Network Security Hacks

Tips & Tools for Protecting Your Privacy

By: Andrew Lockhart

Write A Review

10 November 2006 | Edition Number 2

At a Glance

No. of Pages
480

Edition Type
Revised

Dimensions(cm)
16.4 x 24.2 x 3.2

RRP $76.00

$39.75

48%OFF

or 4 interest-free payments of $9.94 with

Ships in 15 to 25 business days

In the fast-moving world of computers, things are always changing. Since the first edition of this strong-selling book appeared two years ago, network security techniques and tools have evolved rapidly to meet new and more sophisticated threats that pop up with alarming regularity. The second edition offers both new and thoroughly updated hacks for Linux, Windows, OpenBSD, and Mac OS X servers that not only enable readers to secure TCP/IP-based services, but helps them implement a good deal of clever host-based security techniques as well.

This second edition of "Network Security Hacks" offers 125 concise and practical hacks, including more information for Windows administrators, hacks for wireless networking (such as setting up a captive portal and securing against rogue hotspots), and techniques to ensure privacy and anonymity, including ways to evade network traffic analysis, encrypt email and files, and protect against phishing attacks. System administrators looking for reliable answers will also find concise examples of applied encryption, intrusion detection, logging, trending and incident response.

In fact, this "roll up your sleeves and get busy" security book features updated tips, tricks & techniques across the board to ensure that it provides the most current information for all of the major server software packages. These hacks are quick, clever, and devilishly effective.

Shipping

	Standard Shipping	Express Shipping
Metro postcodes:	$9.99	$14.95
Regional postcodes:	$9.99	$14.95
Rural postcodes:	$9.99	$14.95

Orders over $0.00 qualify for free shipping.

How to return your order

At Booktopia, we offer hassle-free returns in accordance with our returns policy. If you wish to return an item, please get in touch with Booktopia Customer Care.

Additional postage charges may be applicable.

Defective items

If there is a problem with any of the items received for your order then the Booktopia Customer Care team is ready to assist you.

For more info please visit our Help Centre.

You Can Find This Book In

Non-Fiction Computing & I.T.Computer Networking & Communications Network Security Computer Security Data Encryption Databases Booktopia Publisher Services John Wiley & Sons Publishers UK Networking Standards & Protocols

