Intended for a course that is teaching students how and where web-based applications are particularly vulnerable. The authors explain the complete range of attacks, including buffer overflows—the most problematic of all attacks.

Features

• Keen analysis on how hackers infiltrate web commerce systems, including database servers and payment systems.
• Case studies are a unique feature, effectively communicating to students what they need to know.
• Complete methodologies show actual techniques and attacks and give the students a chance to learn by experiencing how the hacker actually works.

"Ethical hacking" is the process of entering into a hacker's mindset in order to spot system vulnerabilities by performing typical hacks in a controlled environment. This book helps security professionals understand how malicious users think and work, enabling administrators to defend their systems against attacks and to identify security vulnerabilities.
* Shows readers how to approach their system security from the hacker's perspective and perform nondestructive penetration testing
* Helps the reader develop an ethical hacking plan, and examines typical attacks and how to counteract them
* Guides readers through reporting vulnerabilities to upper management, managing security changes, automating the ethical hacking process, and training end-users to avoid being victimized

Anti-Hacker Toolkit provides detailed, experience-based coverage on key security tools and their use. With increased threats of cyber-terrorism, intellectual property theft, hackers, and viruses, deploying the right tools properly is the greatest challenge facing computer forensic professionals. Completely revised to include the latest security tools organized by their function, the second edition, offers in-depth coverage of how each tool works and includes new real-world cases studies. A bonus CD contains the most up-to-date security tools discussed in the book.

This book continues the best-selling tradition of Hacking Exposed -- only by learning the tools and techniques of malicioius hackers can you truly reduce security risk. Arm yourself today with the Anti-Hacker Toolkit.

For the geek who's an investor, and the investor who's a geek, we present Online Investing Hacks, 100 industrial-strength, bleeding edge tips, tools and techniques for analyzing and managing online portfolios. Individual investors have become more computer-literate and technology-dependent than ever before. Whether you're looking for suitable investments, studying alternatives, or managing your portfolios, you need data. The Internet can be a goldmine of financial data and research, but today's online investors also use spreadsheets, databases, and financial applications to select, study and manage investments. If your proficiency has grown to the point where you crave industrial-strength tips and tools to turbo-charge your efforts.

A lot of computer-security textbooks approach the subject from a defensive point of view. "Do this, and probably you'll survive a particular kind of attack," they say. In refreshing contrast, Hacking Exposed, Second Edition talks about security from an offensive angle. A Jane's-like catalog of the weaponry that black-hat hackers use is laid out in full. Readers see what programs are out there, get a rundown on what the programs can do, and benefit from detailed explanations of concepts (such as wardialing and rootkits) that most system administrators kind of understand, but perhaps not in detail. The book also walks through how to use the more powerful and popular hacker software, including L0phtCrack. This new edition has been updated extensively, largely with the results of "honeypot" exercises (in which attacks on sacrificial machines are monitored) and Windows 2000 public security trials. There's a lot of new stuff on e-mail worms, distributed denial-of-service (DDoS) attacks, and attacks that involve routing protocols.