EBOOK - Installation And Configuration of R.S.A enVision

                                

"The Right Choice for Compliance and Security Success!". The RSA enVision platform provides collection, alerting and analysis of log data that enables organizations to simplify compliance and quickly respond to high-risk security events. The RSA enVision 3-in-1 platform offers an effective Security and Information Event Management (SIEM) and log management solution, capable of collecting and analyzing large amounts of data in real-time, from any event source and in computing environments of any size. RSA enVision is easily scalable - eliminating the need for filtering and to deploy agents.

Syness-The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments | For ISO 27001(BS7979), PCI-DSS, HIPPA, FISCAM, COBIT

The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments

Publisher: Syngress 2008 | 750 Pages | ISBN: 1597492663 | PDF | 11 MB

This book provides comprehensive methodology, enabling the staff charged with an IT security audit to create a sound framework, allowing them to meet the challenges of compliance in a way that aligns with both business and technical needs. This “roadmap” provides a way of interpreting complex, often confusing, compliance requirements within the larger scope of an organization’s overall needs.

EBook - Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance (2nd Edition) - 2009

Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance

Cisco Press | ISBN: 1587058197 | Dec 29, 2009 | 1152 pages | PDF | 25.7 MB

For organizations of all sizes, the Cisco ASA product family offers powerful new tools for maximizing network security. "Cisco ASA: All-in-One Firewall, IPS, Anti-X and VPN Adaptive Security Appliance" Second Edition, is Cisco's authoritative practitioner's guide to planning, deploying, managing, and troubleshooting security with Cisco ASA.

Written by two leading Cisco security experts, this book presents each Cisco ASA solution in depth, offering comprehensive sample configurations, proven troubleshooting methodologies, and debugging examples. Readers will learn about the Cisco ASA Firewall solution and capabilities; secure configuration and troubleshooting of site-to-site and remote access VPNs;Intrusion Prevention System features built into Cisco ASA's Advanced Inspection and Prevention Security Services Module (AIP-SSM); and Anti-X features in the ASA Content Security and Control Security Services Module (CSC-SSM).

Ebook-Syngress : Hack the Stack: Using Snort and Ethereal to Master The 8 Layers of An Insecure Network

Hack the Stack: Using Snort and Ethereal to Master The 8 Layers of An Insecure Network
Publisher: Syngress | ISBN: 1597491098 | edition 2007 | PDF | 468 pages | 7 MB

This book looks at network security in a new and refreshing way. It guides readers step-by-step through the "stack" -- the seven layers of a network. Each chapter focuses on one layer of the stack along with the attacks, vulnerabilities, and exploits that can be found at that layer. The book even includes a chapter on the Mythical Eighth Layer: "The people layer".

EBook - "Microsoft Log Parser Toolkit: A complete toolkit for Microsoft's undocumented log analysis tool" by Gabriele Giuseppini, Mark Burnett, Jeremy Faircloth and David A. Kleiman

Microsoft Log Parser Toolkit: A complete toolkit for Microsoft's undocumented log analysis tool

Publisher: Syngress | ISBN: 1932266526 | edition 2005 | PDF | 465 pages | 83,8 mb

Written by Microsoft's Log Parser developer, this is the first book available on Microsoft's popular yet undocumented log parser tool. The book and accompanying Web site contain hundreds of customized, working scripts and templates that system administrators will find invaluable for Analyzing the log files from Windows Server, Snort IDS, ISA Server, IIS Server, Exchange Server, and other products.

Exploiting Software: How to Break Code | Greg Hoglund, Gary McGraw

Addison Wesley | ISBN: 0201786958 | 2004 | PDF | 512 pages | 7.58 MB

How does software break? How do attackers make software break on purpose? Why are firewalls, intrusion detection systems, and antivirus software not keeping out the bad guys? What tools can be used to break software? This book provides the answers. Exploiting Software is loaded with examples of real attacks, attack patterns, tools, and techniques used by bad guys to break software. If you want to protect your software from attack, you must first learn how real attacks are really carried out.

