. This practical guide covers all platforms, languages, and types of applications. Eliminate these security flaws from your code: SQL injection Web server- and client-related vulnerabilitiesUse of magic URLs, predictable cookies, and hidden form fieldsBuffer overrunsFormat string problemsInteger overflowsC++ catastrophesInsecure exception handlingCommand injectionFailure to handle errorsInformation leakageRace conditionsPoor usabilityNot updating easilyExecuting code with too much privilegeFailure to protect stored dataInsecure mobile codeUse of weak password-based systemsWeak random numbersUsing cryptography incorrectlyFailing to protect network trafficImproper use of PKITrusting network name resolution
R 1,925.72
