Michael Cross – författare

When it comes to computer crimes, the criminals got a big head start. But the law enforcement and IT security communities are now working diligently to develop the knowledge, skills, and tools to successfully investigate and prosecute Cybercrime cases. When the first edition of "Scene of the Cybercrime" published in 2002, it was one of the first books that educated IT security professionals and law enforcement how to fight Cybercrime. Over the past 5 years a great deal has changed in how computer crimes are perpetrated and subsequently investigated. Also, the IT security and law enforcement communities have dramatically improved their ability to deal with Cybercrime, largely as a result of increased spending and training. According to the 2006 Computer Security Institute''s and FBI''s joint Cybercrime report: 52% of companies reported unauthorized use of computer systems in the prior 12 months. Each of these incidents is a Cybecrime requiring a certain level of investigation and remediation. And in many cases, an investigation is mandates by federal compliance regulations such as Sarbanes-Oxley, HIPAA, or the Payment Card Industry (PCI) Data Security Standard.Scene of the Cybercrime, Second Edition is a completely revised and updated book which covers all of the technological, legal, and regulatory changes, which have occurred since the first edition. The book is written for dual audience; IT security professionals and members of law enforcement. It gives the technical experts a little peek into the law enforcement world, a highly structured environment where the "letter of the law" is paramount and procedures must be followed closely lest an investigation be contaminated and all the evidence collected rendered useless. It also provides law enforcement officers with an idea of some of the technical aspects of how cyber crimes are committed, and how technology can be used to track down and build a case against the criminals who commit them. Scene of the Cybercrime, Second Editions provides a roadmap that those on both sides of the table can use to navigate the legal and technical landscape to understand, prevent, detect, and successfully prosecute the criminal behavior that is as much a threat to the online community as "traditional" crime is to the neighborhoods in which we live. Also included is an all new chapter on Worldwide Forensics Acts and Laws.- Companion Web site provides custom tools and scripts, which readers can download for conducting digital, forensic investigations- Special chapters outline how Cybercrime investigations must be reported and investigated by corporate IT staff to meet federal mandates from Sarbanes Oxley, and the Payment Card Industry (PCI) Data Security Standard- Details forensic investigative techniques for the most common operating systems (Windows, Linux and UNIX) as well as cutting edge devices including iPods, Blackberries, and cell phones

Windows 2003 Server is unquestionably the dominant enterprise level operating system in the industry, with 95% of all companies running it. And for the last tow years, over 50% of all product upgrades have been security related. Securing Windows Server, according to bill gates, is the company''s #1 priority.The book will start off by teaching readers to create the conceptual design of their Active Directory infrastructure by gathering and analyzing business and technical requirements. Next, readers will create the logical design for an Active Directory infrastructure. Here the book starts to drill deeper and focus on aspects such as group policy design. Finally, readers will learn to create the physical design for an active directory and network Infrastructure including DNS server placement; DC and GC placements and Flexible Single Master Operations (FSMO) role placement. The next book in our best selling and critically acclaimed How to Cheat series. This is the perfect book for users who have already purchased How to Cheat at Managing Windows 2003 Small Business Server.* Active Directory is the market leader in the directory services space, and 57% of all Microsoft corporate customers have deployed AD* Follows Syngress''s proven "How To Cheat" methodology* Companion Web site offers dozens of templates, "Cheat Sheets", and checklists for readers

Over 75% of network attacks are targeted at the web application layer. This book provides explicit hacks, tutorials, penetration tests, and step-by-step demonstrations for security professionals and Web application developers to defend their most vulnerable applications.This book defines Web application security, why it should be addressed earlier in the lifecycle in development and quality assurance, and how it differs from other types of Internet security. Additionally, the book examines the procedures and technologies that are essential to developing, penetration testing and releasing a secure Web application. Through a review of recent Web application breaches, the book will expose the prolific methods hackers use to execute Web attacks using common vulnerabilities such as SQL Injection, Cross-Site Scripting and Buffer Overflows in the application layer. By taking an in-depth look at the techniques hackers use to exploit Web applications, readers will be better equipped to protect confidential.- The Yankee Group estimates the market for Web application-security products and services will grow to $1.74 billion by 2007 from $140 million in 2002- Author Michael Cross is a highly sought after speaker who regularly delivers Web Application presentations at leading conferences including: Black Hat, TechnoSecurity, CanSec West, Shmoo Con, Information Security, RSA Conferences, and more

