Open Source Security Tools Practical Guide to Security Applications, A

, by Howlett, Tony

Write a Review

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780321194435 | 0321194438
Cover: Paperback
Copyright: 7/29/2004

Buy New

This is a hard-to-find title. We are making every effort to obtain this item, but do not guarantee stock.

$48.01

Summary

Author Biography

Supplemental Materials

Sorts through the mass of open source security tools, chooses a few of the best, and shows network and system admins how to use them.

Preface

Audience

xii

Contents

xii

Open Source Security Tool Index

xiii

CD-ROM Contents and Organization

Tools Index

xix

1 Information Security and Open Source Software

(24)

Securing the Perimeter

(1)

Plugging the Holes

(1)

Establishing an Early Warning System

(1)

Building a Management System for Security Data

(1)

Implementing a Secure Wireless Solution

(1)

Securing Important Files and Communications

(1)

Investigating Break-ins

(1)

The Practice of Information Security

(1)

Confidentiality

(1)

Integrity

(1)

Availability

(1)

The State of Computer Crime

(4)

The Advent of the Internet

(1)

Ubiquitous, Inexpensive Broadband

(1)

Attack of the Script Kiddies

(1)

Worms, Auto-rooters, and Other Malware

(1)

Info-Security Business Risks

(4)

Data Loss

(1)

Denial of Service

(1)

Embarrassment/Loss of Customers

(1)

Liability

(1)

Disclosure of Corporate Secrets and Data

(1)

Tampering with Records

(1)

Loss of Productivity

(1)

Open Source History

(2)

Linux Enters the Scene

(1)

Open Source Advantages

(4)

Cost

(1)

Extendability

(1)

Security

(1)

Independence

(1)

User Support

(2)

Product Life Span

(1)

Education

(1)

Reputation

(1)

When Open Source May Not Fit Your Needs

(1)

Security Software Company

(1)

100 Percent Outsourced IT

(1)

Restrictive Corporate IT Standards

(1)

Windows and Open Source

(1)

Open Source Licenses

(4)

The GNU General Public License

(2)

The BSD License

(2)

2 Operating System Tools

(28)

Hardening Your Security Tool System

(5)

Installing Bastille Linux

(1)

Running Bastille Linux

(3)

traceroute (UNIX) or tracert (Windows): Network Diagnostic Tools

(13)

Considerations for Hardening Windows

(8)

Installing and Using Sam Spade for Windows

(4)

Installing and Running PuTTY

(3)

3 Firewalls

(34)

Network Architecture Basics

(3)

Physical

(1)

Data Link

(1)

Network

(1)

Transport

(1)

Session

(1)

Presentation

(1)

Application

(1)

TCP/IP Networking

(3)

Security Business Processes

(17)

Installing Iptables

(1)

Using Iptables

(2)

Creating an Iptables Fire wall

(4)

IP Masquerading with Iptables

(1)

Installing Turtle Firewall

(6)

SmoothWall Hardware Requirements

(1)

SmoothWall Express Versus Smooth-Wall Corporate

(1)

Installing SmoothWall

(2)

Administering the SmoothWall Firewall

(4)

Creating a VPN on the SmoothWall Firewall

(2)

Additional Applications with the SmoothWall

(1)

Windows-Based Firewalls

(1)

4 Port Scanners

(34)

Overview of Port Scanners

(3)

Considerations for Port Scanning

(1)

Uses for Port Scanners

(28)

Network Inventory

(1)

Network/Server Optimization

(1)

Finding Spyware, Trojan Horses, and Network Worms

(1)

Looking for Unauthorized or Illicit Services

(2)

Installling Nmap on Linux

(2)

Installing Nmap for Windows

(1)

Scanning Networks with Nmap

100

(3)

Nmap Command Line Operation

103

(1)

Nmap Scan Types

103

(3)

Nmap Discovery Options

106

(1)

Nmap Timing Options

106

(1)

Other Nmap Options

107

(1)

Running Nmap as a Service

107

(3)

Output from Nmap

110

(2)

Installing Nlog

112

(2)

Using Nlog

114

(1)

Nlog Add-ons

115

(1)

Creating Your Own Nlog Extensions

116

(1)

Interesting Uses for Nlog and Nmap

117

(4)

5 Vulnerability Scanners

121

(42)

Identifying Security Holes in Your Systems

122

(9)

Buffer Overflows

124

(1)

Router or Firewall Weaknesses

124

(1)

Web Server Exploits

125

(1)

Mail Server Exploits

125

(1)

DNS Servers

126

(1)

Database Exploits

126

(1)

User and File Management

126

(1)

Manufacturer Default Accounts

127

(1)

Blank or Weak Passwords

128

(1)

Unneeded Services

128

(1)

Information Leaks

129

(2)

Denial of Service

131

(1)

Vulnerability Scanners to the Rescue

131

(27)

Depth of Tests

132

(1)

Client-Server Architecture

132

(1)

Independence

133

(1)

Built-in Scripting Language

133

(1)

Integration with Other Tools

133

(1)

Smart Testing

133

(1)

