Book details of 'Hack Attacks Denied: A Complete Guide to Network Lockdown for UNIX, Windows, and Linux, Second Edition'

Title	Hack Attacks Denied: A Complete Guide to Network Lockdown for UNIX, Windows, and Linux, Second Edition
Author(s)	John Chirillo
ISBN	0471232831
Language	English
Published	September 2002
Publisher	Wiley

---

Back to shelf Computer security
Amazon.com info for Hack Attacks Denied: A Complete Guide to Network Lockdown for UNIX, Windows, and Linux, Second Edition

Score:

Vote for this book

The Virtual Bookcase Reviews of 'Hack Attacks Denied: A Complete Guide to Network Lockdown for UNIX, Windows, and Linux, Second Edition':

Reviewer Rob Slade wrote:
The introduction states that this book is a companion to "Hack Attacks Revealed" and that the audience is everyone. Part one is about securing ports and services. Chapter one, describing common ports and services, recommends replacing TFTP with Tiger FTP, which just happens to be written by the author. Eighteen pages are helpfully devoted to reprinting the source code, just in case you'd like to type it in for yourself. The level of security information varies substantially: there is, for example, no mention of the fact that TFTP has no real use in Windows, and that disabling it is a very good idea. More detail is provided for UNIX than Windows, and some items are helpful, but most are not. Concealed ports and services, otherwise known as backdoors or trojans, are discussed in chapter two. There is a fourteen page source code listing of a crippled trojan, a catalogue of backdoor trojans, and mention of some protective software. Chapter three is mostly about how to get other information, although less space is devoted to the discovery of countermeasures, and an awful lot of the content is of the "you might be able to" variety. Part two, which consists only of chapter four, is about intrusion defence and safeguarding against penetration attacks, but, again, more space is devoted to attacks than defence. Part three is entitled "Tiger Team Secrets." Chapter five is a random list of attacks, including various viruses. Some items, such as the "reboot attack," make no sense as described. Seventy five attacks, most of which have been recounted before, are in chapter six. The countermeasures usually boil down to "protect against this," but are short on how. Chapter seven finishes off with a guide for consultants who want to write security policies (including an outline that bears a striking resemblance to the CISSP CBK). Two sample "audits" are given, along with a reprint of a twenty one page router log (with no analysis). This book is not very revealing, and won't do much to deny access to attackers. copyright Robert M. Slade, 2003
Add my review for Hack Attacks Denied: A Complete Guide to Network Lockdown for UNIX, Windows, and Linux, Second Edition

Book description:

John Chirillo is back and ready to help you outsmart the next generation of intruders! Since the publication of the First Edition, new security breaches to networks have inevitably occurred. In order to keep hack-prevention information as current as possible for security engineers and designers, John Chirillo is back with a new edition on how to fortify your networks and home computers. He's updated his bestselling book and is ready to arm you with the necessary security steps from the system to the daemon, concluding with that crucial ingredient-an effective security policy. Packed with nearly 400 pages of fresh material, including new fortification techniques, advisory solutions, and firewall labs, Hack Attacks Denied, Second Edition offers vital insight that will teach you how to be aware of potential security dangers. This all-in-one reference covers Windows, UNIX, and Linux, and teaches you how to keep the hacks out of your network by using the same Tiger Box tools that hackers use to detect and penetrate network vulnera-bilities. Full of essential examples and illustrations, the Second Edition, contains: * Over 170 new countermeasures * Patching the top seventy-five hack attacks for UNIX and Windows * Cleanup and prevention of malicious code including Myparty, Goner, Sircam, BadTrans, Nimda, Code Red I/II, and many more * TigerSurf 2.0 Intrusion Defense (full suite single license) Bonus CD! To accommodate the new material in the book, Chirillo has moved all lengthy lists and source code from the book to the CD-ROM, and has also added the new version of the security software, TigerSurf 2.0.