• Fri frakt över 249 kr
  • •
  • Snabba leveranser
  • •
  • Billiga böcker
Kundservice

Du är på sajten för privatpersoner.

Företag, bibliotek eller offentlig verksamhet?

Du handlar på classic.bokus.com, där alla dina funktioner finns intakta.
Till classic.bokus.com
Bokus logotyp. Gå till startsidan.
  • Erbjudanden
  • Student
  • Topplistor
  • Barn & ungdom
  • Bokus Play
  • E-böcker
  • Ljudböcker
  • Pocketböcker
  • Spel & pussel

Upp till 25% på utvalda nyheter →

Sidfot

Mina sidor

    Hjälp

    • Kundservice
    • Vanliga frågor och svar
    • Frakt och leverans
    • Retur vid ångerrätt
    • Reklamera vara
    • Betalning
    • Köpvillkor
    • Allmänna villkor
    • Information om webbplatsens tillgänglighet

    Om Bokus

    • Om oss
    • Pressrum
    • För studenter
    • För företag
    • För bibliotek och offentlig verksamhet
    • För leverantörer
    • Hållbarhet

    Populärt

    • Aktuella erbjudanden
    • Presentkort
    • Studentlitteratur
    • Nya böcker
    • Topplistor
    • Signerade böcker
    • Engelska böcker

    Inspiration

    • Boktips
    • BookTok
    • Populära bokserier
    • Barnbokskaraktärer
    • Populära författare
    Logotyp för Bokus
    Följ oss på Facebook (extern länk)Följ oss på Instagram (extern länk)Följ oss på YouTube (extern länk)Följ oss på TikTok (extern länk)
    bokus @ CookiesAnpassa cookiesIntegritetspolicyKöpvillkor
    Till Citymail hemsida (extern länk)Till Budbee hemsida (extern länk)Till Postnord hemsida (extern länk)Till Schenker hemsida (extern länk)Till Early Bird hemsida (extern länk)Till Walleys hemsida (extern länk)
    1. Data och IT
    2. Nätverk och kommunikation

    Network Forensics

    Tracking Hackers through Cyberspace

    AvSherri Davidoff,Jonathan Ham

    Inbunden, Engelska, 2012

    528 kr

    Beställningsvara. Skickas inom 7-10 vardagar. Fri frakt över 249 kr.

    Beskrivning

    “This is a must-have work for anybody in information security, digital forensics, or involved with incident handling. As we move away from traditional disk-based analysis into the interconnectivity of the cloud, Sherri and Jonathan have created a framework and roadmap that will act as a seminal work in this developing field.”

    – Dr. Craig S. Wright (GSE), Asia Pacific Director at Global Institute for Cyber Security + Research.

    “It’s like a symphony meeting an encyclopedia meeting a spy novel.”

    –Michael Ford, Corero Network Security

    On the Internet, every action leaves a mark–in routers, firewalls, web proxies, and within network traffic itself. When a hacker breaks into a bank, or an insider smuggles secrets to a competitor, evidence of the crime is always left behind.

    Learn to recognize hackers’ tracks and uncover network-based evidence in Network Forensics: Tracking Hackers through Cyberspace.Carve suspicious email attachments from packet captures. Use flow records to track an intruder as he pivots through the network. Analyze a real-world wireless encryption-cracking attack (and then crack the key yourself). Reconstruct a suspect’s web surfing history–and cached web pages, too–from a web proxy. Uncover DNS-tunneled traffic. Dissect the Operation Aurora exploit, caught on the wire.

    Throughout the text, step-by-step case studies guide you through the analysis of network-based evidence. You can download the evidence files from the authors’ web site (lmgsecurity.com), and follow along to gain hands-on experience.

    Hackers leave footprints all across the Internet. Can you find their tracks and solve the case? Pick up Network Forensicsand find out.

