Security Power Tools

What if you could sit down with some of the most talented security engineers in the world and ask any network security question you wanted? Security Power Tools lets youdo exactly that! Members of Juniper Networks' Security Engineering team and a few guest experts reveal how to use, tweak, and push the most popular network security applications, utilities, and tools available using Windows, Linux, Mac OS X, and Unix platforms.Designed to be browsed, Security Power Tools offers you multiple approaches to network security via 23 cross-referenced chapters that review the best security tools on the planet for both black hat techniques and white hat defense tactics. It's a must-have reference for network administrators, engineers and consultants with tips, tricks, and how-to advice for an assortment of freeware and commercial tools, ranging from intermediate level command-line operations to advanced programming of self-hiding exploits.Security Power Tools details best practices for: Reconnaissance -- including tools for network scanning such as nmap; vulnerability scanning tools for Windows and Linux; LAN reconnaissance; tools to help with wireless reconnaissance; and custom packet generation Penetration -- such as the Metasploit framework for automated penetration of remote computers; tools to find wireless networks; exploitation framework applications; and tricks and tools to manipulate shellcodes Control -- including the configuration of several tools for use as backdoors; and a review of known rootkits for Windows and Linux Defense -- including host-based firewalls; host hardening for Windows and Linux networks; communication security with ssh; email security and anti-malware; and device security testing Monitoring -- such as tools to capture, and analyze packets; network monitoring with Honeyd and snort; and host monitoring of production servers for file changes Discovery -- including The Forensic Toolkit, SysInternals and other popular forensic tools; application fuzzer and fuzzing techniques; and the art of binary reverse engineering using tools like Interactive Disassembler and OllydbgA practical and timely network security ethics chapter written by a Stanford University professor of law completes the suite of topics and makes this book a goldmine of security information. Save yourself a ton of headaches and be prepared for any network security dilemma with Security Power Tools.

List of contents

From the contents:

Foreword
Credits
Preface
Part I. Legal and Ethics
1. Legal and Ethics Issues
1.1 Core Issues
1.2 Computer Trespass Laws: No "Hacking" Allowed
1.3 Reverse Engineering
1.4 Vulnerability Reporting
1.5 What to Do from Now On
Part II. Reconnaissance
2. Network Scanning
2.1 How Scanners Work
2.2 Superuser Privileges
2.3 Three Network Scanners to Consider
2.4 Host Discovery
2.5 Port Scanning
2.6 Specifying Custom Ports
2.7 Specifying Targets to Scan
2.8 Different Scan Types
2.9 Tuning the Scan Speed
2.10 Application Fingerprinting
2.11 Operating System Detection
2.12 Saving Nmap Output
2.13 Resuming Nmap Scans
2.14 Avoiding Detection
2.15 Conclusion
3. Vulnerability Scanning
3.1 Nessus
3.2 Nikto
3.3 WebInspect
4. LAN Reconnaissance
4.1 Mapping the LAN
4.2 Using ettercap and arpspoof on a Switched Network
4.3 Dealing with Static ARP Tables
4.4 Getting Information from the LAN
4.5 Manipulating Packet Data
5. Wireless Reconnaissance
5.1 Get the Right Wardriving Gear
5.2 802.11 Network Basics
5.3 802.11 Frames
5.4 How Wireless Discovery Tools Work
5.5 Netstumbler
5.6 Kismet at a Glance
5.7 Using Kismet
5.8 Sorting the Kismet Network List
5.9 Using Network Groups with Kismet
5.10 Using Kismet to Find Networks by Probe Requests
5.11 Kismet GPS Support Using gpsd
5.12 Looking Closer at Traffic with Kismet
5.13 Capturing Packets and Decrypting Traffic with Kismet
5.14 Wireshark at a Glance
5.15 Using Wireshark

About the author

Bryan Burns is the technical editor and general project leader of this book. He is the Chief Security Architect for Juniper Networks with more than a decade of experience in the security networking field and with numerous posts at leading network security companies.All other contributors are security engineers and researchers working at Juniper Networks in various posts both in the security network lab and in the field.

