HTTP/2 302 server: nginx date: Tue, 05 Aug 2025 01:29:26 GMT content-type: text/plain; charset=utf-8 content-length: 0 x-archive-redirect-reason: found capture at 20080517111127 location: https://web.archive.org/web/20080517111127/https://safari.oreilly.com/059600611X server-timing: captures_list;dur=0.718310, exclusion.robots;dur=0.026552, exclusion.robots.policy;dur=0.011751, esindex;dur=0.017790, cdx.remote;dur=52.119380, LoadShardBlock;dur=424.933620, PetaboxLoader3.datanode;dur=97.151369, PetaboxLoader3.resolve;dur=271.435998 x-app-server: wwwb-app219 x-ts: 302 x-tr: 504 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 set-cookie: wb-p-SERVER=wwwb-app219; path=/ x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 200 server: nginx date: Tue, 05 Aug 2025 01:29:26 GMT content-type: text/html; charset=utf-8 x-archive-orig-content-length: 190758 x-archive-orig-expires: Mon, 05 Apr 1970 03:12:07 GMT x-archive-orig-server: SWS + Microsoft-HTTPAPI/1.0 x-archive-orig-cache-control: private x-archive-orig-p3p: CP="CAO DSP COR LAW ADM DEV PSA IVA IVD CONo HIS TELo OUR IND UNI" x-archive-orig-set-cookie: Safari=cookieversion=2&portal=oreilly&key=&sessionid=daa0e78d-c998-476a-8f06-2a62d0e2c4b6&ref=Undefined; Path=/; Domain=safari.oreilly.com x-archive-orig-date: Sat, 17 May 2008 11:11:25 GMT x-archive-orig-connection: close x-archive-orig-via: 1.1 zav-jun (Juniper Networks Application Acceleration Platform - DX 5.2.2 0) x-archive-guessed-content-type: text/html x-archive-guessed-charset: utf-8 memento-datetime: Sat, 17 May 2008 11:11:27 GMT link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="first memento"; datetime="Thu, 03 Jun 2004 13:03:37 GMT", ; rel="prev memento"; datetime="Sat, 15 Dec 2007 03:59:54 GMT", ; rel="memento"; datetime="Sat, 17 May 2008 11:11:27 GMT", ; rel="next memento"; datetime="Sat, 11 Oct 2008 16:52:52 GMT", ; rel="last memento"; datetime="Tue, 22 Sep 2009 07:45:02 GMT" content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org x-archive-src: 52_3_20080517101533_crawl100-c/52_3_20080517111002_crawl100.arc.gz server-timing: captures_list;dur=1.219429, exclusion.robots;dur=0.051176, exclusion.robots.policy;dur=0.018273, esindex;dur=0.030832, cdx.remote;dur=48.172865, LoadShardBlock;dur=251.221094, PetaboxLoader3.datanode;dur=244.190555, PetaboxLoader3.resolve;dur=142.045125, load_resource;dur=153.015906 x-app-server: wwwb-app219 x-ts: 200 x-tr: 584 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() content-encoding: gzip

Home Network Store Safari Books Online Conferences School Academic Solutions About Sign In • About Safari Safari Home Safari Labs

Search Entire SiteBook/Video Titles OnlySection TitlesCode Fragments OnlyAuthorISBNPublisher All Content Current Book Only Advanced Search Table of Contents Network Security Assessment Copyright Foreword Preface Network Security Assessment The Tools Required Internet Host and Network Enumeration IP Network Scanning Assessing Remote Information Services Assessing Web Services Assessing Remote Maintenance Services Assessing FTP and Database Services Assessing Windows Networking Services Assessing Email Services Assessing IP VPN Services Assessing Unix RPC Services Application-Level Risks Example Assessment Methodology TCP, UDP Ports, and ICMP Message Types Sources of Vulnerability Information Colophon Index Browse by Category Quick Links...VideosRough CutsShort Cuts- - - - - - - - - - - - - - -.NETJavaJavaScriptMac/OS XPerlPHPPythonRubySQLXML Applied Sciences Artificial Intelligence Business Certification Computer Science Databases Desktop Publishing Desktop Applications E-Business E-Commerce Enterprise Computing Graphics Human-Computer Interaction Hardware Internet/Online IT Management Markup Languages Multimedia Networking Operating Systems Programming Security Software Engineering View All Titles >     Network Security Assessment by Chris McNab Publisher: O'Reilly Pub Date: March 2004 ISBN: 0-596-00611-X Pages: 396 Slots: 1.0 Table of Contents  • Index Overview Network Security Assessment offers an efficient testing model you can adopt, refine, and reuse to create proactive defensive strategies to protect your systems from the threats that are out there, as well as those still being developed. This thorough and insightful guide covers offensive technologies by grouping and analyzing them at a higher level--from both an offensive and defensive standpoint--helping administrators design and deploy networks that are immune to offensive exploits, tools, and scripts. Editorial Reviews Product Description There are hundreds--if not thousands--of techniques used to compromise both Windows and Unix-based systems. Malicious code and new exploit scripts are released on a daily basis, and each evolution becomes more and more sophisticated. Keeping up with the myriad of systems used by hackers in the wild is a formidable task, and scrambling to patch each potential vulnerability or address each new attack one-by-one is a bit like emptying the Atlantic with paper cup. If you're a network administrator, the pressure is on you to defend your systems from attack. But short of devoting your life to becoming a security expert, what can you do to ensure the safety of your mission critical systems? Where do you start? Using the steps laid out by professional security analysts and consultants to identify and assess risks, Network Security Assessment offers an efficient testing model that an administrator can adopt, refine, and reuse to create proactive defensive strategies to protect their systems from the threats that are out there, as well as those still being developed. This thorough and insightful guide covers offensive technologies by grouping