Official CHFI Study Guide Exam 312-49 - Certification Training

This is the only official, EC-Council-endorsed CHFI (Computer Hacking Forensics Investigator) study guide. It was written for security professionals, systems administrators, IT consultants, legal professionals, IT managers, police and law enforcement personnel studying for the CHFI certification, and professionals needing the skills to identify an intruder's footprints and properly gather the necessary evidence to prosecute. Key features include:

. The Only Official Study Guide for CHFI
Provides 100% coverage of all exam objectives.
. Full Web-based Exam
Modeled after the real exam, it also includes explanations of correct and incorrect answers.
. Exam Objectives
Each is clearly explained at the beginning of the chapter.
. Notes and Alerts
Highlight crucial points of the exam modules.
. Exam Objectives Fast Track
Bulleted highlights emphasize the important points from the exam's perspective at the end of the chapter.
. Key Terms
All concepts are defined and explained as they appear.
. Exam Objectives Frequently Asked Questions
Test what you have learned by reading FAQs based on the material covered in the chapter. Log on to the Syngress Web site to access review questions based on the exam.

http://www.mediafire.com/?r1pyd0xscnj

Designing BSD Rootkits An Introduction to Kernel Hacking

Designing BSD Rootkits introduces the fundamentals of programming and developing rootkits under the FreeBSD operating system. In addition to explaining rootkits and rootkit writing, the book aims to inspire readers to explore the FreeBSD kernel and gain a better understanding of the kernel and the FreeBSD operating system itself. Unlike titles on exploit writing or how to gain root access to a system, Designing BSD Rootkits focuses on maintaining root access long after gaining access to a computer. Written in a friendly, accessible style and sprinkled with geek humor and pop culture references, the author favors a "learn by example" approach that assumes no prior kernel hacking experience.

http://www.mediafire.com/?fyzf1zgcidg

Security Administrator Street Smarts: A Real World Guide to CompTIA Security+ Skills

An invaluable study tool

This no-nonsense book also covers the common tasks that CompTIA expects all of its Security+ candidates to know how to perform. So whether you're preparing for certification or seeking practical skills to break into the field, you'll find the instruction you need, including:

• Performing an initial risk assessment
• Installing, updating, and running anti-virus
• Encrypting files and securing e-mail
• Creating new user accounts
• Deploying IPSec

http://www.megaupload.com/?d=IMRVO2G3

Gray Hat Hacking -The Ethical Hackers Handbook

“A fantastic book for anyone looking to learn the tools and techniques needed to break in and stay in.” –Bruce Potter, Founder, The Shmoo Group

“Very highly recommended whether you are a seasoned professional or just starting out in the security business.” –Simple Nomad, Hacker

http://mihd.net/vosybd

http://www.filefactory.com/file/454ac2/

http://rapidshare.com/files/94947001/0071495681.7z

Complete Guide to CISM Certification

The Certified Information Security Manager^®(CISM^®) certification program was developed by the Information Systems Audit and Controls Association (ISACA^®). It has been designed specifically for experienced information security managers and those who have information security management responsibilities. The Complete Guide to CISM^® Certification examines five functional areassecurity governance, risk management, information security program management, information security management, and response management.

Presenting definitions of roles and responsibilities throughout the organization, this practical guide identifies information security risks. It deals with processes and technical solutions that implement the information security governance framework, focuses on the tasks necessary for the information security manager to effectively manage information security within an organization, and provides a description of various techniques the information security manager can use. The book also covers steps and solutions for responding to an incident. At the end of each key area, a quiz is offered on the materials just presented. Also included is a workbook to a thirty-question final exam.