The Basics of Cyber Safety: Computer and Mobile Device Safety Made Easy presents modern tactics on how to secure computer and mobile devices, including what behaviors are safe while surfing, searching, and interacting with others in the virtual world. The book''s author, Professor John Sammons, who teaches information security at Marshall University, introduces readers to the basic concepts of protecting their computer, mobile devices, and data during a time that is described as the most connected in history.This timely resource provides useful information for readers who know very little about the basic principles of keeping the devices they are connected to—or themselves—secure while online. In addition, the text discusses, in a non-technical way, the cost of connectedness to your privacy, and what you can do to it, including how to avoid all kinds of viruses, malware, cybercrime, and identity theft. Final sections provide the latest information on safe computing in the workplace and at school, and give parents steps they can take to keep young kids and teens safe online.- Provides the most straightforward and up-to-date guide to cyber safety for anyone who ventures online for work, school, or personal use- Includes real world examples that demonstrate how cyber criminals commit their crimes, and what users can do to keep their data safe

The Basics of Cyber Safety: Computer and Mobile Device Safety Made Easy presents modern tactics on how to secure computer and mobile devices, including what behaviors are safe while surfing, searching, and interacting with others in the virtual world. The book's author, Professor John Sammons, who teaches information security at Marshall University, introduces readers to the basic concepts of protecting their computer, mobile devices, and data during a time that is described as the most connected in history.

This timely resource provides useful information for readers who know very little about the basic principles of keeping the devices they are connected to-or themselves-secure while online. In addition, the text discusses, in a non-technical way, the cost of connectedness to your privacy, and what you can do to it, including how to avoid all kinds of viruses, malware, cybercrime, and identity theft. Final sections provide the latest information on safe computing in the workplace and at school, and give parents steps they can take to keep young kids and teens safe online.

Provides the most straightforward and up-to-date guide to cyber safety for anyone who ventures online for work, school, or personal use Includes real world examples that demonstrate how cyber criminals commit their crimes, and what users can do to keep their data safe

Google Earth Forensics is the first book to explain how to use Google Earth in digital forensic investigations. This book teaches you how to leverage Google's free tool to craft compelling location-based evidence for use in investigations and in the courtroom. It shows how to extract location-based data that can be used to display evidence in compelling audiovisual manners that explain and inform the data in contextual, meaningful, and easy-to-understand ways.

As mobile computing devices become more and more prevalent and powerful, they are becoming more and more useful in the field of law enforcement investigations and forensics. Of all the widely used mobile applications, none have more potential for helping solve crimes than those with geo-location tools.

Written for investigators and forensic practitioners, Google Earth Forensics is written by an investigator and trainer with more than 13 years of experience in law enforcement who will show you how to use this valuable tool anywhere at the crime scene, in the lab, or in the courtroom.

Learn how to extract location-based evidence using the Google Earth program or app on computers and mobile devices Covers the basics of GPS systems, the usage of Google Earth, and helps sort through data imported from external evidence sources Includes tips on presenting evidence in compelling, easy-to-understand formats

Google Earth Forensics is the first book to explain how to use Google Earth in digital forensic investigations. This book teaches you how to leverage Google''s free tool to craft compelling location-based evidence for use in investigations and in the courtroom. It shows how to extract location-based data that can be used to display evidence in compelling audiovisual manners that explain and inform the data in contextual, meaningful, and easy-to-understand ways.As mobile computing devices become more and more prevalent and powerful, they are becoming more and more useful in the field of law enforcement investigations and forensics. Of all the widely used mobile applications, none have more potential for helping solve crimes than those with geo-location tools.Written for investigators and forensic practitioners, Google Earth Forensics is written by an investigator and trainer with more than 13 years of experience in law enforcement who will show you how to use this valuable tool anywhere at the crime scene, in the lab, or in the courtroom.- Learn how to extract location-based evidence using the Google Earth program or app on computers and mobile devices- Covers the basics of GPS systems, the usage of Google Earth, and helps sort through data imported from external evidence sources- Includes tips on presenting evidence in compelling, easy-to-understand formats

Many exciting frontiers of science and engineering require understanding the spatiotemporal properties of sustained nonequilibrium systems such as fluids, plasmas, reacting and diffusing chemicals, crystals solidifying from a melt, heart muscle, and networks of excitable neurons in brains. This introductory textbook for graduate students in biology, chemistry, engineering, mathematics, and physics provides a systematic account of the basic science common to these diverse areas. This book provides a careful pedagogical motivation of key concepts, discusses why diverse nonequilibrium systems often show similar patterns and dynamics, and gives a balanced discussion of the role of experiments, simulation, and analytics. It contains numerous worked examples and over 150 exercises. This book will also interest scientists who want to learn about the experiments, simulations, and theory that explain how complex patterns form in sustained nonequilibrium systems.

