Security & Encryption

Back to Computers & Technology


Ghost in the Wires: My Adventures As the World's Most Wanted Hacker

Kevin Mitnick

[Foreword by Steve Wozniak, co-founder of Apple, Inc.]

Kevin Mitnick, the world's most wanted computer hacker, managed to hack into some of the country's most powerful--and seemingly impenetrable--agencies and companies. By conning employees into giving him private information and maneuvering through layers of security, he gained access to data that no one else could.

The suspenseful heart of the book unfolds as Mitnick disappears on a three-year run from the FBI. He creates fake identities, finds jobs at a law firm and hospital, and keeps tabs on his myriad pursuers--all while continuing to hack into computer systems and phone company switches that were considered flawless.

A modern, technology-driven adventure story, Ghost in the Wires is a dramatic account of the joy of outsmarting security programs, the satisfaction of code cracking, and the thrill of unbelievable escape.

The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy (Syngress Basics Series)

Patrick Engebretson

The Basics of Hacking and Penetration Testing serves as an introduction to the steps required to complete a penetration test or perform an ethical hack. You learn how to properly utilize and interpret the results of modern day hacking tools; which are required to complete a penetration test. Tool coverage will include, Backtrack Linux, Google, Whois, Nmap, Nessus, Metasploit, Netcat, Netbus, and more. A simple and clean explanation of how to utilize these tools will allow you  to gain a solid understanding of each of the four phases and prepare them to take on more in-depth texts and topics. This book includes the use of a single example (pen test target) all the way through the book which allows you to clearly see how the tools and phases relate.

  • Each chapter contains hands-on examples teach you how to interpret the results and utilize those results in later phases
  • Written by an author who has practical experience as a Penetration Tester and who has taught "Introduction to Penetration Testing” for 5 years
  • Utilizes Backtrack Linux distribution and the "core” tools required to complete a penetration test

Cyber War: The Next Threat to National Security and What to Do About It

Richard A. Clarke, Robert Knake

Richard A. Clarke warned America once before about the havoc terrorism would wreak on our national security—and he was right. Now he warns us of another threat, silent but equally dangerous. Cyber War is a powerful book about technology, government, and military strategy; about criminals, spies, soldiers, and hackers. It explains clearly and convincingly what cyber war is, how cyber weapons work, and how vulnerable we are as a nation and as individuals to the vast and looming web of cyber criminals. This is the first book about the war of the future—cyber war—and a convincing argument that we may already be in peril of losing it.

Liars and Outliers: Enabling the Trust that Society Needs to Thrive

Bruce Schneier

How does society function when you can't trust everyone?

When we think about trust, we naturally think about personal relationships or bank vaults. That's too narrow. Trust is much broader, and much more important. Nothing in society works without trust. It's the foundation of communities, commerce, democracy—everything.

In this insightful and entertaining book, Schneier weaves together ideas from across the social and biological sciences to explain how society induces trust. He shows how trust works and fails in social settings, communities, organizations, countries, and the world.

In today's hyper-connected society, understanding the mechanisms of trust is as important as understanding electricity was a century ago. Issues of trust and security are critical to solving problems as diverse as corporate responsibility, global warming, and our moribund political system. After reading Liars and Outliers, you'll think about social problems, large and small, differently.

AUTHOR BIO

BRUCE SCHNEIER is an internationally renowned security technologist who studies the human side of security. He is the author of eleven books; and hundreds of articles, essays, and academic papers. He has testified before Congress, is a frequent guest on television and radio, and is regularly quoted in the press. His blog and monthly newsletter at www.schneier.com reach over devoted 250,000 devoted readers world-wide.

"The closest thing the security industry has to a rock star."
The Register

ADVANCE PRAISE FOR LIARS AND OUTLIERS

"A rich, insightfully fresh take on what security really means!"
—DAVID ROPEIK, Author of How Risky is it, Really?