Complete Guide to CISM^® Certification describes the tasks performed by information security managers and contains the necessary knowledge to manage, design, and oversee an information security program. With definitions and practical examples, this text is ideal for information security managers, IT auditors, and network and system administrators.

http://www.megaupload.com/?d=5VQPZG5P

Computer Viruses and Malware

Computer Viruses and Malware draws together hundreds of sources to provide an unprecedented view of malicious software and its countermeasures. This book discusses both the technical and human factors involved in computer viruses, worms, and anti-virus software. It also looks at the application of malicious software to computer crime and information warfare." Computer Viruses and Malware is designed for a professional audience composed of researchers and practitioners in industry. This book is also suitable as a secondary text for advanced-level students in computer science.

http://www.megaupload.com/?d=1A237IS4

Hacking del.icio.us

• Share the wealth–del.icio.us is a publicly viewable bookmarks manager that allows users to easily add favorite sites to a personal collection of links, to categorize those sites with keywords (tags), and to share a collection not only between browsers and machines, but also with others
• It really is delish! del.icio.us is an excellent tool for tracking Web popularity, hot topics (or memes), and can provide RSS feeds for any tag
• Adventurous readers with some basic Web design and scripting or programming skills will sink their teeth into these tasty treats on tweaking, modifying, and hacking del.icio.us
• Hacks include: geotagging del.icio.us bookmarks, mapping del.icio.us tags with Google Maps, building and watching tag clouds over time, and integrating bloglines and del.icio.us
• Some additional unique projects are del.icio.us tagging using browser keywords, combining del.icio.us and blogs, programming with the del.icio.us API, and hacking Firefox and Safari

http://www.megaupload.com/?d=N70STE52

Wardriving & Wireless Penetration Testing

Unlike other wireless networking and security books that have been published in recent years, this book is geared primarily to those individuals that are tasked with performing penetration testing on wireless networks. This book continues in the successful vein of books for penetration testers such as Google Hacking for Penetration Testers and Penetration Testers Open Source Toolkit. Additionally, the methods discussed will prove invaluable for network administrators tasked with securing wireless networks. By understanding the methods used by penetration testers and attackers in general, these administrators can better define the strategies needed to secure their networks.

* According to a study by the Strategis Group more than one third of the words population will own a wireless device by the end of 2008.

* The authors have performed hundreds of wireless penetration tests, modeling their attack methods after those used by real world attackers.

* Unlike other wireless books, this is geared specifically for those individuals that perform security assessments and penetration tests on wireless networks.

http://www.megaupload.com/?d=26PK9PEK

Network Security Assessment: From Vulnerability to Patch

This book will take readers from the discovery of vulnerabilities and the creation of the corresponding exploits, through a complete security assessment, all the way through deploying patches against these vulnerabilities to protect their networks.
* Unique coverage detailing both the management and technical skill and tools required to develop an effective vulnerability management system

* Vulnerability management is rated the #2 most pressing concern for security professionals in a poll conducted by Information Security Magazine

* Covers in the detail the vulnerability management lifecycle from discovery through patch.

http://www.megaupload.com/?d=8QGWFYJ1

Syngress Asterisk Hacking

Asterisk hacking shows readers about a hacking technique they may not be aware of. It teaches the secrets the bad guys already know about stealing personal information through the most common, seemingly innocuous, highway into computer networks: the phone system. The book also comes with an Asterisk Live CD (SLAST) containing all the tools discussed in the book and ready to boot!

This book shows readers what they can do to protect themselves, their families, their clients, and their network from this invisible threat. Power tips show how to make the most out of the phone system and turn it into a samurai sword for defense or attack!

*Asterisk Live CD (SLAST) containing all the tools discussed in the book and ready to boot!
*Contains original code to perform previously unthought of tasks like changing caller id, narrowing a phone number down to a specific geographic location, and more!
*See through the eyes of the attacker and learn WHY they are motivated, something not touched upon in most other titles

http://www.megaupload.com/?d=X7535PNI

CBT Securing Networks with Pix and ASA devices

CBT Securing Networks with Pix and ASA devides

As a CCSP or Cisco Firewall Specialist candidate, it’s important to enroll in Securing Networks with PIX and ASA training. These Cisco products will play a key role in your security career and it pays to fully understand how to configure, verify, and manage them.

We’ll show you how and prepare you for passing the related Securing Networks with PIX and ASA exam at the same time. In fact, not only do our onsite SNPA training classes and related courses cover the exam objectives, they also give you real-world techniques that you’ll use throughout your career.