Free EBook - XSS Attacks : Cross Site Scripting Exploits & Defence (Mediafire Link)

XSS Attacks: Cross Site Scripting Exploits and Defense By Seth Fogie, Jeremiah Grossman
Publisher: Syngress 2007 | 480 Pages | ISBN: 1597491543 | PDF | 5 MB

Cross Site Scripting Attacks starts by defining the terms and laying out the ground work. It assumes that the reader is familiar with basic web programming (HTML) and JavaScript. First it discusses the concepts, methodology, and technology that makes XSS a valid concern. It then moves into the various types of XSS attacks, how they are implemented, used, and abused. After XSS is thoroughly explored, the next part provides examples of XSS malware and demonstrates real cases where XSS is a dangerous risk that exposes internet users to remote access, sensitive data theft, and monetary losses. Finally, the book closes by examining the ways developers can avoid XSS vulnerabilities in their web applications, and how users can avoid becoming a victim. The audience is web developers, security practitioners, and managers. 

Hacking Exposed Computer Forensics: Secrets & Solutions By Aaron Philipp, David Cowen, Chris Davis (2 Edition) | Mcgraw Hill - Hacking Exposed Computer Forensics

Publisher: Mc/Gra w-Hi l l | 2009 | 544 Pages | ISBN: 0071626778 | PDF | 12 MB

The latest strategies for investigating cyber-crime

Identify and investigate computer criminals of all stripes with help from this fully updated. real-world resource. Hacking Exposed Computer Forensics, Second Edition explains how to construct a high-tech forensic lab, collect prosecutable evidence, discover e-mail and system file clues, track wireless activity, and recover obscured documents. Learn how to re-create an attacker's footsteps, communicate with council, prepare court-ready reports, and work through legal and organizational challenges. Case studies straight from today's headlines cover IP theft, mortgage fraud, employee misconduct, securities fraud, embezzlement, organized crime, and consumer fraud cases.

(SOPHOS)Astaro Security Gateway - Web Filtering Firewall((ADMIN GUIDE))

(SOPHOS)ASTARO SECURITY GATEWAY (ADMIN GUIDE)

URL Filter, Anti Virus and Spyware

The key functional areas that the web filtering module of the Astaro Security Gateway addresses are the ability to:

CCNA.Security.Study.Guide (640-553)

CCNA Security 640-553

• Describe the security threats facing modern network infrastructures.
• Describe and list mitigation methods for common network attacks.
• Describe and list mitigation methods for Worm, Virus, and Trojan Horse attacks.
• Describe the Cisco Self Defending Network architecture.

SybeX CCNA Study Guide 7th Edition

Files include:

CCNA Cisco Certified Network Associate S – Lammle_ Todd.pdf 9.31 MB
CCNA-7th-Edition-Dynamic-Updates-July-2011.pdf 686.98 kB
Sybex CCNA 7th Edition Study Guide – July 2011 Dynamic Update 1 – Todd Lamml.mp4 32.20 MB

Written by Cisco networking authority Todd Lammle, this comprehensive guide has been completely updated to reflect the latest CCNA 640-802 exam. Todds straightforward style provides lively examples, hands on and written labs, easy-to-understand analogies, and real-world scenarios that will not only help you prepare for the exam, but also give you a solid foundation as a Cisco networking professional.

CISA Certified Information Systems Auditor Study Guide 3rd Edition - 2011

CISA Certified Information Systems Auditor Study Guide, 3rd Edition 


David L. Cannon|ISBN: 978-0-470-61010-7|Paperback|696 pages|March 2011 

More than 27,000 IT professionals take the Certified Information Systems Auditor exam each year. SC Magazine lists the CISA as the top certification for security professionals. Compliances, regulations, and best practices for IS auditing are updated twice a year, and this is the most up-to-date book available to prepare aspiring CISAs for the next exam. 

JNCIE: Juniper Networks Certified Internet Expert Study Guide

JNCIE: Juniper Networks Certified Internet Expert Study Guide 

Publisher: Sybex | ISBN: 0782140696 | edition 2003 | PDF | 1008 pages | 4,74 mb

Turn to this Official Study Guide from Sybex for the most extensive preparation available for Juniper Networks' highest level of certification: JNCIE (Juniper Networks Certified Internet Expert)! At the top of a four-tiered certification program, the JNCIE is an advanced, hands-on, lab-based certification. Published in partnership with the Juniper Networks Technical Certification Program, and written by the lead developer of the exam, this official Study Guide provides in-depth coverage of all exam objectives along with practical insights drawn from real-world experience. The accompanying CD includes the entire book in searchable PDF as well as complete router configurations for case studies used throughout the book .