    Produktinformation

    • Utgivningsdatum:2012-07-05
    • Mått:180 x 236 x 36 mm
    • Vikt:1 100 g
    • Format:Inbunden
    • Språk:Engelska
    • Antal sidor:576
    • Upplaga:1
    • Förlag:Pearson Education
    • ISBN:9780132564717

    Utforska kategorier

    • Nätverk och kommunikation inom Data och IT

    Mer om författaren

    Sherri Davidoff is a founder of LMG Security, an information security consulting and research firm. Her specialties include network penetration testing, digital forensics, social engineering testing, and web application assessments. She holds her S.B. in Computer Science and Electrical Engineering from MIT.Jonathan Ham has been commissioned to teach NCIS investigators how to use Snort, performed packet analysis from a facility more than two thousand feet underground, taught intrusion analysis to the NSA, and chartered and trained the CIRT for one of the largest U.S. civilian federal agencies. He is a founder of LMG Security. His favorite field is ip[6:2].

    Innehållsförteckning

    • Foreword xviiPreface xixAcknowledgments xxvAbout the Authors xxviiPart I: Foundation 1Chapter 1: Practical Investigative Strategies 31.1 Real-World Cases 31.2 Footprints 81.3 Concepts in Digital Evidence 91.4 Challenges Relating to Network Evidence 161.5 Network Forensics Investigative Methodology (OSCAR) 171.6 Conclusion 22Chapter 2: Technical Fundamentals 232.1 Sources of Network-Based Evidence 232.2 Principles of Internetworking 302.3 Internet Protocol Suite 352.4 Conclusion 44Chapter 3: Evidence Acquisition 453.1 Physical Interception 463.2 Traffic Acquisition Software 543.3 Active Acquisition 653.4 Conclusion 72Part II: Traffic Analysis 73Chapter 4: Packet Analysis 754.1 Protocol Analysis 764.2 Packet Analysis 954.3 Flow Analysis 1034.4 Higher-Layer Traffic Analysis 1204.5 Conclusion 1334.6 Case Study: Ann’s Rendezvous 135Chapter 5: Statistical Flow Analysis 1595.1 Process Overview 1605.2 Sensors 1615.3 Flow Record Export Protocols 1665.4 Collection and Aggregation 1685.5 Analysis 1725.6 Conclusion 1835.7 Case Study: The Curious Mr. X 184Chapter 6: Wireless: Network Forensics Unplugged 1996.1 The IEEE Layer 2 Protocol Series 2016.2 Wireless Access Points (WAPs) 2146.3 Wireless Traffic Capture and Analysis 2196.4 Common Attacks 2246.5 Locating Wireless Devices 2296.6 Conclusion 2356.7 Case Study: HackMe, Inc. 236Chapter 7: Network Intrusion Detection and Analysis 2577.1 Why Investigate NIDS/NIPS? 2587.2 Typical NIDS/NIPS Functionality 2587.3 Modes of Detection 2617.4 Types of NIDS/NIPSs 2627.5 NIDS/NIPS Evidence Acquisition 2647.6 Comprehensive Packet Logging 2677.7 Snort 2687.8 Conclusion 2757.9 Case Study: Inter0ptic Saves the Planet (Part 1 of 2) 276Part III: Network Devices and Servers 289Chapter 8: Event Log Aggregation, Correlation, and Analysis 2918.1 Sources of Logs 2928.2 Network Log Architecture 3068.3 Collecting and Analyzing Evidence 3118.4 Conclusion 3178.5 Case Study: L0ne Sh4rk’s Revenge 318Chapter 9: Switches, Routers, and Firewalls 3359.1 Storage Media 3369.2 Switches 3369.3 Routers 3409.4 Firewalls 3449.5 Interfaces 3489.6 Logging 3529.7 Conclusion 3559.8 Case Study: Ann’s Coffee Ring 356Chapter 10: Web Proxies 36910.1 Why Investigate Web Proxies? 36910.2 Web Proxy Functionality 37110.3 Evidence 37510.4 Squid 37710.5 Web Proxy Analysis 38110.6 Encrypted Web Traffic 39210.7 Conclusion 40110.8 Case Study: Inter0ptic Saves the Planet (Part 2 of 2) 402Part IV: Advanced Topics 421Chapter 11: Network Tunneling 42311.1 Tunneling for Functionality 42311.2 Tunneling for Confidentiality 42711.3 Covert Tunneling 43011.4 Conclusion 43911.5 Case Study: Ann Tunnels Underground 441Chapter 12: Malware Forensics 46112.1 Trends in Malware Evolution 46212.2 Network Behavior of Malware 48412.3 The Future of Malware and Network Forensics 49112.4 Case Study: Ann’s Aurora 492Afterword 519Index 521