Free Ebook Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett
So, even you require obligation from the company, you might not be perplexed any more since publications Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett will certainly consistently aid you. If this Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett is your finest companion today to cover your task or work, you can as soon as possible get this book. Exactly how? As we have informed formerly, just see the link that we offer here. The conclusion is not only guide Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett that you hunt for; it is exactly how you will obtain several books to assist your ability and also ability to have piece de resistance.
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett
Free Ebook Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett
Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett. Bargaining with checking out practice is no requirement. Reviewing Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett is not kind of something sold that you could take or otherwise. It is a point that will certainly change your life to life better. It is the thing that will give you several things around the globe and this cosmos, in the real life and here after. As exactly what will certainly be provided by this Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett, how can you bargain with the many things that has several perks for you?
The factor of why you could obtain and get this Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett faster is that this is guide in soft data form. You can check out guides Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett anywhere you desire even you remain in the bus, workplace, residence, and other areas. But, you could not need to move or bring guide Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett print anywhere you go. So, you will not have much heavier bag to carry. This is why your choice to make better idea of reading Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett is really practical from this instance.
Recognizing the way ways to get this book Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett is likewise important. You have actually been in ideal site to start getting this details. Obtain the Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett web link that we supply here and also see the web link. You can order guide Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett or get it when feasible. You could quickly download this Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett after obtaining deal. So, when you require the book swiftly, you could straight obtain it. It's so simple and so fats, right? You should favor to this way.
Merely connect your device computer system or gizmo to the net connecting. Obtain the contemporary innovation to make your downloading Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett completed. Also you don't wish to review, you can straight close guide soft data and open Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett it later on. You can also easily obtain guide all over, due to the fact that Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett it is in your device. Or when remaining in the workplace, this Open Source Security Tools: Practical Guide To Security Applications, A, By Tony Howlett is likewise recommended to review in your computer system tool.
Few frontline system administrators can afford to spend all day worrying about security. But in this age of widespread virus infections, worms, and digital attacks, no one can afford to neglect network defenses.
Written with the harried IT manager in mind, Open Source Security Tools is a practical, hands-on introduction to open source security tools. Seasoned security expert Tony Howlett has reviewed the overwhelming assortment of these free and low-cost solutions to provide you with the “best of breed” for all major areas of information security.
Inside, you’ll find everything from how to harden Linux and Windows systems to how to investigate breaches with Sleuth Kit, Autopsy Forensic Browser, and Forensic Tool Kit. For each security task described, the author reviews the best open source tools and how to use them and also provides a case study and sample implementation. Covered tasks include:
- Installing an open source firewall using Ipchains, Iptables, Turtle firewall, or Smoothwall
- Scanning ports and testing for vulnerabilities using Nmap, Nlog, Nmap for Windows, Nessus,and NessusWX
- Using sniffers and network-intrusion systems, including Tcpdump, Ethereal, Windump, Snort™, and Snort™ for Windows
- Tracking and analyzing collected data with Swatch, ACID, and NCC
- Encrypting communications with PGP, GnuPG, SSH, and Free S/WAN
This handy reference also tackles the emerging field of wireless security and covers tools such as Kismet Wireless, Airsnort, and Netstumber.
Whether you’re a Windows system administrator or a network administrator, you will come away with an understanding of how open source security tools can help protect your organization and further your own career.
- Sales Rank: #633876 in Books
- Published on: 2004-08-08
- Original language: English
- Number of items: 1
- Dimensions: 8.90" h x 1.50" w x 7.00" l, 2.09 pounds
- Binding: Paperback
- 608 pages
From the Back Cover
Few frontline system administrators can afford to spend all day worrying about security. But in this age of widespread virus infections, worms, and digital attacks, no one can afford to neglect network defenses.
Written with the harried IT manager in mind, Open Source Security Tools is a practical, hands-on introduction to open source security tools. Seasoned security expert Tony Howlett has reviewed the overwhelming assortment of these free and low-cost solutions to provide you with the “best of breed” for all major areas of information security.
