---

Book description
Do you trust your computer? You shouldn't. Personal computers are now part of the furniture in homes around the world. We use them for generating, storing and communicating documents and images; we talk to friends and family via email and surf the Web without giving too much thought to the security of our personal information. Unfortunately hacking and computer security are issues which affect all computer users, not just big corporations. What is a desktop witness? Your computer stores a record of every document you create, every e-mail you write or receive, which sites you visit on the Internet, even attachments which you don't open. An unattended computer may reveal your secrets if you leave security vulnerabilities unattended to. It m... Rest of this review on the detail page
I want to add my review for this book!
Reviews (2) and details of Desktop Witness: The Do's & Don'ts of Personal Computer Security

---

Review:
Stephen Northcutt and his coauthors note in the superb Intrusion Signatures and Analysis that there's really no such thing as an attack that's never been seen before. The book documents scores of attacks on systems of all kinds, showing exactly what security administrators should look for in their logs and commenting on attackers' every significant command. This is largely a taxonomy of hacker strategies and the tools used to implement them. As such, it's an essential tool for people who want to take a scientific, targeted approach to defending information systems. It's also a great resource for security experts who want to earn their Certified Intrusion Analyst ratings from the Global Incident Analysis Center (GIAC)--it's organized, in par... Rest of this review on the detail page
(Review by amazon.com)
I want to add my review for this book!
Reviews (2) and details of Intrusion Signatures and Analysis

---

Review:
Chapter one is a good introduction to the basics of intrusion detection, although it is odd that the list of detection methods is missing some important entries, such as heuristic rule-based and statistical methods. The background overview of Snort, in chapter two, describes alerts, related applications, and even has recommendations for sensor net architecture. Most of the content in regard to the components of Snort, in chapter three, deals with the preprocessors, and various attack signatures. Chapter four's advice about planning for the installation of Snort is broadly based, addressing policy, architecture, and even incident response, but the material is quite abstract, and could have benefitted from more practical examples. Some o... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Intrusion Detection with Snort

---

Review:
Given the relative scarcity of knowledge about data and communications security, it seems rather odd to find a security book which comes right out, first thing, and say that it is not intended to be tutorial. However, Oppliger does not spend much time on the basics. (There is a general introduction to security terminology and techniques, but only one chapter.) The emphasis of the book is on the explanation, review, and comparison of various systems for ensuring the security of communications within a network over which the security of physical links may be in doubt. The systems covered include Kerberos, NetSP (Network Security Program), SPX (Sphinx), TESS (The Exponential Security System), SESAME (Secure European System for Applicati... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Authentication Systems for Secure Networks (Artech House Computer Science Library)

---

Review:
One of the key problems of computer security is that of guaranteeing that an entity (person or system) really is who he, she, or it claims to be. Authentication procedures may be very trusting (as for "guest" accounts with limited capability), moderately strong (your bank requires both a physical card and a PIN before it will dispense money from an ATM), or nearly foolproof (biometric devices, which examine--to cite two examples--retina scans or fingerprints). Authentication: From Passwords to Public Keys examines the whole range of authentication options and offers advice on which one might be right for your security requirements, budget, and tolerance for user inconvenience. As the "public keys" part of the title implies, this book also d... Rest of this review on the detail page
(Review by amazon.com)
I want to add my review for this book!
Reviews (3) and details of Authentication: From Passwords to Public Keys