CCSE NG: Check Point Certified Security Expert Study Guide

Description

CCSE NG: Checkpoint Certified Security Expert Study Guide
Publisher: Sybex | ISBN: 0782141161 | edition 2003 | PDF | 656 pages | 9,44 mb

“IT Security skills are in high demand, and the CCSE (Check Point Certified Security Expert) is the most highly recognized and respected vendor-specific security certification available. In the May 2002 issue of Certification magazine the CCSE certification was picked as one of "15 Certifications to Further Your Career." This Study Guide provides in-depth coverage of all exam objectives along with practical insights drawn from real-world experience.”

CCSA NG: Check Point Certified Security Administrator Study Guide

Description

CCSA NG: CheckPoint Certified Security Administrator Study Guide
Justin Menga | Sybex | 2011-01-25 | 656 pages | English | PDF

Author: Justin Menga
Date: 2011-01-25
Pages: 656
Publisher: Sybex
Category: Technical
Here's the book you need to prepare for Check Point's VPN-1/FireWall-1 Management I NG exam, #156-210. Written by a Check Point security expert who knows exactly what it takes to pass the test

The Official CHFI Study Guide (Exam 312-49)

The Official CHFI Study Guide (Exam 312-49) | 11.8 MB

This is the only official, EC-Council-endorsed CHFI (Computer Hacking Forensics Investigator) study guide. It was written for security professionals, systems administrators, IT consultants, legal professionals, IT managers, police and law enforcement personnel studying for the CHFI certification, and professionals needing the skills to identify an intruder’s footprints and properly gather the necessary evidence to prosecute. Key features include: 

The Only Official Study Guide for CHFI 

• Provides 100% coverage of all exam objectives. 
• Full Web-based Exam 
• Modeled after the real exam, it also includes explanations of correct and incorrect answers. 
• Exam Objectives 
• Each is clearly explained at the beginning of the chapter. 
• Notes and Alerts 
• Highlight crucial points of the exam modules. 
• Exam Objectives Fast Track 
• Bulleted highlights emphasize the important points from the exam’s perspective at the end of the chapter. 

Hacking Exposed: Web Applications, 3rd Edition

Book Description

The latest Web app attacks and countermeasures from world-renowned practitioners

Protect your Web applications from malicious attacks by mastering the weapons and thought processes of today’s hacker. Written by recognized security practitioners and thought leaders, Hacking Exposed Web Applications, Third Edition is fully updated to cover new infiltration methods and countermeasures. Find out how to reinforce authentication and authorization, plug holes in Firefox and IE, reinforce against injection attacks, and secure Web 2.0 features. Integrating security into the Web development lifecycle (SDL) and into the broader enterprise information security program is also covered in this comprehensive resource.

Buffer Overflow Ebooks Collection

 Hi all users, here we've collected some E-books set concerning Buffer overflow vulnerability, shellcoding,.. and i would like to share them:

This set contains the following  E-books :

Metasploit – The Penetration Tester’s Guide Ebook

"The best guide to the Metasploit Framework." —HD Moore, Founder of the Metasploit Project

The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester's Guide fills this gap by teaching you how to harness the Framework and interact with the vibrant community of Metasploit contributors.

Once you've built your foundation for penetration testing, you'll learn the Framework's conventions, interfaces, and module system as you launch simulated attacks. You'll move on to advanced penetration testing techniques, including network reconnaissance and enumeration, client-side attacks, wireless attacks, and targeted social-engineering attacks.

Learn how to:

• Find and exploit unmaintained, misconfigured, and unpatched systems
• Perform reconnaissance and find valuable information about your target
• Bypass anti-virus technologies and circumvent security controls
• Integrate Nmap, NeXpose, and Nessus with Metasploit to automate discovery
• Use the Meterpreter shell to launch further attacks from inside the network
• Harness standalone Metasploit utilities, third-party tools, and plug-ins
• Learn how to write your own Meterpreter post exploitation modules and scripts

JNCIP: Juniper Networks Certified Internet Professional Study Guide

JNCIP: Juniper Networks Certified Internet Professional Study Guide 

 
Sybex | February-18-2003 | ISBN: 0782140734 | 752 pages| File type: PDF | 3.7mb

Get ready for the challenging JNCIP certification hands-on lab exam from Juniper Networks with the Official Study Guide from Sybex! Juniper Networks develops high-speed, scalable routers for the service provider and networking industry. They are challenging Cisco in the internetworking market with state of the art technology and innovation.