Cargando…

Hack the stack : using snort and ethereal to master the 8 layers of an insecure network /

This book looks at network security in a new and refreshing way. It guides readers step-by-step through the "stack"--The seven layers of a network. Each chapter focuses on one layer of the stack along with the attacks, vulnerabilities, and exploits that can be found at that layer. The book...

Descripción completa

Detalles Bibliográficos
Clasificación:Libro Electrónico
Otros Autores: Gregg, Michael (Michael C.), Watkins, Stephen (Information security professional)
Formato: Electrónico eBook
Idioma:Inglés
Publicado: Rockland, MA : Syngress Pub., ©2006.
Temas:
Acceso en línea:Texto completo (Requiere registro previo con correo institucional)

MARC

LEADER 00000cam a2200000 a 4500
001 OR_ocn162131532
003 OCoLC
005 20231017213018.0
006 m o d
007 cr cn|||||||||
008 070802s2006 maua o 001 0 eng d
040 |a OPELS  |b eng  |e pn  |c OPELS  |d OPELS  |d OCLCQ  |d N$T  |d YDXCP  |d DKDLA  |d ZCU  |d N15  |d K6U  |d U5D  |d B24X7  |d OCLCO  |d E7B  |d UMI  |d OCLCO  |d Y8N  |d DEBSZ  |d OCLCQ  |d OCLCF  |d AU@  |d TEU  |d IDEBK  |d NRU  |d OCLCQ  |d COO  |d OCLCQ  |d AGLDB  |d LIV  |d OCLCQ  |d JBG  |d OCLCA  |d D6H  |d UAB  |d WCO  |d OCLCQ  |d VTS  |d CEF  |d OCLCQ  |d NLE  |d LEAUB  |d VT2  |d OCLCQ  |d OCLCO  |d MHW  |d OCLCO  |d OCLCQ  |d IOY  |d OCLCQ 
019 |a 77066697  |a 181421146  |a 314187614  |a 488431135  |a 507200991  |a 606035041  |a 647612985  |a 781000398  |a 824876119  |a 1087479141  |a 1103271375  |a 1129365438  |a 1153011975  |a 1192350086  |a 1240512680 
020 |a 9781597491099 
020 |a 1597491098 
020 |a 1429417293  |q (electronic bk.) 
020 |a 9781429417297  |q (electronic bk.) 
020 |a 9780080507743 
020 |a 0080507743 
024 1 |a 792502910986 
029 1 |a AU@  |b 000048762794 
029 1 |a AU@  |b 000050492076 
029 1 |a AU@  |b 000053225604 
029 1 |a AU@  |b 000062305633 
029 1 |a AU@  |b 000066230918 
029 1 |a CHNEW  |b 001006082 
029 1 |a DEBBG  |b BV041119870 
029 1 |a DEBBG  |b BV042314171 
029 1 |a DEBBG  |b BV043043930 
029 1 |a DEBSZ  |b 396677568 
029 1 |a DEBSZ  |b 40140448X 
029 1 |a DEBSZ  |b 422237884 
029 1 |a DEBSZ  |b 43036508X 
029 1 |a GBVCP  |b 785366059 
029 1 |a NZ1  |b 11778348 
029 1 |a NZ1  |b 15189222 
029 1 |a YDXCP  |b 2500122 
035 |a (OCoLC)162131532  |z (OCoLC)77066697  |z (OCoLC)181421146  |z (OCoLC)314187614  |z (OCoLC)488431135  |z (OCoLC)507200991  |z (OCoLC)606035041  |z (OCoLC)647612985  |z (OCoLC)781000398  |z (OCoLC)824876119  |z (OCoLC)1087479141  |z (OCoLC)1103271375  |z (OCoLC)1129365438  |z (OCoLC)1153011975  |z (OCoLC)1192350086  |z (OCoLC)1240512680 
037 |a 136468:136601  |b Elsevier Science & Technology  |n http://www.sciencedirect.com 
050 4 |a TK5105.59  |b .H33x 2006eb 
072 7 |a COM  |x 060040  |2 bisacsh 
072 7 |a COM  |x 043050  |2 bisacsh 
072 7 |a COM  |x 053000  |2 bisacsh 
082 0 4 |a 005.8  |2 22 
049 |a UAMI 
245 0 0 |a Hack the stack :  |b using snort and ethereal to master the 8 layers of an insecure network /  |c Michael Gregg [and others] ; technical editor, Stephen Watkins. 
260 |a Rockland, MA :  |b Syngress Pub.,  |c ©2006. 
300 |a 1 online resource (xxvi, 442 pages) :  |b illustrations 
336 |a text  |b txt  |2 rdacontent 
337 |a computer  |b c  |2 rdamedia 
338 |a online resource  |b cr  |2 rdacarrier 
520 |a This book looks at network security in a new and refreshing way. It guides readers step-by-step through the "stack"--The seven layers of a network. Each chapter focuses on one layer of the stack along with the attacks, vulnerabilities, and exploits that can be found at that layer. The book even includes a chapter on the mythical eighth layer: The people layer. This book is designed to offer readers a deeper understanding of many common vulnerabilities and the ways in which attackers exploit, manipulate, misuse, and abuse protocols and applications. The authors guide the readers through this process by using tools such as Ethereal (sniffer) and Snort (IDS). The sniffer is used to help readers understand how the protocols should work and what the various attacks are doing to break them. IDS is used to demonstrate the format of specific signatures and provide the reader with the skills needed to recognize and detect attacks when they occur. What makes this book unique is that it presents the material in a layer by layer approach which offers the readers a way to learn about exploits in a manner similar to which they most likely originally learned networking. This methodology makes this book a useful tool to not only security professionals but also for networking professionals, application programmers, and others. All of the primary protocols such as IP, ICMP, TCP are discussed but each from a security perspective. The authors convey the mindset of the attacker by examining how seemingly small flaws are often the catalyst of potential threats. The book considers the general kinds of things that may be monitored that would have alerted users of an attack. * Remember being a child and wanting to take something apart, like a phone, to see how it worked? This book is for you then as it details how specific hacker tools and techniques accomplish the things they do. * This book will not only give you knowledge of security tools but will provide you the ability to design more robust security solutions * Anyone can tell you what a tool does but this book shows you how the tool works 
