InfoSecurity 2008 Threat Analysis

Name: InfoSecurity 2008 Threat Analysis
Brand: Elsevier
Price: 48.95 EUR
Availability: OnlineOnly

Craig Schiller Seth Fogie Colby Derodeff Michael Gregg(Autor*in)

Elsevier (Verlag)

Erschienen am 18. April 2011

480 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-0-08-055869-1 (ISBN)

48,95 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Personen

Craig A Schiller (CISSP-ISSMP, ISSAP) is the CISO for Portland State University and President of Hawkeye Security Training, LLC. He is the primary author of the first Generally Accepted System Security Principles. He is a co-author of "Combating Spyware in the Enterprise and "Winternals from Syngress, several editions of the Handbook of Information Security Management, and a contributing author to Data Security Management. Mr. Schiller has co-founded two ISSA chapters, the Central Plains chapter and the Texas Gulf Coast Chapter.Seth Fogie is the VP of Dallas-based Airscanner Corporation where he oversees the development of security software for the Window Mobile (Pocket PC) platform. He has co-authored numerous technical books on information security, including the top selling "Maximum Wireless Security" from SAMS, and "Security Warrior" from O'Reilly. Seth frequently speaks at IT and security conferences/seminars, including Black Hat, Defcon, CSI, and Dallascon. In addition, Seth has co-authored the HIPAA medical education course for the Texas Medical Associate and is acting Site Host for Security at the "InformIT.com" website where he writes articles and reviews/manages weekly information security related books and articlesColby DeRodeff, GCIA, GCNA; Manager, Technical Marketing, ArcSight, has spent nearly a decade working with global organizations guiding best practices and empowering the use of ArcSight products across all business verticals including government, finance and healthcare. In this capacity he has been exposed to countless security and organizational challenges giving him a unique perspective on today's information security challenges. Recognized as an expert in the field of IT security, Colby's primary areas of focus are insider threat, the convergence of physical and logical security, as well as enterprise security and information management. As the leader of ArcSight's Technical Marketing team, Colby drives content for customers to more easily identify and solve complex real-world issues. He has helped ArcSight grow from the earliest days as a sales consultant and implementation engineer, to joining the development organization where he was one of the founders of ArcSight's Strategic Application Solutions team delivering content solutions to solve real world problems such as compliance and insider threat. Colby has held several consulting positions at companies; such as Veritas where he was responsible for deploying their global IDS infrastructure and ThinkLink Inc, where he maintained an enterprise VoIP network.Colby attended San Francisco State University and holds both the SANS Intrusion Analyst (GCIA) and Network Auditor (GCNA) certifications

Inhalt

ForewordPart I: Botnets Chapter 1 Botnets: A Call to Action Introduction The Killer Web App How Big is the Problem? The Industry Responds Summary Solutions Fast Track Frequently Asked Questions Chapter 2 Botnets Overview What is a Botnet? The Botnet Life Cycle What Does a Botnet Do? Botnet Economic Summary Solutions Fast Track Frequently Asked QuestionsPart II Cross Site Scripting Attacks Chapter 3 Cross-site Scripting Fundamentals Introduction Web Application Security XML and AJAX Introduction Summary Solutions Fast Track Frequently Asked Questions Chapter 4 XSS Theory Introduction Getting XSS'ed DOM-based XSS in Detail Redirection CSRF Flash, QuickTime, PDF, Oh My HTTP Response Injection Source vs. DHTML Reality Bypassing XSS Length Limitations XSS Filter Evasion Summary Solutions Fast Track Frequently Asked Questions Chapter 5 XSS Attack Methods Introduction History Stealing Intranet Hacking XSS Defacements Summary Solutions Fast Track Frequently Asked Questions ReferencesPart III Physical and Logical Security Convergence Chapter 6 Protecting Critical Infrastructure: Process Control and SCADA Introduction Technology Background: Process Control Systems Why Convergence? Threats and Challenges Conclusion Chapter 7 Final Thought Introduction Final Thoughts from William Crower Final Thoughts from Dan Dunkel Final Thoughts from Brian Contos Final Thoughts from Colby DeRodeoffPart IV PCI Compliance Chapter 8 Why PCi is Important Introduction What is PCI? Overview of PCI Requirements Risks and Consequences Benefits of Compliance Summary Solutions Fast Track Frequently Asked Questions Chapter 9 Protect Cardholder Data Protecting Cardholder Data PCI Requirement 3: Protect Stored Cardholder Data PCI Requirement 4~Encrypt Transmission of Cardholder Data Across Open, Public Networks Using Compensating Controls Mapping Out a Strategy The Absolute Essentials Summary Solutions Fast Track Frequently Asked QuestionsPart V Asterisk and VolP Hacking Chapter 10 Understanding and Taking Advantage of VolP Protocols Introduction Your Voice to Data Making Your Voice Smaller Summary Solutions Fast Track Frequently Asked Questions Chapter 11 Asterisk Hardware Ninjutsu Introduction Serial Motion Modems Fun with Dialing Legalities and Tips Summary Solutions Fast Track Frequently Asked QuestionsPart VI Hack the Stack Chapter 12 Social Engineering Introduction Attacking the People Layer Defending the People Layer Making the Case for Stronger Security People Layer Security Project Summary Solutions Fast Track Frequently Asked Questions Index

Systemvoraussetzungen

Als PDF speichern Als Link merken