Chained Exploits

by Andrew J. Whitaker, Keatron Evans, Jack B. Voth

This is the eBook version of the printed book. If the print book includes a CD-ROM, this content is not included within the eBook version. The complete guide to today's hard-to-defend chained attacks: performing them and preventing them Nowadays, it's rare for malicious hackers to rely on just one exploit or tool; instead, they use "chained" exploits that integrate multiple forms of attack to achieve their goals. Chained exploits are far more complex and far more difficult to defend. Few security or hacking books cover them well and most don't cover them at all. Now there's a book that brings together start-to-finish information about today's most widespread chained exploits-both how to perform them and how to prevent them. "Chained Exploits" demonstrates this advanced hacking attack technique through detailed examples that reflect real-world attack strategies, use today's most common attack tools, and focus on actual high-value targets, including credit card and healthcare data. Relentlessly thorough and realistic, this book covers the full spectrum of attack avenues, from wireless networks to physical access and social engineering. Writing for security, network, and other IT professionals, the authors take you through each attack, one step at a time, and then introduce today's most effective countermeasures-- both technical and human. Coverage includes:


Constructing convincing new phishing attacks Discovering which sites other Web users are visiting Wreaking havoc on IT security via wireless networks Disrupting competitors' Web sites Performing-and preventing-corporate espionage Destroying secure files Gaining access to private healthcare records Attacking the viewers of social networking pages Creating entirely new exploits and more
Andrew Whitaker, Director of Enterprise InfoSec and Networking for Training Camp, has been featured in The Wall Street Journal and BusinessWeek. He coauthored Penetration Testing and Network Defense. Andrew was a winner of EC Council's Instructor of Excellence Award. Keatron Evans is President and Chief Security Consultant of Blink Digital Security, LLC, a trainer for Training Camp, and winner of EC Council's Instructor of Excellence Award. Jack B. Voth specializes in penetration testing, vulnerability assessment, and perimeter security. He co-owns The Client Server, Inc., and teaches for Training Camp throughout the United States and abroad. informit.com/aw Cover photograph (c) Corbis / Jupiter Images $49.99 US $59.99 CANADA

299 pages, ebook

First published November 1, 2008

About the author

Andrew John Whitaker

Reviews

[Andrew Lewis · Rating 5 out of 5]

Really great book. Definitely recommend for someone looking in a job working with online security and just wanna keep up with home security.

[Youghourta · Rating 4 out of 5]

Ce livre est destiné à ceux qui veulent avoir une idée plus claire sur la manière de raisonner et de procéder des hackers, leurs méthodes de récolte de donnée et leurs modes opératoires.
Ecrit par trois spécialistes du domaine, ce livre explique, à travers huit scénarios différents, comment un hacker peut utiliser de simples informations (comme le nom d'un responsable de département informatique d'une société, le centre d'intérêt de son employeur, ou même le nom d'un sous-traitant) et des utilitaires qu'on peut trouver facilement sur internet pour monter une attaque (une chaine d'exploits) qui peut engendrer des dégâts importants.
Malgré toutes les techniques que nous révèlent les auteurs et l'ensemble d'outils de hacking cités à travers les différents scénarios, ce livre ne peut être considéré en aucun cas comme un manuel de piratage informatique, d'ailleurs le but principal du livre est d'inciter les lecteurs à adopter de meilleures méthodes de protection de données.
Chaque chapitre de ce livre se termine par une section qui cite les points faibles et les failles permettant au hacker d'arriver à ses fins (collecte/vol de donnée, sabotage, .) ainsi qu'un ensemble de recommandations qui permettent d'y faire face.
Bref, un très bon livre pour tous ceux qui travaillent dans un domaine où la sécurité informatique joue un rôle important et à tous ceux qui se soucient de la protection de leurs données électroniques.

[Thomas · Rating 3 out of 5]

Highly recommend for someone that is clueless about any kind of hacks.

[rahhmat · Rating 4 out of 5]

Nice, recommended dah...hehe