Hack Attacks Denied: A Complete Guide to Network Lockdown Book

Access to networked computers is via a logical port. Hack Attacks Denied explains how to protect those you aren't using and control what goes in and out of those you do use. This forms the basis of all network computer lockdowns. Unfortunately, implementing this simple sounding security remedy for operating systems and applications is technically difficult and complex to track. Author, John Chirillo first talks of disabling unnecessary--and potentially insecure--services such as chargen, echo and finger and then how to reduce the risks presented by those you do run. Much of Chirillo's improved security comes from replacing standard servers with limited versions supplied on the accompanying CD--complete with listings so you can see how they work. The sections on discovery and penetration countermeasures is interesting--it even includes sample Cisco router filter scripts--but the most successful exploits are inside jobs or rely on social engineering (unwitting user co-operation). People are always the weakest security link--including sysadmins who don't apply security patches let alone lock down systems. The emphasis on formulating and implementing a security policy is excellent, as is the advice to regularly test your security instead of just assuming it works. Chirillo necessarily reprises much of the information in his wide ranging Hack Attacks Revealed, but the relentlessly practical approach taken to implementing network security by Hack Attacks Denied makes it an excellent network security cookbook. Read it, raise your game, and watch the black hats target someone who didn't. --Steve PatientRead More