"Schneier has accomplished a spectacular tour de force: an enthralling ride through history, economics, and psychology, searching for the meanings of trust and security. A must read."
ALESSANDRO ACQUISTI, Associate Professor of Information Systems and Public Policy at the Heinz College, Carnegie Mellon University

"Liars and Outliers offers a major contribution to the understandability of these issues, and has the potential to help readers cope with the ever-increasing risks to which we are being exposed. It is well written and delightful to read."
PETER G. NEUMANN, Principal Scientist in the SRI International Computer Science Laboratory

"Whether it's banks versus robbers, Hollywood versus downloaders, or even the Iranian secret police against democracy activists, security is often a dynamic struggle between a majority who want to impose their will, and a minority who want to push the boundaries. Liars and Outliers will change how you think about conflict, our security, and even who we are."
ROSS ANDERSON, Professor of Security Engineering at Cambridge University and author of Security Engineering

"Readers of Bruce Schneier's Liars and Outliers will better understand technology and its consequences and become more mature practitioners."
PABLO G. MOLINA, Professor of Technology Management, Georgetown University

"Liars & Outliers is not just a book about security—it is the book about it. Schneier shows that the power of humour can be harnessed to explore even a serious subject such as security. A great read!"
FRANK FUREDI, author of On Tolerance: A Defence of Moral Independence

"This fascinating book gives an insightful and convincing framework for understanding security and trust."
JEFF YAN, Founding Research Director, Center for Cybercrime and Computer Security, Newcastle University

"By analyzing the moving parts and interrelationships among security, trust, and society, Schneier has identifi ed critical patterns, pressures, levers, and security holes within society. Clearly written, thoroughly interdisciplinary, and always smart, Liars and Outliers provides great insight into resolving society's various dilemmas."
JERRY KANG, Professor of Law, UCLA

"By keeping the social dimension of trust and security in the center of his analysis, Schneier breaks new ground with an approach that both theoretically grounded and practically applicable."
JONATHAN ZITTRAIN, Professor of Law and Computer Science, Harvard University and author of The Future of the Internet—And How to Stop It

"Eye opening. Bruce Schneier provides a perspective you need to understand today’s world."
STEVEN A. LEBLANC, Director of Collections, Harvard University and author of Constant Battles: Why We Fight

"An outstanding investigation of the importance of trust in holding society together and promoting progress. Liars and Outliers provides valuable new insights into security and economics."
ANDREW ODLYZKO, Professor, School of Mathematics, University of Minnesota

"What Schneier has to say about trust—and betrayal—lays a groundwork for greater understanding of human institutions. This is an essential exploration as society grows in size and complexity."
JIM HARPER, Director of Information Policy Studies, CATO Institute and author of Identity Crisis: How Identification is Overused and Misunderstood

"Society runs on trust. Liars and Outliers explains the trust gaps we must fill to help society run even better."
M. ERIC JOHNSON, Director, Glassmeyer/McNamee Center for Digital Strategies, Tuck School of Business at Dartmouth College

"An intellectually exhilarating and compulsively readable analysis of the subtle dialectic between cooperation and defection in human society. Intellectually rigorous and yet written in a lively, conversational style, Liars and Outliers will change the way you see the world."
DAVID LIVINGSTONE SMITH, author of Less Than Human: Why We Demean, Enslave, and Exterminate Others

"Schneier tackles trust head on, bringing all his intellect and a huge amount of research to bear. The best thing about this book, though, is that it's great fun to read."
ANDREW MCAFEE, Principal Research Scientist, MIT Center for Digital Business and co-author of Race Against the Machine

"Bruce Schneier is our leading expert in security. But his book is about much more than reducing risk. It is a fascinating, thought-provoking treatise about humanity and society and how we interact in the game called life."
JEFF JARVIS, author of Public Parts: How Sharing in the Digital Age Improves the Way We Work and Live

"Both accessible and thought provoking, Liars and Outliers invites readers to move beyond fears and anxieties about security in modern life to understand the role of everyday people in creating a healthy society. This is a must-read!"
DANAH BOYD, Research Assistant Professor in Media, Culture, and Communication at New York University

"Trust is the sine qua non of the networked age and trust is predicated on security. Bruce Schneier’s expansive and readable work is rich with insights that can help us make our shrinking world a better one."
DON TAPSCOTT, co-author of Macrowikinomics: Rebooting Business
and the World

"An engaging and wide-ranging rumination on what makes society click. Highly recommended."
JOHN MUELLER, author of Overblown: How Politicians and the Terrorism Industry Inflate National Security Threats, and Why We Believe Them

Security and Privacy for Microsoft Office 2010 Users

Mitch Tulloch

This title is also available as a free eBook.

Take control—and put the built-in security and privacy features in Microsoft Office to work! Whether downloading documents, publishing a presentation, or collaborating online—this guide offers concise, how-to guidance and best practices to help protect your documents and your ideas.