This book is a comprehensive guide to the greening of the economy, detailing the essential skills, jobs, and careers required to develop a thriving sustainable future.The transition towards net zero is creating a wave of new work requiring the redeployment and repurposing of skills and jobs to decarbonise and adapt the economy. Charting this drive for the greening of skills across all sectors of the economy, each chapter in this book addresses ten key questions taking the reader through the skills and jobs driving the transition to net zero. The book uses a range of skills frameworks to help readers understand how emerging and new competencies are being integrated into existing jobs, and case studies are drawn from across the world to show how green skills are defined and incorporated into new roles. Presenting best practices and policy insights with a strong emphasis on the strategies to overcome the barriers to the green transition, it equips readers with knowledge of the green economy’s opportunities and challenges, and guides individuals in identifying viable career paths in green and non-green sectors.Written in a highly accessible style, this book will be a key guide for professionals, policymakers, organisations, societies, and individuals looking for clear pathways for education and training, with an emphasis on upskilling and interdisciplinary approaches.

This book is a comprehensive guide to the greening of the economy, detailing the essential skills, jobs, and careers required to develop a thriving sustainable future.The transition towards net zero is creating a wave of new work requiring the redeployment and repurposing of skills and jobs to decarbonise and adapt the economy. Charting this drive for the greening of skills across all sectors of the economy, each chapter in this book addresses ten key questions taking the reader through the skills and jobs driving the transition to net zero. The book uses a range of skills frameworks to help readers understand how emerging and new competencies are being integrated into existing jobs, and case studies are drawn from across the world to show how green skills are defined and incorporated into new roles. Presenting best practices and policy insights with a strong emphasis on the strategies to overcome the barriers to the green transition, it equips readers with knowledge of the green economy’s opportunities and challenges, and guides individuals in identifying viable career paths in green and non-green sectors.Written in a highly accessible style, this book will be a key guide for professionals, policymakers, organisations, societies, and individuals looking for clear pathways for education and training, with an emphasis on upskilling and interdisciplinary approaches.

Windows 2003 Server is unquestionably the dominant enterprise level operating system in the industry, with 95% of all companies running it. And for the last tow years, over 50% of all product upgrades have been security related. Securing Windows Server, according to bill gates, is the company's #1 priority.The book will start off by teaching readers to create the conceptual design of their Active Directory infrastructure by gathering and analyzing business and technical requirements. Next, readers will create the logical design for an Active Directory infrastructure. Here the book starts to drill deeper and focus on aspects such as group policy design. Finally, readers will learn to create the physical design for an active directory and network Infrastructure including DNS server placement; DC and GC placements and Flexible Single Master Operations (FSMO) role placement. The next book in our best selling and critically acclaimed How to Cheat series. This is the perfect book for users who have already purchased How to Cheat at Managing Windows 2003 Small Business Server.* Active Directory is the market leader in the directory services space, and 57% of all Microsoft corporate customers have deployed AD* Follows Syngress's proven "How To Cheat" methodology* Companion Web site offers dozens of templates, "Cheat Sheets", and checklists for readers

When it comes to computer crimes, the criminals got a big head start. But the law enforcement and IT security communities are now working diligently to develop the knowledge, skills, and tools to successfully investigate and prosecute Cybercrime cases. When the first edition of "Scene of the Cybercrime" published in 2002, it was one of the first books that educated IT security professionals and law enforcement how to fight Cybercrime. Over the past 5 years a great deal has changed in how computer crimes are perpetrated and subsequently investigated. Also, the IT security and law enforcement communities have dramatically improved their ability to deal with Cybercrime, largely as a result of increased spending and training. According to the 2006 Computer Security Institute's and FBI's joint Cybercrime report: 52% of companies reported unauthorized use of computer systems in the prior 12 months. Each of these incidents is a Cybecrime requiring a certain level of investigation and remediation. And in many cases, an investigation is mandates by federal compliance regulations such as Sarbanes-Oxley, HIPAA, or the Payment Card Industry (PCI) Data Security Standard.

Scene of the Cybercrime, Second Edition is a completely revised and updated book which covers all of the technological, legal, and regulatory changes, which have occurred since the first edition. The book is written for dual audience; IT security professionals and members of law enforcement. It gives the technical experts a little peek into the law enforcement world, a highly structured environment where the "letter of the law" is paramount and procedures must be followed closely lest an investigation be contaminated and all the evidence collected rendered useless. It also provides law enforcement officers with an idea of some of the technical aspects of how cyber crimes are committed, and how technology can be used to track down and build a case against the criminals who commit them. Scene of the Cybercrime, Second Editions provides a roadmap that those on both sides of the table can use to navigate the legal and technical landscape to understand, prevent, detect, and successfully prosecute the criminal behavior that is as much a threat to the online community as "traditional" crime is to the neighborhoods in which we live. Also included is an all new chapter on Worldwide Forensics Acts and Laws.

