Mastering Network Security

The Technology You Need is Out There. The Expertise You Need is in Here.

Expertise is what makes hackers effective. It's what will make you effective, too, as you fight to keep them at bay. Mastering Network Security has been fully updated to reflect the latest developments in security technology, but it does much more than bring you up to date. More importantly, it gives you a comprehensive understanding of the threats to your organization's network and teaches you a systematic approach in which you make optimal use of the technologies available to you. Coverage includes:

• Understanding security from a topological perspective
• Configuring Cisco router security features
• Selecting and configuring a firewall
• Configuring Cisco's PIX firewall
• Configuring an intrusion detection system
• Providing data redundancy
• Configuring a Virtual Private Network
• Securing your wireless network
• Implementing authentication and encryption solutions
• Recognizing hacker attacks
• Detecting and eradicating viruses
• Getting up-to-date security information
• Locking down Windows NT/2000/XP servers
• Securing UNIX, Linux, and FreBSD systems

In Mastering Network Security, Chris Brenton presents a complete portrait of all the things that can go wrong with a computer network and provides a thorough discussion of the tools available to counteract them. This book proceeds to explain how malicious software, external attackers, angry insiders, software bugs, and other evil entities can bring down a system. Most of the focus here, however, is on system attacks from the outside. Brenton devotes much attention to the tools you can use to thwart attackers.

This book walks the reader through a security audit and the process of developing an effective security policy. While some of the author's advice in this area may seem like common sense, it's helpful to have the many related issues summarized. Then, on the theory that it's easier to secure territory you know well, Brenton provides an overview of internetworking technologies--notably, Virtual Private Networks (VPNs)--and their inherent security characteristics.

Mastering Network Security shows how to implement security measures--including logging, encryption, and packet filtering--on your existing network infrastructure. (He provides specifics for Unix, Windows NT, Cisco IOS, and NetWare). The author also writes at length about supplementary security measures such as firewalls (especially Firewall-1), intrusion detection systems (focusing on RealSecure), and RAID data redundancy (with emphasis on OctopusHA+). --David Wall