How to Cheat at Configuring Open Source Security Tools

ISBN-13: 9781597491709 / Angielski / Miękka / 2007 / 528 str.

Inc.) Superior Solutions Michael Gregg (President; JPMorganC ISSAP CISA CISSP Eric S. Seagren (Eric Seagren; D.C. Senior Scientist in the Ad Angela Orebaugh (Washington

Opis

The Perfect Reference for the Multitasked SysAdmin
This is the perfect guide if network security tools is not your specialty. It is the perfect introduction to managing an infrastructure with freely available, and powerful, Open Source tools. Learn how to test and audit your systems using products like Snort and Wireshark and some of the add-ons available for both. In addition, learn handy techniques for network troubleshooting and protecting the perimeter.

* Take Inventory
See how taking an inventory of the devices on your network must be repeated regularly to ensure that the inventory remains accurate.
* Use Nmap
Learn how Nmap has more features and options than any other free scanner.
* Implement Firewalls
Use netfilter to perform firewall logic and see how SmoothWall can turn a PC into a dedicated firewall appliance that is completely configurable.
* Perform Basic Hardening
Put an IT security policy in place so that you have a concrete set of standards against which to measure.
* Install and Configure Snort and Wireshark
Explore the feature set of these powerful tools, as well as their pitfalls and other security considerations.
* Explore Snort Add-Ons
Use tools like Oinkmaster to automatically keep Snort signature files current.
* Troubleshoot Network Problems
See how to reporting on bandwidth usage and other metrics and to use data collection methods like sniffing, NetFlow, and SNMP.
* Learn Defensive Monitoring Considerations
See how to define your wireless network boundaries, and monitor to know if they're being exceeded and watch for unauthorized traffic on your network.

• Covers the top 10 most popular open source security tools including Snort, Nessus, Wireshark, Nmap, and Kismet
• Follows Syngress' proven "How to Cheat" pedagogy providing readers with everything they need and nothing they don't

Spis treści

Presenting the Business Case for Free Solutions
Protecting Your Perimeter
Protecting Network Resources
Deploying Snort
Deploying Wireshark
Deploying Nessus
Securing your Wireless Network
Using Penetration Testing Tools
Reporting and Analysis