and analyzing them at a higher level--from both an offensive and defensive standpoint--helping administrators design and deploy networks that are immune to offensive exploits, tools, and scripts. Network administrators who need to develop and implement a security assessment program will find everything they're looking for--a proven, expert-tested methodology on which to base their own comprehensive program--in this time-saving new book. Other Readers Also Read Top Sellers in This Category Browse Similar Topics Security Warrior by Anton Chuvakin; Cyrus Peikari Network Security Hacks by Andrew Lockhart Managing Security with Snort and IDS Tools by Kerry J. Cox; Christopher Gerg Threat Modeling by Frank Swiderski; Window Snyder Security Warrior by Anton Chuvakin; Cyrus Peikari Cisco IOS in a Nutshell, 2nd Edition by James Boney Cisco IOS Access Lists by Jeff Sedayao SSH, the Secure Shell, 2nd Edition by Daniel J. Barrett; Robert G. Byrnes; Richard E. Silverman Top Level Categories: Networking Security Sub-Categories: Networking > Security Security > Networking       Reader Reviews From Amazon (Ranked by 'Helpfulness') Average Customer Rating:based on 20 reviews. Essential For Security Concerned IT Admins, 2008-04-02 Reviewer rating: 'Network Security Assessment: Know Your Network' is an absolute must buy for anyone that runs/admins a network and needs to know the tricks to keeping things safer in today's connected world. Warning right off the bat that this is a very niche market of reader and it's NOT NOT NOT for the regular developer or admin. This is heavy on the technical jargon and you better know all your acronyms like there is no tomorrow from TCP to IP to LDAP to xxx!! From IIS to VPN to Databases and regular Windows usage there are tons of case studies and examples throughout that will help you plug leaks and keep the bad guys out. Here's a chapter overview: 01. Network Security Assessment Basics 02. Network Security Assessment Platform 03. Internet Host and Network Enumeration 04. IP Network Scanning 05. Assessing Remote Information Services 06. Assessing Web Servers 07. Assessing Web Applications 08. Assessing Remote Maintenance Services 09. Assessing Database Services 10. Assessing Windows Networking Services 11. Assessing Email Services 12. Assessing IP VPN Services 13. Assessing Unix RPC Services 14. Application-Level Risks 15. Running Nessus 16. Exploitation Frameworks ***** HIGHLY RECOMMENDED Any collection catering to programmers or network managers needs , 2008-01-06 Reviewer rating: Chris McNab's NETWORK SECURITY ASSESSMENT appears in its second updated edition to cover the protocols for testing network security - by trying to attack it internally. Tricks and tools professional security consultants use to identify and correct risks in Internet-based networks are revealed in chapters covering everything from Windows networking components and Unix RPC services on various platforms to application-level vulnerabilities. Any collection catering to programmers or network managers needs NETWORK SECURITY ASSESSMENT in its latest updated second edition. Network Security Assessment, 2005-07-20 Reviewer rating: explainsa variety of exploits and tells you how to harden your network. This book is very well researched and extremely well written and is reader friendly, as some security books leave the reader lost in techno babble, not this book however very easy reading it now sits on my desk as a ready reckoner. Very good book for security policy enablers and admins, 2005-05-29 Reviewer rating: This is one of the few books that I have come across that focuses mainly on the innards of security assessments. The services based security and counter measures are helpful for threat modeling. This book is really great for people in the security risk and threat analysis for a quantitative and qualitative validation. Good book to help in setting up corporate security policy model. Other people have already provided a good chapter wise run-down so I will skip that here... Buy this book :) Good Methodology and Specifics, 2005-05-07 Reviewer rating: I've read a heck of a lot of books on security assessments. Some turn into hacking manuals, others turn into windy documents on documenting the process and why each piece of the process is important. Network Security Assessment talks about the methodology of security assessments, the how of running nmap, for example with specific commands and a discussion of why. I have really appreciated the book for this reason. A methodology in this field is sorely lacking. Everyone seems to have their own (myself included). NSA gave me some added tweaks to my own as well as a few more tools to explore. Tools, free and commercial, are part of our trade, and they change constantly, so almost any published book that references tools will be seen as out of date quickly. The author makes the effort, however, to discuss tools as wells as examples from the tried and true ones we all know and love. The author chooses not to include wireless technologies, for which I have to "ding" him; he leaves it to "full-blown penetration testing," and I feel it belongs in any security assessment. That being said, one of the best I've read recently, and I highly recommend it for what it DOES cover. Some information above was provided using data from Amazon.com. View at Amazon > Network Security Assessment by Chris McNab Publisher: O'Reilly Pub Date: March 2004 ISBN: 0-596-00611-X Pages: 396 Slots: 1.0 Table of Contents  • Index URL https://safari.oreilly.com/059600611X Company | Terms of Service | Privacy Policy | Contact Us | Help | 508 Compliance Copyright © 2008 Safari Books Online. All rights reserved.