Knowledge Base

134

(1)

Multiple Report Formats

134

(1)

Robust Support Network

134

(1)

Installing Nessus for Linux Systems

135

(2)

Setting Up Nessus

137

(1)

Nessus Login Page

138

(1)

Nessus Plugins Tab

139

(1)

Nessus Preferences Tab

139

(4)

Scan Options Tab

143

(2)

Target Selection Tab

145

(2)

User Tab

147

(1)

KB (Knowledge Base) Tab

147

(1)

Nessus Scan in Process Options

148

(2)

Installing NessusWX

150

(1)

Using the NessusWX Windows Client

150

(1)

Creating a Session Profile

151

(3)

NessusWX Report

154

(1)

Sample Nessus Scanning Configurations

155

(3)

Considerations for Vulnerability Scanning

158

(2)

Scan with Permission

158

(1)

Make Sure All Your Backups Are Current

158

(1)

Time Your Scan

159

(1)

Don't Scan Excessively

159

(1)

Place Your Scan Server Appropriately

159

(1)

What Vulnerability Testing Doesn't Find

160

(3)

Logic Errors

160

(1)

Undiscovered Vulnerabilities

160

(1)

Custom Applications

160

(1)

People Security

160

(1)

Attacks That Are in Progress or Already Happened

161

(2)

6 Network Sniffers

163

(30)

A Brief History of Ethernet

165

(1)

Considerations for Network Sniffing

166

(4)

Always Get Permission

166

(1)

Understand Your Network Topology

166

(1)

Use Tight Search Criteria

167

(1)

Establish a Baseline for Your Network

167

(1)

Installing Tcpdump

168

(1)

Running Tcpdump

169

(1)

TCP/IP Packet Headers

170

(23)

Tcpdump Expressions

175

(5)

Tcpdump Examples

180

(2)

Installing WinDump

182

(1)

Using WinDump

182

(2)

Installing Ethereal for Linux

184

(1)

Installing Ethereal for Windows

185

(1)

Using Ethereal

185

(2)

Starting a Capture Session

187

(2)

Display Options

189

(1)

Ethereal Tools

189

(1)

Saving Your Ethereal Output

190

(1)

Ethereal Applications

191

(2)

7 Intrusion Detection Systems

193

(40)

NIDS Signature Examples

196

(2)

The Problem of NIDS False Positives

198

(2)

Common Causes of False Positives

199

(1)

Getting the Most Out of Your IDS

200

(7)

Proper System Configuration

200

(1)

IDS Tuning

201

(1)

IDS Analysis Tools

201

(2)

Unique Features of Snort

203

(1)

Installing Snort

203

(1)

Running Snort

203

(4)

Configuring Snort for Maximum Performance

207

(18)

Disabling Rules in Snort

211

(4)

Running Snort as a Service

215

(5)

Requirements for Windows Snorting

220

(1)

Installing Snort for Windows

221

(1)

Setting Up Snort for Windows

221

(4)

Host-Based Intrusion Detection

225

(8)

Advantages of Host-Based Intrusion Detection Methods

226

(1)

Disadvantages of Host-Based Intrusion Detection Methods

226

(1)

Installing Tripwire

227

(1)

Configuring Tripwire

227

(3)

Initializing Your Baseline Database

230

(1)

Checking File Integrity

231

(1)

Updating the Database

231

(1)

Updating the Policy File

231

(2)

8 Analysis and Management Tools

233

(46)

Installing Swatch

237

(1)

Configuring and Running Swatch

238

(1)

The Swatch Configuration File

239

(2)

Using Databases and Web Servers to Manage Your Security Data

241

(23)

Setting Up a MySQL Server

242

(2)

Setting Up the Apache Web Server

244

(1)

Setting Up PHP

245

(2)

ADOdb

247

(1)

PHPLOT

247

(1)

JpGraph

247

(1)

248

(1)

Configuring Snort for MySQL

248

(1)

Installing ACID

249

(1)

Configuring ACID

250

(1)

Introduction to Using ACID

251

(2)

Using ACID to Tune and Manage Your NIDS

253

(2)

Other Ways to Analyze Alert Data Using ACID

255

(1)

Using ACID on a Daily Basis

256

(1)

Graphing ACID Data

257

(1)

Maintaining Your ACID database

258

(3)

Installing NPI

261

(2)

Importing Nessus Scans into NPI

263

(1)

Using NPI

263

(1)

The Birth of an Open Source Project

264

(15)

Is There Something Already Out There?

265

(1)

Is There a Broader Need for Your Program?

265

(1)

Do You Have Permission to Release Code as Open Source?