Dave Killion (NSCA, NSCP) is a senior security research engineer with Juniper Networks, Inc. Formerly with the U.S. Army's Information Operations Task Force as an Information Warfare Specialist, he currently researches, develops, and releases signatures for the NetScreen Deep Inspection and Intrusion Detection and Prevention platforms. Dave has also presented at several security conventions including DefCon and ToorCon, with a proof-of-concept network monitoring evasion device in affiliation with several local security interest groups that he helped form. Dave lives south of Silicon Valley with his wife Dawn and two children, Rebecca and Justin.

Nicolas Beauchesne is a network security engineer specializing in network penetration. He has worked with Juniper Networks for the past two years.

Eric Moret is originally from France and lives with his wife and two children in the San Francisco Bay Area. He obtained his Masters degree in Computer Sciences in 1997. He currently works at Juniper Networks where he manages a team dedicated to testing and releasing network protocol decoders for security appliance products. In addition to writing he enjoys traveling the world, photography and, depending on the season, snow boarding the Sierra Nevada or scuba diving Mexican caves.

Julien Sobrier is a network security engineer at Zscaler. He works on the web security in the cloud. He was previously working for Juniper Networks. His experience was on the Intrusion Detection and Preventions systems. He is also the creator of http://safe.mn/, a URL shortener focused on security.

Michael Lynn is a network security engineer at Juniper Networks. He has worked there for the past two years.

Eric Markham is a security engineer. He has been with Juniper Networks for the past five years.

Chris Iezzoni has been a security researcher and signature developer with Juniper's security team for several years.

Philippe Biondi is a research engineer at EADS Innovation Works. He works in the IT security lab, and is the creator of many programs like Scapy or ShellForge.

Jennifer Stisa Granick is the Civil Liberties Director at the Electronic Frontier Foundation. Before EFF, Granick was a Lecturer in Law and Executive Director of the Center for Internet and Society at Stanford Law School where she taught Cyberlaw and Computer Crime Law. She practices in the full spectrum of Internet law issues including computer crime and security, national security, constitutional rights, and electronic surveillance, areas in which her expertise is recognized nationally.

Before teaching at Stanford, Jennifer spent almost a decade practicing criminal defense law in California. She was selected by Information Security magazine in 2003 as one of 20 "Women of Vision" in the computer security field. She earned her law degree from University of California, Hastings College of the Law and her undergraduate degree from the New College of the University of South Florida.

Steve Manzuik has more than 13 thirteen years of experience in the information technology and security industry. Steve founded and was the technical lead for Entrench Technologies. Prior to Entrench, Mr. Manzuik was a manager in Ernst & Young's Security & Technology Solutions practice. Steve co-authored Hack Proofing Your Network, Second Edition (Syngress, 1928994709).

Paul Guersch is a security technical writer and one of the developmental editors of Security Power Tools (O'Reilly). He has been with Juniper Networks for a year and a half.

Summary

Reveals how to use, tweak, and push the popular network security applications, utilities, and tools using Windows, Linux, Mac OS X, and Unix platforms. This book offers multiple approaches to network security via 23 cross-referenced chapters that review the security tools for both black hat techniques and white hat defense tactics.

Product details

• Authors: Nicholas Beauchesne, Nicolas Beauchesne, Philippe Biondi, Bryan Burns, Burns Bryan, Jennifer Granick, Jennifer Stisa Granick, Paul Guersch, Dave Killion, Chris Lezzoni, Michael Lynn, Steve Manzuik, Steve Manzuil, Eric Markham, Eric Moret, Chris Sobrier, Julien Sobrier
• Publisher: O'Reilly Media
• Languages: English
• Product format: Paperback / Softback
• Released: 01.01.2007
• EAN: 9780596009632
• ISBN: 978-0-596-00963-2
• No. of pages: 822
• Weight: 1356 g
• Illustrations: w. figs.
• Series: O'Reilly Ser.
• Subjects: Natural sciences, medicine, IT, technology > IT, data processing > Data communication, networks; Systemadministration, Datenschutz, tools, Unix, Linux, Security,