Download

infosec analysis

infosec analysis

An all-star cast of authors analyze the top IT security threats for 2008 as selected by the editors and readers of Infosecurity Magazine. This book, compiled from the Syngress Security Library, is an essential reference for any IT professional managing enterprise security. It serves as an early warning system, allowing readers to assess vulnerabilities, design protection schemes and plan for disaster recovery should an attack occur. Topics include Botnets, Cross Site Scripting Attacks, Social Engineering, Physical and Logical Convergence, Payment Card Industry (PCI) Data Security Standards (DSS), Voice over IP (VoIP), and Asterisk Hacking.

Each threat is fully defined, likely vulnerabilities are identified, and detection and prevention strategies are considered. Wherever possible, real-world examples are used to illustrate the threats and tools for specific solutions.

* Provides IT Security Professionals with a first look at likely new threats to their enterprise
* Includes real-world examples of system intrusions and compromised data
* Provides techniques and strategies to detect, prevent, and recover
* Includes coverage of PCI, VoIP, XSS, Asterisk, Social Engineering, Botnets, and Convergence

http://www.megaupload.com/?d=SQH7YHCW

The Best Damn Security Manager’s Handbook

The Best Damn Security Manager’s Handbook Period has comprehensive coverage of all management isuses facing IT and security professionals. Compiled from the best of the Syngress and Butterworth Heinemann libraries and authored by business continuity expert Susan Snedakers, this volume is an indispensable addition to a serious security professional’s toolkit.

Coverage includes Business Continuity, Risk Assessment, Protection Assets, Project Management, Security Operations, and Security Management, and Security Design & Integration.

* An all encompassing book, covering general security management issues and providing specific guidelines and checklists.
* Anyone studying for a security specific certification or ASIS certification, will find this a valuable resource.
* The only book to cover all major IT and security management issues in one place: disaster recover, project management, operations management, risk assessment.

http://mihd.net/g0e2fj

http://rapidshare.com/files/89217272/1597492272.rar

ENCE - ENCASE CERTIFIED EXAMINER STUDY GUIDE

EnCE certification tells the world that you’ve not only mastered the use of EnCase Forensic Software, but also that you have acquired the in-depth forensics knowledge and techniques you need to conduct complex computer examinations. This official study guide, written by a law enforcement professional who is an expert in EnCE and computer forensics, provides the complete instruction, advanced testing software, and solid techniques you need to prepare for the exam.

http://rapidshare.com/files/91384275/0470181451.7z

http://www.filefactory.com/file/6b45e0/

Check Point Firewall-1 Administration Guide

Topics covered: Firewall rationales, FireWall-1 installation, rule sets, virtual private networks (VPNs), and how FireWall-1 behaves under specific kinds of attacks.

Book Description
Only complete guide to Check Point FireWall-1, the security software used in 75% of corporate networks worldwide. Clear, step-by-step help for installing, administrating, troubleshooting, and maintaining Check Point firewalls. Officially endorsed and tech edited by Check Point. Valuable CD-ROM, created in cooperation with Check Point, contains the most useful set of Firewall-1 tools and utilities available anywhere.

http://www.megaupload.com/?d=TQJ7VD7Q

Knowledgenet Cisco Pix Firewall Hands-on lab

http://www.megaupload.com/?d=A11T53WN

Intrusion Detection and Prevention

Authors Carl Endorf, Eugene Schultz, and Jim Mellander deliver the hands-on implementation techniques that IT professionals need. Learn to implement the top intrusion detection products into real-world networked environments and covers the most popular intrusion detection tools including Internet Security Systems' Black ICE & RealSecure, Cisco Systems' Secure IDS, Computer Associates’ eTrust, Entercept, and the open source Snort tool.

Book Info
Text shows step-by-step how to mount a comprehensive defense against hackers, perform real-time security monitoring, and implement a proactive incident response plan. Covers many examples of IDS software, including TCPDump, RealSecure, Cisco Secure IDS, Network Flight Recorder, and Snort 2.0. Softcover.

http://www.megaupload.com/?d=R968TVVJ

Cisco Press - Cisco ASA and PIX Firewall Handbook - Free certification book

The complete guide to the most popular Cisco PIX®, ASA, FWSM, and IOS® firewall security features

