While you’re reading this, a hacker could be prying and spying his way into your company’s IT systems, sabotaging your operations, stealing confidential information, shutting down your Web site, or wreaking havoc in other diabolical ways. Hackers For Dummies helps you hack into a hacker’s mindset and take security precautions to help you avoid a hack attack. It outlines computer hacker tricks and techniques you can use to assess the security of your own information systems, find security vulnerabilities, and fix them before malicious and criminal hackers can exploit them. It covers:
Hacking methodology and researching public information to see what a hacker can quickly learn about your operations
Social engineering (how hackers manipulate employees to gain information and access), physical security, and password vulnerabilities
Network infrastructure, including port scanners, SNMP scanning, banner grabbing, scanning, and wireless LAN vulnerabilities
Operating systems, including Windows, Linux, and Novell NetWare
Application hacking, including malware (Trojan horses, viruses, worms, rootkits, logic bombs, and more), e-mail and instant messaging, and Web applications
Tests, tools (commercial, shareware, and freeware), and techniques that offer the most bang for your ethical hacking buck
With this guide you can develop and implement a comprehensive security assessment plan, get essential support from management, test your system for vulnerabilities, take countermeasures, and protect your network infrastructure. You discover how to beat hackers at their own game, with:
A hacking toolkit, including War dialing software, password cracking software, network scanning software, network vulnerability assessment software, a network analyzer, a Web application assessment tool, and more
All kinds of countermeasures and ways to plug security holes
A list of more than 100 security sites, tools, and resources
Ethical hacking helps you fight hacking with hacking, pinpoint security flaws within your systems, and implement countermeasures. Complete with tons of screen shots, step-by-step instructions for some countermeasures, and actual case studies from IT security professionals, this is an invaluable guide, whether you’re an Internet security professional, part of a penetration-testing team, or in charge of IT security for a large or small business.
Kevin Beaver 资深信息安全专家,专业讲师,已在信息安全领域工作20 余年,为《财富》1000 强企业、安全产品供应商、独立软件开发商、大学、政府机构、非营
利组织和企业进行信息安全评估。曾受邀在CNN 电视节目和业内专业会议上普及他的安全研究成果,并发表了数百篇技术论文。Kevin 毕业于佐治亚理工学院,是国际注册信息系统安全专家(CISSP),读者可通过http://securityonwheels.com 了解更多关于他的信息。
很有收获的
不一样的观点
需要细嚼慢咽
必看书目之一,很多年前就有所耳闻,现在终于入手了