  • Get practical, proactive guidance for using the security and privacy management features in Office 2010 and Office 365
  • Walk through everyday scenarios, and discover everyday techniques that help you take charge
  • Understand common risks and learn best practices you can apply right away

Metasploit: The Penetration Tester's Guide

David Kennedy, Jim O'Gorman, Devon Kearns, Mati Aharoni

"The best guide to the Metasploit Framework." —HD Moore, Founder of the Metasploit Project

The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester's Guide fills this gap by teaching you how to harness the Framework and interact with the vibrant community of Metasploit contributors.

Once you've built your foundation for penetration testing, you'll learn the Framework's conventions, interfaces, and module system as you launch simulated attacks. You'll move on to advanced penetration testing techniques, including network reconnaissance and enumeration, client-side attacks, wireless attacks, and targeted social-engineering attacks.

Learn how to:

  • Find and exploit unmaintained, misconfigured, and unpatched systems
  • Perform reconnaissance and find valuable information about your target
  • Bypass anti-virus technologies and circumvent security controls
  • Integrate Nmap, NeXpose, and Nessus with Metasploit to automate discovery
  • Use the Meterpreter shell to launch further attacks from inside the network
  • Harness standalone Metasploit utilities, third-party tools, and plug-ins
  • Learn how to write your own Meterpreter post exploitation modules and scripts

You'll even touch on exploit discovery for zero-day research, write a fuzzer, port existing exploits into the Framework, and learn how to cover your tracks. Whether your goal is to secure your own networks or to put someone else's to the test, Metasploit: The Penetration Tester's Guide will take you there and beyond.

The Code Book: The Evolution of Secrecy from Mary, Queen of Scots to Quantum Cryptography

Simon Singh

Codes have decided the fates of empires, countries, and monarchies throughout recorded history. Mary, Queen of Scots was put to death by her cousin, Queen Elizabeth, for the high crime of treason after spymaster Sir Francis Walsingham cracked the secret code she used to communicate with her conspirators. And thus the course of British history was altered by a few sheets of cryptic prose. This is just one link in humankind's evolutionary chain of secret communication, and just one of the fascinating incidents recounted in The Code Book, written by bestselling author Simon Singh.

Combining a superb storyteller's sense of drama and a scientist's appreciation for technical perfection, Singh traces the evolution of secret writing from ancient Greek military espionage to the frontiers of computer science. The result is an epic tale of human ingenuity, with examples that range from the poignant to the peculiar to the world-historical.

There is the case of the Beale ciphers, which involves Wild West escapades, a cowboy who amassed a vast fortune, a buried treasure worth $20 million, and a mysterious set of encrypted papers describing its whereabouts--papers that have baffled generations of cryptanalysts and captivated hundreds of treasure hunters.

A speedier end to a bloody war was the only reward that could be promised to the Allied code breakers of World Wars I and II, whose selfless contributions altered the course of history; but few of them lived to receive any credit for their top-secret accomplishments. Among the most moving of these stories is that of the World War II British code breaker Alan Turing, who gave up a brilliant career in mathematics to devote himself to the Allied cause, only to end his years punished by the state for his homosexuality, while his heroism was ignored. No less heroic were the Navajo code talkers, who volunteered without hesitation to risk their lives for the Allied forces in the Japanese theater, where they were routinely mistaken for the enemy.

Interspersed with these gripping stories are clear mathematical, linguistic, and technological demonstrations of codes, as well as illustrations of the remarkable personalities--many courageous, some villainous, and all obsessive--who wrote and broke them.

All roads lead to the present day, in which the possibility of a truly unbreakable code looms large. Singh explores this possibility, and the ramifications of our increasing need for privacy, even as it begins to chafe against the stated mission of the powerful and deeply secretive National Security Agency. Entertaining, compelling, and remarkably far-reaching, this is a book that will forever alter your view of history, what drives it, and how private that e-mail you just sent really is.

Included in the book is a worldwide Cipher Challenge--a $15,000 award will be given by the author to the first reader who cracks the code successfully. Progress toward the solution will be tracked on The Code Book website.

Social Engineering: The Art of Human Hacking

Christopher Hadnagy

The first book to reveal and dissect the technical aspect of many social engineering maneuvers

From elicitation, pretexting, influence and manipulation all aspects of social engineering are picked apart, discussed and explained by using real world examples, personal experience and the science behind them to unraveled the mystery in social engineering.

Kevin Mitnick—one of the most famous social engineers in the world—popularized the term “social engineering.” He explained that it is much easier to trick someone into revealing a password for a system than to exert the effort of hacking into the system. Mitnick claims that this social engineering tactic was the single-most effective method in his arsenal. This indispensable book examines a variety of maneuvers that are aimed at deceiving unsuspecting victims, while it also addresses ways to prevent social engineering threats.