Inside, you’ll find everything from how to harden Linux and Windows systems to how to investigate breaches with Sleuth Kit, Autopsy Forensic Browser, and Forensic Tool Kit. For each security task described, the author reviews the best open source tools and how to use them and also provides a case study and sample implementation. Covered tasks include:
- Installing an open source firewall using Ipchains, Iptables, Turtle firewall, or Smoothwall
- Scanning ports and testing for vulnerabilities using Nmap, Nlog, Nmap for Windows, Nessus,and NessusWX
- Using sniffers and network-intrusion systems, including Tcpdump, Ethereal, Windump, Snort™, and Snort™ for Windows
- Tracking and analyzing collected data with Swatch, ACID, and NCC
- Encrypting communications with PGP, GnuPG, SSH, and Free S/WAN
This handy reference also tackles the emerging field of wireless security and covers tools such as Kismet Wireless, Airsnort, and Netstumber.
About the Author
Tony Howlett is the president of Network Security Services, a computer-security application service provider built entirely on open source software. A Certified Information Systems Security Professional (CISSP) and GIAC Systems and Network Auditor (GNSA), he has fourteen years of experience, including running a major regional ISP/CLEC and building a nationwide ATM/DSL network. Mr. Howlett is a frequent speaker on computer security and technology topics and has written for SysAdmin, Computer Currents, Windows Web Solutions, Security Administrator, and other magazines.
Excerpt. � Reprinted by permission. All rights reserved.
Open source software is such an integral part of the Internet that is it safe to say that the Internet wouldn’t exist as we know it today without it. The Internet never would have grown as fast and as dynamically as it did without open source programs such as BIND, which controls the domain name system; Sendmail, which powers most e-mail servers; INN, which runs many news servers; Major Domo, which runs many of the thousands of mailing lists on the Internet; and of course the popular Apache Web server. One thing for sure is that the Internet is a lot cheaper due to open source software. For that, you can thank the Free Software Foundation, BSD UNIX, Linux and Linus Torvalds, and the thousands of nameless programmers who put their hard work and sweat into the programs that run today’s Internet.
While open source programs cover just about every aspect of computer software—from complete operating systems and games to word processors and databases—this book primarily deals with tools used in computer security. In the security field, there are programs that address every possible angle of IT security. There are open source firewalls, intrusion detection systems, vulnerability scanners, forensic tools, and cutting-edge programs for areas such as wireless communications. There are usually multiple choices in each category of mature, stable programs that compare favorably with commercial products. I have tried to choose the best of breed in each major area of information security (in my opinion, of course!). I present them in a detailed manner, showing you not just how to install and run them but also how to use them in your everyday work to have a more secure network. Using the open source software described in this book, you can secure your enterprise from both internal and external security threats with a minimal cost and maximum benefit for both the company and you personally.
I believe combining the concepts of information security with open source software offers one of the most powerful tools for securing your company’s infrastructure, and by extension the entire Internet. It is common knowledge that large-scale virus infections and worms are able to spread because many systems are improperly secured. I believe that by educating the rank-and-file system managers and giving them the tools to get the job done, we can make the Internet more secure, one network at a time.
Audience
The audience for this book is intended to be the average network or system administrator whose job duties are not specifically security and who has at least several years of experience. This is not to say that security gurus won’t get anything out of this book; there might be areas or tools discussed that are new to you. And likewise, someone just getting into IT will learn quite a bit by installing and using these tools. The concepts discussed and techniques used assume a minimal level of computer and network proficiency.
There is also a broad group of readers that is often overlooked by the many open source books. These are the Windows system administrators. The info-security elite often has a certain disdain for Windows-only administrators, and little has been written on quality open source software for Windows. However, the fact remains that Windows servers make up the lion’s share of the Internet infrastructure, and ignoring this is doing a disservice to them and the security community at large. While overall the book is still tilted towards Linux/UNIX because most open source programs are still Linux/UNIX-only, I have tried to put Windows-based security tools in every chapter. I’ve also included helpful hints and full explanations for those who have never run a UNIX machine.
Contents
This book covers most of the major areas of information security and the open source tools you can use to help secure them. The chapters are designed around the major disciplines of information security and key concepts are covered in each chapter.
This book also contains some quick tutorials on basic network terminology and concepts. I have found that while many technicians are well-schooled in their particular platforms or applications, they often lack an understanding of the network protocols and how they work together to get your information from point A to point B. Understanding these concepts are vital to securing your network and implementing these tools properly. So while this book may seem slanted towards the network side of security, most of the threats are coming from there these days, so this is the best place to start.