505 0 |a 1 Extending OSI to Network Security (20 pp) 2 -- Layer 1 Physical layer (30 pp) Introduction Perimeter security Facility security Device security Identification and authentication Biometrics Attacking physical security Lock picks Wiretapping and Scanners Hardware hacking Layer 1 security project Building a one-way data reception cable Summary 3 -- Layer 2 -- Data Link layer (40 pp) Introduction The Ethernet Frame structure Understanding MAC addressing Understanding PPP and SLIP How a protocol analyzer works Attacking the Data Link Layer Passive versus active sniffing Sniffing Wireless (Wireless basics) Wireless vulnerabilities Defending the Data Link Layer Defenses against active sniffing Detecting promiscuous devices Security in switches Layer 2 security project Using Auditor to crack WEP Summary 4 Layer 3 Network layer (40 pp) Introduction The IP packet structure Attacking the network layer IP Attacks Fragmentation Analyzing an IPID scan The ICMP packet structure Attacking ICMP Smurf Redirects Analyzing the ARP Process Attacking ARP ARP Poisoning Defending the Network Layer Securing IP, ICMP, and ARP Layer 3 security project Fragmenting traffic to bypass an IDS Summary 5 Layer 4 Transport layer (40 pp) Introduction The TCP packet structure Attacking TCP TCP port scanning Advanced port scanning tools Watching Amap in action Using Snort to identify a port scans The UDP datagram Attacking UDP Defending the Transport Layer Watching TLS/SSL Amap and SSL Layer 4 security project Building a Snort system Summary 6 Layer 5 Session layer (40 pp) Introduction Attacking the Session Layer Session hijacking ettercap Observing a SYN attack Sniffing usernames and passwords during a session setup Establishing a session Lophtcrack Dsniff Using ettercap and Hunt Defending the Session Layer Port knocking Layer 5 security project -- Building Snort filters to capture malicious traffic Summary 7 Layer 6 Presentation layer (40 pp) Introduction An analysis of the NetBIOS and SMB Attacking the Presentation layer NetBIOS and enumeration Sniffing Kerberos Using BurpProxy to intercept traffic Cracking weak encryption Defending the Presentation Layer Encryption Adding confidentiality and integrity with IPSec Protecting email with S-MIME Layer 6 security project Cracking passwords and other encryption schemes Summary 8 Layer 7 Application layer (40 pp) Introduction The structure of FTP Analyzing DNS and its weaknesses Other insecure applications Attacking the Application layer Web Applications Cross site scripting DNS Spoofing and pharming Buffer Overflow attacks Using Snort to detect a buffer overflow attack Reverse engineering code Using the Exploitation Framework Metasploit Defending the Application Layer SSH PGP Vulnerability scanners Nessus Layer 7 security project Using Nessus to secure the stack Summary 9 Layer 8 The People layer (35 pp) Introduction Attacking the People Layer Social Engineering Person to person and remote attacks Fun with Caller ID spoofing Defending the People Layer Policies, procedures, and guidelines Regulatory Requirements SOX / HIPAA / California law / PIPDA, etc. Making the case for stronger security Building a better stack Layer 8 security project Building an orange box Summary 10 -- Appendix A (12 pp) Risk Mitigation Securing the Stack Tying the layers together Defense in depth. 
588 0 |a Print version record. 
590 |a O'Reilly  |b O'Reilly Online Learning: Academic/Public Library Edition 
590 |a eBooks on EBSCOhost  |b EBSCO eBook Subscription Academic Collection - Worldwide 
650 0 |a Computer networks  |x Security measures. 
650 0 |a Computer security. 
650 7 |a COMPUTERS  |x Internet  |x Security.  |2 bisacsh 
650 7 |a COMPUTERS  |x Networking  |x Security.  |2 bisacsh 
650 7 |a COMPUTERS  |x Security  |x General.  |2 bisacsh 
650 7 |a Computer networks  |x Security measures.  |2 fast  |0 (OCoLC)fst00872341 
650 7 |a Computer security.  |2 fast  |0 (OCoLC)fst00872484 
700 1 |a Gregg, Michael  |q (Michael C.) 
700 1 |a Watkins, Stephen  |c (Information security professional) 
776 0 8 |i Print version:  |t Hack the stack.  |d Rockland, MA : Syngress Pub., ©2006  |z 1597491098  |z 9781597491099  |w (OCoLC)75859096 
856 4 0 |u https://learning.oreilly.com/library/view/~/9781597491099/?ar  |z Texto completo (Requiere registro previo con correo institucional) 
938 |a Books 24x7  |b B247  |n bks00016135 
938 |a ebrary  |b EBRY  |n ebr10150170 
938 |a EBSCOhost  |b EBSC  |n 174832 
938 |a YBP Library Services  |b YANK  |n 2500122 
938 |a YBP Library Services  |b YANK  |n 2627202 
938 |a YBP Library Services  |b YANK  |n 2730652 
994 |a 92  |b IZTAP