Companion Web site provides custom tools and scripts, which readers can download for conducting digital, forensic investigations Special chapters outline how Cybercrime investigations must be reported and investigated by corporate IT staff to meet federal mandates from Sarbanes Oxley, and the Payment Card Industry (PCI) Data Security Standard Details forensic investigative techniques for the most common operating systems (Windows, Linux and UNIX) as well as cutting edge devices including iPods, Blackberries, and cell phones

Eleventh Hour Network+: Exam N10-004 Study Guide offers a practical guide for those preparing for the Security+ certification exam. The book's 14 chapters provide in-depth discussions of the following topics: systems security; operating system hardening; application security; virtualization technologies; network security; wireless networks; network access; network authentication; risk assessment and risk mitigation; general cryptographic concepts; public key infrastructure; redundancy planning; environmental controls and implementing disaster recovery and incident response procedures; and legislation and organizational policies. Each chapter includes information on exam objectives, exam warnings, and the top five toughest questions along with their answers. The only book keyed to the new SY0-201 objectives that has been crafted for last minute cramming Easy to find, essential material with no fluff - this book does not talk about security in general, just how it applies to the test Includes review of five toughest questions by topic - sure to improve your score

Social networks, particularly public ones, have become part of the fabric of how we communicate and collaborate as a society. With value from micro-level personal networking to macro-level outreach, social networking has become pervasive in people's lives and is now becoming a significant driving force in business. These new platforms have provided new approaches to many critical enterprise functions, including identifying, communicating, and gathering feedback with customers (e.g., Facebook, Ning); locating expertise (e.g., LinkedIn); providing new communication platforms (e.g., Twitter); and collaborating with a community, small or large (e.g., wikis).However, many organizations have stayed away from potential benefits of social networks because of the significant risks associated with them. This book will help an organization understand the risks present in social networks and provide a framework covering policy, training and technology to address those concerns and mitigate the risks presented to leverage social media in their organization. The book also acknowledges that many organizations have already exposed themselves to more risk than they think from social networking and offers strategies for "dialing it back" to retake control.

Defines an organization's goals for social networking Presents the risks present in social networking and how to mitigate them Explains how to maintain continuous social networking security

Social networks, particularly public ones, have become part of the fabric of how we communicate and collaborate as a society. With value from micro-level personal networking to macro-level outreach, social networking has become pervasive in people''s lives and is now becoming a significant driving force in business. These new platforms have provided new approaches to many critical enterprise functions, including identifying, communicating, and gathering feedback with customers (e.g., Facebook, Ning); locating expertise (e.g., LinkedIn); providing new communication platforms (e.g., Twitter); and collaborating with a community, small or large (e.g., wikis).However, many organizations have stayed away from potential benefits of social networks because of the significant risks associated with them. This book will help an organization understand the risks present in social networks and provide a framework covering policy, training and technology to address those concerns and mitigate the risks presented to leverage social media in their organization. The book also acknowledges that many organizations have already exposed themselves to more risk than they think from social networking and offers strategies for "dialing it back" to retake control.- Defines an organization''s goals for social networking- Presents the risks present in social networking and how to mitigate them- Explains how to maintain continuous social networking security

This book traces the emergence and development of SADTU's professional unionism and explores its implications for teachers and the delivery of quality education in the context of SADTU's relationship with the state and the governing party, specifically the union's location within the ANC-led Tripartite Alliance.It highlights SADTU's role in the struggle for democracy, including its crusade for recognition as a non-racial union and its involvement in the development of post-apartheid education policy. However, despite its centrality in the education struggles of the past, SADTU's continued role and relevance in the development of the education system have become the subject of intense debate in the public domain, as it is seen as more focused on unionism and the political battles in the Alliance than on furthering teacher professionalism. This volume explores how and why this has come about, and offers insights that would enable SADTU to reclaim its role and relevance in reimagining the future of education in South Africa in response to the socio-economic development challenges that confront the country in the twenty-first century.

This book presents useful insights on the regeneration of curricula and pedagogies with a particular focus on universities in South Africa and Africa in general. Transformative Curricula, Pedagogies and Epistemologies: Teaching and Learning in Diverse Higher Education Contexts further explores the state of teaching and learning in different contexts, together with the emerging challenges and responsibilities that African higher education in the twenty first century is faced with. The analysis is put in light of the assumptions borrowed from the West, for Western epistemologies and pedagogies are still dominant. Instead, the book presents a case on the need for rethinking pedagogies and epistemologies within African higher education that include African culture, values, ethics, and indigenous knowledge. The new obligations of inclusive education, decolonisation, transformation, and academic and professional experiences are of paramount importance for contemporary higher education.Valuable ideas about practices and policies in epistemological and pedagogical transformative mechanisms are discussed which can be used to inform a decolonised teaching and learning curriculum most suitable for an African higher education system. Above all, the book goes beyond mere narratives, as it explores decolonisation strategies suitable for transforming pedagogical and epistemological practices that include the education system as a whole.