Coverage of each security tool is prefaced by a summary of the tool, contact information, and various resources for support and more information. While I give a fairly detailed look at the tools covered, whole books can and have been written on many of the programs discussed. These resources give you options for further research.
Helpful and sometimes humorous tips and tricks and tangents are used to accent or emphasize an area of particular importance. These are introduced by Flamey the Tech, our helpful yet sometimes acerbic mascot who is there to help and inform the newbies as well as keeping the more technical readers interested in sections where we actually make some minor modifications to the program code. He resembles the denizens you may encounter in the open source world. In exploring the open source world, you will meet many diverse, brilliant, and sometimes bizarre personalities (you have to be a least a little bent to spend as much unpaid time on these programs as some of us do). Knowing the proper etiquette and protocol will get you a lot farther and with fewer flames. On a more serious note, many of the tools in this book can be destructive or malicious if used in the wrong ways. You can unintentionally break the law if you use these tools in an uninformed or careless manner (for example, accidentally scanning IP addresses that aren’t yours with safe mode off). Flamey will always pipe up to warn you when this is a possibility.
Open Source Security Tool Index
Immediately following this Preface is a listing of all the tools and the pages where they are covered. This way you can skip all the background and go straight to installing the tools if you want.
Chapter 1: Information Security and Open Source Software
This chapter offers an introduction to the world of information security and open source software. The current state of computer security is discussed along with a brief history of the open source movement.
Chapter 2: Operating System Tools
This chapter covers the importance of setting up your security tool system as securely as possible. A tool for hardening Linux systems is discussed as well as considerations for hardening Windows systems. Several operating system-level tools are reviewed too. These basic tools are like a security administrator’s screwdriver and will be used again and again throughout the course of this book and your job.
Chapter 3: Firewalls
The basics of TCP/IP communications and how firewalls work are covered here before jumping into installing and setting up your own open source firewall.
Chapter 4: Port Scanners
This chapter delves deeper into the TCP/IP stack, especially the application layer and ports. It describes the installation and uses for a port scanner, which builds up to the next chapter.
Chapter 5: Vulnerability Scanners
This chapter details a tool that uses some of the earlier technology such as port scanning, but takes it a step further and actually tests the security of the open ports found. This security Swiss army knife will scan your whole network and give you a detailed report on any security holes that it finds.
Chapter 6: Network Sniffers
This chapter primarily deals with the lower levels of the OSI model and how to capture raw data off the wire. Many of the later tools use this basic technology, and it shows how sniffers can be used to diagnose all kinds of network issues in addition to tracking down security problems.
Chapter 7: Intrusion Detection Systems
A tool that uses the sniffer technology introduced in the previous chapter is used here to build a network intrusion detection system. Installation, maintenance, and optimal use are also discussed.
Chapter 8: Analysis and Management Tools
This chapter examines how to keep track of security data and log it efficiently for later review. It also looks at tools that help you analyze the security data and put it in a more usable format.
Chapter 9: Encryption Tools
Sending sensitive data over the Internet is a big concern these days, yet it is becoming more and more of a requirement. These tools will help you encrypt your communications and files with strong encryption as well as create IPsec VPNs.
Chapter 10: Wireless Tools
Wireless networks are becoming quite popular and the tools in this chapter will help you make sure that any wireless networks your company uses are secure and that there aren’t wireless LANs you don’t know about.
Chapter 11: Forensic Tools
The tools discussed in this chapter will help you investigate past break-ins and how to properly collect digital evidence.
Chapter 12: More On Open Source Software
Finally, this chapter will give you resources for finding out more about open source software. Various key Web sites, mailing lists, and other Internet-based resources are identified. Also, I give a number of ways to become more involved in the open source movement if you so desire.
Appendix A: Common Open Source Licenses
Contains the two main open source licenses, the GPL and BSD software licenses.
Most helpful customer reviews
4 of 4 people found the following review helpful.
Top down and bottoms up views
By W Boudville
Howlett spans both the unix/linux and Microsoft worlds in his offering of free, open source security programs. There really is a surprising amount of reliable, free packages out there, for you to bolt down your network. He shows this at the book's start, with a simple but very convenient table of tools, like Ethereal, finger, OpenSSH, PGP, Snort and traceroute. Many others are also listed. Several are available on both operating systems. Here, I consider all the unix/linux OSs as one, and likewise with Microsoft.
