Slashdot Mirror
Special Ops
In order to get the most out of Special Ops, I suggest that you brush up on your system administration skills, particularly Microsoft technologies. The book is aimed primarily at security and systems administrators, but several of the chapters are either aimed specifically at management (Chaps 17 & 18), or could easily be understood by them (chaps 1-3).
The authors write in a conversational, matter-of-fact style, including personal anecdotes and experiences where appropriate. The editors did a great job of "smoothing out" the styles of the different authors to give Special Ops a consistent feel.
One of the best features of Special Ops is the end-of-chapter content. These summaries include a "Security Checklist" which creates a nice list for admins to take into the field, a one-page summary of the chapter, links to relevant web pages, relevant mailing lists, other books to read for more in-depth information, a "Solutions Fast Track," and a FAQ. Some chapters list all of the freeware and commercial tools used/mentioned in that chapter. The Solutions Fast Track is a great section to hand to your slightly more technical manager explaining why you should secure a specific service. These chapter extras make Special Ops a great reference book, even if you never bother to read the rest of it.
Another great feature is the "Notes from the Underground ..." sections scattered throughout the book. All of the authors have worked in security for several years, and they share specific examples of attacks or other interesting tidbits they've seen over the years.
I had trouble giving Special Ops a rating of 9 or 10 for a few reasons. Even though the book is an easy read, it's a lot of information to digest. The subtitle makes it sound as if Microsoft, UNIX, and Oracle would receive equal treatment: not so. While there are 7 chapters on Microsoft specific technologies, UNIX and Oracle rate one chapter each. I would have preferred to see Special Ops split into 2 or 3 books, giving equal attention to all of the technologies.
The authors' bias towards certain commercial tools shows through as well. Granted, the majority of the authors are also Foundstone employees, but they should have given equal treatment to all tools. Explain the strengths and weaknesses of each tool and allow the reader to decide on the "best" tool.
All in all, Special Ops is a great book. It will definitely reside on my reference shelf for years to come.
Table of Contents- Assessing Internal Network Security
- Inventory and Exposure of Corporate Assets
- Hunting for High Severity Vulnerabilities (HSV)
- Attacking and Defending Windows XP Professional
- Attacking and Defending Windows 2000
- Securing Active Directory
- Securing Exchange and Outlook Web Access
- Attacking and Defending DNS
- Attacking and Defending Microsoft Terminal Services
- Securing IIS
- Hacking Custom Web Applications
- Attacking and Defending Microsoft SQL Server
- Attacking and Defending Oracle
- Attacking and Defending Unix
- Wireless LANs: Discovery and Defense
- Network Architecture
- Architecting the Human Factor
- Creating Effective Corporate Security Policies
You can purchase the Special Ops from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.
for the second time in a day I got a fist post!
"Special" Ops.
You could design a complete FPS game around this concept I think.
post
sO I c@|\| b3c0|\/|3 t3h 1337 h4>0r!
...Come and try to snatch my crops
These pigs want to blow my house down...
... insert Linux CD into CD-R drive of PC running Windows...
A young Chinese tiger keeper has been mauled to death after apparently trying to defecate on one of his big cats.
The 19-year-old appears to have climbed the railings of the Bengal tiger cage and pulled his trousers down.
Evidence at the scene of the death at the Jinan animal park included toilet paper, excrement and a trouser belt.
Zoo officials think Xu Xiaodong either slipped into the cage or was pulled in by one of the four angry tigers.
According to the South China Morning Post, the man told a co-worker he needed to go to the toilet but police were called when he failed to return.
They found his body lying on the ground surrounded by tigers. The teenager had reportedly been bitten in the neck and was covered in blood. Police believe Xu climbed the wall of a partially constructed building used to raise the tigers to relieve himself. They said the smell probably caused the tigers to pounce.
You can see more stories about tigers and zoos on Ananova, or read our Animal attacks file.
Nah, it'd be waaay too hard a difficulty curve, and the power ups would always be buggy :P
An infinite number of monkeys will eventually come up with the complete works of
from beginning to end what would be the most usefull network administration guides for an intermediate linux user who wants to learn how to server web pages, databases, run an all linux network, etc... any recomendations
CRONYN DIED OF prostate cancer Sunday at his home in Fairfield, Conn., even if you didn't blah blah blah american actor icon blah blah blah....
Boromir wasn't the son of Faramir, they were gay lovers.
Anybody know where I could get a Threads of Fate ISO? It's a bitch trying to find it on Kazaa. Links to FTP sites would be great.
Arathorn is the father of Aragorn
It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
American icon, indeed. Born in London, Ontario and educated at McGill.
I've read the books twice in my life, nearly ten years apart on both accounts and I knew that too.
Knowing this does not make you special.
However, it still doesn't excuse retardation on his part.
-A
Nowhere does he mention that he got those names from that piece of paedo gay pr0n.
He may be talking about a different family altogether.
It is also important to point out that Boromir's father is NOT the king of Gondor. He is merely the steward put in place while they await the return of the true king. Thus the title of the third book and movie, Return Of The King.