265

(2)

Platforms for NCC

267

(3)

Installing NCC

270

(2)

Using NCC

272

(1)

Adding Users

273

(1)

Adding Targets

274

(2)

Scheduling Your Scan

276

(3)

9 Encryption Tools

279

(36)

Types of Encryption

281

(24)

Encryption Algorithms

283

(1)

Encryption Applications

284

(1)

Encryption Protocols

285

(1)

Encryption Applications

286

(3)

Installing PGP and Generating Your Public/Private Key Pair

289

(1)

Using PGP

290

(3)

PGP Options

293

(3)

Installing GnuPG

296

(1)

Creating Key Pairs

297

(1)

Creating a Revocation Certificate

297

(1)

Publishing Your Public Key

298

(1)

Encrypting Files with GnuPG

298

(1)

Decrypting Files

299

(1)

Signing Files

299

(1)

The PGP/GnuPG Web of Trust Model

299

(1)

Signing Keys and Managing Your Key Trusts

300

(2)

Installing and Starting the OpenSSH Server

302

(2)

Port Forwarding with OpenSSH

304

(1)

Virtual Private Networks

305

(11)

Installing and Starting FreeS/WAN

307

(1)

Using FreeS/WAN

308

(5)

Windows Installation

313

(1)

UNIX Installation

313

(1)

Using John the Ripper

313

(2)

10 Wireless Tools

315

(34)

Wireless LAN Technology Overview

316

(3)

Wi-Fi Terms

317

(2)

Dangers of Wireless LANs

319

(2)

Eavesdropping

319

(1)

Access to Wireless PCs

320

(1)

Access to the LAN

320

(1)

Anonymous Internet Access

320

(1)

802.11-Specific Vulnerabilities

320

(1)

The "War-Driving" Phenomenon

321

(1)

Performing a Wireless Network Security Assessment

322

(24)

Equipment Selection

323

(2)

Installing NetStumbler

325

(1)

Using NetStumbler

325

(4)

NetStumbler Options

329

(2)

Saving NetStumbler Sessions

331

(1)

Installing StumbVerter

332

(1)

Using StumbVerter

332

(3)

Installing Your Network Interface Card and Drivers

335

(2)

Installing Kismet

337

(3)

Using Kismet Wireless

340

(3)

Kismet GPS Support

343

(1)

Kismet IDS

343

(1)

Uses for AirSnort

344

(1)

Installing AirSnort

345

(1)

Running AirSnort

345

(1)

Steps for More Secure Wireless LANs

346

(4)

Turn On WEP

346

(1)

Use Wireless Equipment with an Improved Encryption Protocol

347

(1)

Require Wireless Users to Come in Via a VPN Tunnel

347

(1)

Treat Your Wireless Network as Untrusted

347

(1)

Audit Your Wireless Perimeter on a Regular Basis

347

(1)

Move Your Access Points

347

(1)

Configure Your Wireless Network Properly

348

(1)

Train Your Staff

348

(1)

11 Forensic Tools

349

(32)

Uses for Computer Forensic Tools

350

(3)

Cleaning Up and Rebuilding

350

(1)

Criminal Investigation

350

(2)

Civil Action

352

(1)

Internal Investigations

352

(1)

ISP Complaints

353

(1)

Building an Incident Response Plan

353

(1)

Preparing for Good Forensic Data

354

(1)

Log Granularity

354

(1)

Run a Central Log Server

354

(1)

Time Sync Your Servers

354

(1)

Where to Look for Forensic Data

355

(1)

Tenets of Good Forensic Analysis

356

(1)

Operate on a Disconnected System

356

(1)

Use a Copy of the Evidence

356

(1)

Use Hashes to Provide Evidence of Integrity

356

(1)

Use Trusted Boot Media and Executables

357

(1)

Forensic Analysis Tools

357

(6)

Installing Fport

358

(1)

Using Fport

358

(3)

Installing lsof

361

(1)

Using lsof

361

(2)

Reviewing Log Files

363

(2)

Making Copies of Forensic Evidence

365

(16)

Installing dd

366

(1)

Using dd

366

(3)

Installing Sleuth Kit

369

(1)

Installing Autopsy Forensic Browser

369

(1)

Using Sleuth Kit and Autopsy Forensic Browser

369

(1)

Creating and Logging Into a Case

370

(1)

Adding a Host

371

(1)

Adding an Image

372

(2)

Analyzing Your Data

374

(2)

Installing Forensic Toolkit

376

(1)

Using Forensic Toolkit

376

(5)

12 More on Open Source Software

381

(8)

Open Source Resources

381

(3)

USENET Newsgroups

381

(1)

Mailing Lists

382

(1)

Web Sites

382

(2)

Joining the Open Source Movement

384

(3)

Bug Finder/Beta Tester

385

(1)

Participate in Discussion Groups and Support Other Users

385

(1)

Provide Resources to the Project

386

(1)

Patronize Companies That Use or Support Open Source Products

387

(1)

More Open Source Security Tools

387

(2)

Appendix A Open Source Licenses

389

(10)

Appendix B Basic Linux/UNIX Commands

399

(4)

Appendix C Well-Known TCP/IP Port Numbers

403

(42)

Appendix D General Permission and Waiver Form

445

(2)

Appendix E

447

(108)

References

555

(4)

Web Sites

555

(1)

Books and Articles

556

(3)

Index

559

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Open Source Security Tools Practical Guide to Security Applications, A

Summary

Author Biography

Table of Contents

Supplemental Materials