Hack Attacks Testing: How to Conduct Your Own Security Audit
by John Chirillo
Category: Computers

Learn how to conduct thorough security examinations viaillustrations and virtual simulations A network security breach (a hack, crack, or other invasion)occurs when unauthorized access to the network is achieved andhavoc results. The best possible defense is an offensive strategythat allows you to regularly test your network to reveal thevulnerabilities and close the holes before someone gets in. Writtenby veteran author and security expert John Chirillo, Hack AttacksTesting explains how to perform your own security audits. Step by step, the book covers how-to drilldowns for installingand configuring your Tiger Box operating systems, installations,and configurations for some of the most popular auditing softwaresuites. In addition, it includes both common and custom usages,scanning methods, and reporting routines of each. Finally, Chirilloinspects the individual vulnerability scanner results and comparesthem in an evaluation matrix against a select group of intentionalsecurity holes on a target network. Chirillo tackles such topicsas: Building a multisystem Tiger Box Basic Windows 2000 Server installation and configuration forauditing Basic Linux and Solaris installation and configuration Basic Mac OS X installation and configuration for auditing ISS, CyberCop, Nessus, SAINT, and STAT scanners Using security analysis tools for Mac OS X Vulnerability assessment Bonus CD! The CD contains virtual simulations of scanners, ISS InternetScanner evaluation version, and more.