The book can be regarded as a buildout of the table. Explaining each tool's best usage, with examples and screen captures. But Howlett offers more than just an encyclopaediac reference approach to the tools. That's more of a bottoms-up outlook. The book has a top-down view that starts with high level topics like firewalls and network sniffers and suggests how to understand the salient points. And thence use some tools optimised for these.
In passing, when he talks about why a cracker might want to break into your system, even if you have nothing in it worthwhile to her, he understates the danger. If you have a machine with a broadband connection, then a cracker has an economic incentive to take it over. She can use it to transmit spam (especially the phishing variety) to other, larger networks. Because open relays are getting closed up, to prevent spam, then some spammers are resorting to creating their own open relays, in this fashion. Howlett describes her using your system for DDOS attacks. But spam injection is actually a better reason, inasmuch as she can make money from this. Of course, this scarcely invalidates his text. If anything, it increases the need for it.
3 of 3 people found the following review helpful.
Outstanding Survey of Open Source Security Tools
By Bookreader1000
This book is an excellent resource to help readers understand what open source tools are available to address every dimension of securing a computing infrastructure.
What I liked best about this book is that it did not assume an already-existing base of knowledge in the reader. Other books present information that assumes the reader already understands the topic, and therefor only needs the details of how to use the tool being discussed. Howlett's book provides a graduated discussion of every area, enabling a beginner to start from scratch and an experienced reader to glean the important details.
Also outstanding about this book is the fact that it covers pretty much all the areas of security an admin will need to address. If you work through this book, you can be pretty sure that you've covered all your bases.
Because of that, the book is like a survey, rather than an exhaustive discussion of any one area. However, the author always provides pointers to other places the reader can go for deeper material. I think this is a great way to organize material and really enjoyed the book because of it.
Overall, this is a great contribution to a critical area of computing.
3 of 3 people found the following review helpful.
The High Value of FREE / Open Source Security Tools
By shuumai
This book provides a good overview of security tools. It could help readers get started by explaining security concepts and stepping the reader through installation of useful tools. (The book includes a CD containing the utilities covered in the text.) It doesn't however, give good coverage to interpreting the results of scans and monitoring.
About 1/4 to 1/3 of the book is wasted on appendices of readily available information. GPL and BSD licenses, well-known port numbers, and a huge list of Nessus plug-ins. The space might have been better utilized by providing coverage of virus scanners or even common application alternatives that are more resistant to attack. On the positive side, the information is there so you won't need to look for it on the Web.
I like the fact that the book covers utilities for both Linux and Windows. And the fact that the utilities are free and Open Source, of course. Just using one of the utilities covered in the book would save you many times the cost of the book.
I learned a few new tricks from this book even though I was already familiar with many of the utilities and concepts.
See all 11 customer reviews...
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett PDF
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett EPub
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett Doc
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett iBooks
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett rtf
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett Mobipocket
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett Kindle
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett PDF
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett PDF
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett PDF
Open Source Security Tools: Practical Guide to Security Applications, A, by Tony Howlett PDF
![The Vaccine Book [PAPERBACK] [2002] [, by Barry R. Bloom(Editor)]From Academic Press](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_tSnjWBMX2Meig2UCbTovlaIqkEfGfZPEbVJyn9DCkGyDMHN14sw0zjY2_WsMY2uew0Q3NTYMDQHACCTKMGoZAGn_fpuLtj5swwh1Wi-cQNblD1-ciLPNkR=s0-d "The Vaccine Book [PAPERBACK] [2002] [, by Barry R. Bloom(Editor)]From Academic Press")
![The Vaccine Book [PAPERBACK] [2002] [, by Barry R. Bloom(Editor)]From Academic Press](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vLi-ogWXl8aYMosFnXaXRfrRjV6AtaOOHnW9rwPhWXLFxX_eFJmwuVTH7R2QSd1_k2ZZpAv5blaWMtdercIiJEzDUBLw=s0-d "The Vaccine Book [PAPERBACK] [2002] [, by Barry R. Bloom(Editor)]From Academic Press")