• Learn about the various firewall models, user interfaces, feature sets, and configuration methods
• Understand how a Cisco firewall inspects traffic
• Configure firewall interfaces, routing, IP addressing services, and IP multicast support
• Maintain security contexts and Flash and configuration files, manage users, and monitor firewalls with SNMP
• Authenticate, authorize, and maintain accounting records for firewall users
• Control access through the firewall by implementing transparent and routed firewall modes, address translation, traffic filtering, user authentication, content filtering, application inspection, and traffic shunning
• Increase firewall availability with firewall failover operation
• Understand how firewall load balancing works
• Generate firewall activity logs and learn how to analyze the contents of the log
• Verify firewall operation and connectivity and observe data passing through a firewall
• Control access and manage activity on the Cisco IOS firewall
• Configure a Cisco firewall to act as an IDS sensor

Every organization has data, facilities, and workflow processes that are critical to their success. As more organizations make greater use of the Internet, defending against network attacks becomes crucial for businesses. Productivity gains and returns on company investments are at risk if the network is not properly defended. Firewalls have emerged as the essential foundation component in any network security architecture.

Cisco ASA and PIX Firewall Handbook is a guide for the most commonly implemented features of the popular Cisco Systems® firewall security solutions. This is the first book to cover the revolutionary Cisco ASA and PIX® version 7 security appliances. This book will help you quickly and easily configure, integrate, and manage the entire suite of Cisco® firewall products, including Cisco ASA, PIX version 7 and 6.3, the Cisco IOS router firewall, and the Catalyst Firewall Services Module (FWSM). Organized by families of features, this book helps you get up to speed quickly and efficiently on topics such as file management, building connectivity, controlling access, firewall management, increasing availability with failover, load balancing, logging, and verifying operation. Shaded thumbtabs mark each section for quick reference and each section provides information in a concise format, with background, configuration, and example components. Each section also has a quick reference table of commands that you can use to troubleshoot or display information about the features presented. Appendixes present lists of well-known IP protocol numbers, ICMP message types, and IP port numbers that are supported in firewall configuration commands and provide a quick reference to the many logging messages that can be generated from a Cisco PIX, ASA, FWSM, or IOS firewall.

http://www.megaupload.com/?d=WLK2C3L6

Information Security Management Handbook, Fifth Edition

Book Description

Since 1993, the Information Security Management Handbook has served not only as an everyday reference for information security practitioners but also as an important document for conducting the intense review necessary to prepare for the Certified Information System Security Professional (CISSP) examination. Now completely revised and updated and in its fifth edition, the handbook maps the ten domains of the Information Security Common Body of Knowledge and provides a complete understanding of all the items in it. This is a must have book, both for preparing for the CISSP exam and as a comprehensive, up-to-date reference.

Rapidshare.com Information_Security_ManagementHandbook

The Best Damn Firewall Book Period

Book Description
This book is essential reading for anyone wanting to protect Internet-connected computers from unauthorized access. Coverage includes TCP/IP, setting up firewalls, testing and maintaining firewalls, and much more. All of the major important firewall products are covered including Microsoft Internet Security and Acceleration Server (ISA), ISS BlackICE, Symantec Firewall, Check Point NG, and PIX Firewall. Firewall configuration strategies and techniques are covered in depth.

The book answers questions about firewalls, from How do I make Web/HTTP work through my firewall? To What is a DMZ, and why do I want one? And What are some common attacks, and how can I protect my system against them?

The Internet's explosive growth over the last decade has forced IT professionals to work even harder to secure the private networks connected to itfrom erecting firewalls that keep out malicious intruders to building virtual private networks (VPNs) that permit protected, fully encrypted communications over the Internet's vulnerable public infrastructure.

The Best Damn Firewalls Book Period covers the most popular Firewall products, from Cisco's PIX Firewall to Microsoft's ISA Server to CheckPoint NG, and all the components of an effective firewall set up.

Anything needed to protect the perimeter of a network can be found in this book.

- This book is all encompassing, covering general Firewall issues and protocols, as well as specific products.
- Anyone studying for a security specific certification, such as SANS' GIAC Certified Firewall Analyst (GCFW) will find this book an invaluable resource.
- The only book to cover all major firewall products from A to Z: CheckPoint, ISA Server, Symatec, BlackICE, PIX Firewall and Nokia.

http://www.megaupload.com/?d=9JSDM06Z