  • Examines social engineering, the science of influencing a target to perform a desired task or divulge information
  • Arms you with invaluable information about the many methods of trickery that hackers use in order to gather information with the intent of executing identity theft, fraud, or gaining computer system access
  • Reveals vital steps for preventing social engineering threats

Social Engineering: The Art of Human Hacking does its part to prepare you against nefarious hackers—now you can do your part by putting to good use the critical information within its pages.

From the Author: Defining Neuro-Linguistic Hacking (NLH)

Author Chris Hadnagy
NLH is a combination of the use of key parts of neuro-lingusitic programming, the functionality of microexpressions, body language, gestures and blend it all together to understand how to “hack” the human infrastructure. Let’s take a closer at each to see how it applies.

Neuro-Lingusitic Programming (NLP): NLP is a controversial approach to psychotherapy and organizational change based on "a model of interpersonal communication chiefly concerned with the relationship between successful patterns of behavior and the subjective experiences underlying them" and "a system of alternative therapy based on this which seeks to educate people in self-awareness and effective communication, and to change their patterns of mental and emotional behavior"

Neuro: This points to our nervous system which we process our five senses:
• Visual
• Auditory
• Kinesthetic
• Smell
• Taste

Linguistic: This points to how we use language and other nonverbal communication systems through which our neural representations are coded, ordered and given meaning. This can include things like:
• Pictures
• Sounds
• Feelings
• Tastes
• Smells
• Words

Programming: This is our ability to discover and utilize the programs that we run in our neurological systems to achieve our specific and desired outcomes.

In short, NLP is how to use the language of the mind to consistently achieve, modify and alter our specific and desired outcomes (or that of a target).

Microexpressions are the involuntary muscular reactions to emotions we feel. As the brain processes emotions it causes nerves to constrict certain muscle groups in the face. Those reactions can last from 1/25th of a second to 1 second and reveal a person’s true emotions.

Much study has been done on microexpressions as well as what is being labeled as subtle microexpressions. A subtle microexpression is an important part of NLH training as a social engineer as many people will display subtle hints of these expressions and give you clues as to their feelings.

Practical Lock Picking: A Physical Penetration Tester's Training Guide

Deviant Ollam

For the first time, Deviant Ollam, one of the security industry's best-known lockpicking teachers, has assembled an instructional manual geared specifically toward penetration testers. Unlike other texts on the subject (which tend to be either massive volumes detailing every conceivable style of lock or brief "spy manuals" that only skim the surface) this book is for INFOSEC professionals that need essential, core knowledge of lockpicking and seek the ability to open most locks with relative ease. Deviant's material is presented with rich, detailed diagrams and is offered in easy-to-follow lessons which allow even beginners to acquire the knowledge very quickly. Everything from straightforward lockpicking to quick-entry techniques like shimming, bumping, and bypassing is explained and shown.Whether you're being hired to penetrate security or simply trying to harden your own defenses, this book is essential.

  • Detailed photos make learning as easy as picking a lock
  • DVD is filled with indispensible lock picking videos and color photos
  • Extensive appendix details tools and toolkits currently available for all your lock picking needs

CISSP All-in-One Exam Guide, Fifth Edition

Shon Harris

Get complete coverage of the latest release of the Certified Information Systems Security Professional (CISSP) exam inside this comprehensive, fully updated resource. Written by the leading expert in IT security certification and training, this authoritative guide covers all 10 CISSP exam domains developed by the International Information Systems Security Certification Consortium (ISC2). You'll find learning objectives at the beginning of each chapter, exam tips, practice exam questions, and in-depth explanations. Designed to help you pass the CISSP exam with ease, this definitive volume also serves as an essential on-the-job reference.

COVERS ALL 10 CISSP DOMAINS:

  • Information security and risk management
  • Access control
  • Security architecture and design
  • Physical and environmental security
  • Telecommunications and network security
  • Cryptography
  • Business continuity and disaster recovery planning
  • Legal regulations, compliance, and investigations
  • Application security
  • Operations security

THE CD-ROM FEATURES:

  • Hundreds of practice exam questions
  • Video training excerpt from the author
  • E-book

Shon Harris, CISSP, is a security consultant, a former member of the Information Warfare unit in the Air Force, and a contributing writer to Information Security Magazine and Windows 2000 Magazine. She is the author of the previous editions of this book.

Back to Computers & Technology