Credits	p. xi
Preface	p. xv
Unix Host Security	p. 1
Secure Mount Points	p. 2
Scan for SUID and SGID Programs	p. 3
Scan for World- and Group-Writable Directories	p. 5
Create Flexible Permissions Hierarchies with POSIX ACLs	p. 5
Protect Your Logs from Tampering	p. 9
Delegate Administrative Roles	p. 11
Automate Cryptographic Signature Verification	p. 13
Check for Listening Services	p. 15
Prevent Services from Binding to an Interface	p. 17
Restrict Services with Sandboxed Environments	p. 19
Use proftpd with a MySQL Authentication Source	p. 23
Prevent Stack-Smashing Attacks	p. 26
Lock Down Your Kernel with grsecurity	p. 28
Restrict Applications with grsecurity	p. 33
Restrict System Calls with systrace	p. 36
Create systrace Policies Automatically	p. 39
Control Login Access with PAM	p. 41
Restrict Users to SCP and SFTP	p. 46
Use Single-Use Passwords for Authentication	p. 49
Restrict Shell Environments	p. 52
Enforce User and Group Resource Limits	p. 54
Automate System Updates	p. 55
Windows Host Security	p. 58
Check Servers for Applied Patches	p. 59
Use Group Policy to Configure Automatic Updates	p. 63
List Open Files and Their Owning Processes	p. 66
List Running Services and Open Ports	p. 68
Enable Auditing	p. 69
Enumerate Automatically Executed Programs	p. 71
Secure Your Event Logs	p. 73
Change Your Maximum Log File Sizes	p. 73
Back Up and Clear the Event Logs	p. 75
Disable Default Shares	p. 78
Encrypt Your Temp Folder	p. 79
Back Up EFS	p. 80
Clear the Paging File at Shutdown	p. 86
Check for Passwords That Never Expire	p. 88
Privacy and Anonymity	p. 91
Evade Traffic Analysis	p. 91
Tunnel SSH Through Tor	p. 95
Encrypt Your Files Seamlessly	p. 96
Guard Against Phishing	p. 100
Use the Web with Fewer Passwords	p. 105
Encrypt Your Email with Thunderbird	p. 107
Encrypt Your Email in Mac OS X	p. 112
Firewalling	p. 117
Firewall with Netfilter	p. 117
Firewall with OpenBSD's PacketFilter	p. 122
Protect Your Computer with the Windows Firewall	p. 128
Close Down Open Ports and Block Protocols	p. 137
Replace the Windows Firewall	p. 139
Create an Authenticated Gateway	p. 147
Keep Your Network Self-Contained	p. 149
Test Your Firewall	p. 151
MAC Filter with Netfilter	p. 154
Block Tor	p. 156
Encrypting and Securing Services	p. 158
Encrypt IMAP and POP with SSL	p. 158
Use TLS-Enabled SMTP with Sendmail	p. 161
Use TLS-Enabled SMTP with Qmail	p. 163
Install Apache with SSL and suEXEC	p. 164
Secure BIND	p. 169
Set Up a Minimal and Secure DNS Server	p. 172
Secure MySQL	p. 176
Share Files Securely in Unix	p. 178
Network Security	p. 183
Detect ARP Spoofing	p. 184
Create a Static ARP Table	p. 186
Protect Against SSH Brute-Force Attacks	p. 188
Fool Remote Operating System Detection Software	p. 190
Keep an Inventory of Your Network	p. 194
Scan Your Network for Vulnerabilities	p. 197
Keep Server Clocks Synchronized	p. 207
Create Your Own Certificate Authority	p. 209
Distribute Your CA to Clients	p. 213
Back Up and Restore a Certificate Authority with Certificate Services	p. 214
Detect Ethernet Sniffers Remotely	p. 221
Help Track Attackers	p. 227
Scan for Viruses on Your Unix Servers	p. 229
Track Vulnerabilities	p. 233
Wireless Security	p. 236
Turn Your Commodity Wireless Routers into a Sophisticated Security Platform	p. 236
Use Fine-Grained Authentication for Your Wireless Network	p. 240
Deploy a Captive Portal	p. 244
Logging	p. 250
Run a Central Syslog Server	p. 251
Steer Syslog	p. 252
Integrate Windows into Your Syslog Infrastructure	p. 254
Summarize Your Logs Automatically	p. 262
Monitor Your Logs Automatically	p. 263
Aggregate Logs from Remote Sites	p. 266
Log User Activity with Process Accounting	p. 272
Centrally Monitor the Security Posture of Your Servers	p. 273
Monitoring and Trending	p. 282
Monitor Availability	p. 283
Graph Trends	p. 291
Get Real-Time Network Stats	p. 293
Collect Statistics with Firewall Rules	p. 295
Sniff the Ether Remotely	p. 297
Secure Tunnels	p. 301
Set Up IPsec Under Linux	p. 301
Set Up IPsec Under FreeBSD	p. 306
Set Up IPsec in OpenBSD	p. 309
Encrypt Traffic Automatically with Openswan	p. 314
Forward and Encrypt Traffic with SSH	p. 316
Automate Logins with SSH Client Keys	p. 318
Use a Squid Proxy over SSH	p. 320
Use SSH As a SOCKS Proxy	p. 322
Encrypt and Tunnel Traffic with SSL	p. 324
Tunnel Connections Inside HTTP	p. 327
Tunnel with VTun and SSH	p. 329
Generate VTun Configurations Automatically	p. 334
Create a Cross-Platform VPN	p. 339
Tunnel PPP	p. 345
Network Intrusion Detection	p. 348
Detect Intrusions with Snort	p. 349
Keep Track of Alerts	p. 353
Monitor Your IDS in Real Time	p. 356
Manage a Sensor Network	p. 363
Write Your Own Snort Rules	p. 370
Prevent and Contain Intrusions with Snort_inline	p. 377
Automatically Firewall Attackers with SnortSam	p. 380
Detect Anomalous Behavior	p. 384
Automatically Update Snort's Rules	p. 385
Create a Distributed Stealth Sensor Network	p. 388
Use Snort in High-Performance Environments with Barnyard	p. 389
Detect and Prevent Web Application Intrusions	p. 392
Scan Network Traffic for Viruses	p. 397
Simulate a Network of Vulnerable Hosts	p. 400
Record Honeypot Activity	p. 407
Recovery and Response	p. 413
Image Mounted Filesystems	p. 413
Verify File Integrity and Find Compromised Files	p. 415
Find Compromised Packages	p. 420
Scan for Rootkits	p. 422
Find the Owner of a Network	p. 425
Index	p. 429
Table of Contents provided by Ingram. All Rights Reserved.

Network Security Hacks

Tips & Tools for Protecting Your Privacy

At a Glance

Shipping

How to return your order

Defective items

You Can Find This Book In

More in Data Encryption

Computer Security. ESORICS 2025 International Workshops

AutonomousCyber 2025, CPS4CIP 2025, DisA 2025, HS3 2025, MIST 2025, Toulouse, France, September 25â"26, 2025, Revised Selected Papers, Part III

ESG Investment, German Industrie 4.0, and Blockchain

Cryptography and Cybersecurity in the Department of Defence

A Practical Guide to Encryption and National Security

The New Age of Sexism

How the AI Revolution is Reinventing Misogyny

Hardware Security

The Practical Guide to Penetration Testing and Prevention

Supremacy

AI, ChatGPT and the Race that Will Change the World

Liars and Outliers

Enabling the Trust that Society Needs to Thrive

Cryptography and Network Security

8th Edition - Principles and Practice, Global Edition

CompTIA Security+

8th Edition - Guide to Network Security Fundamentals

Principles of Information Security

7th edition

CompTIA PenTest+ Study Guide

Exam PT0-003

Black Hat Python, 2nd Edition

Python Programming for Hackers and Pentesters

The Art of Invisibility

World's Most Famous Hacker Teaches You How to Be Safe in the Age of Big Brother and Big Data

Quantum Leaps

How Maths is Shaping the Future

Building Secure and Reliable Systems

Best Practices for Designing, Implementing, and Maintaining Systems

Rinsed

From Cartels to Crypto: How the Tech Industry Washes Money for the World's Deadliest Crooks

International Conference on Communication Security and Information Processing

CSIP 2024

Practical Lock Picking Second Edition

A Physical Penetration Tester's Training Guide

CyberSentinel+

An Advanced Hybrid Honeypot Intrusion Detection System Augmented with Big Data Analytics and Machine Learning Intelligence

Beautiful Security

When Science Meets Cybersecurity

Healthcare Cybersecurity, Privacy, and Data Protection

Present and Future

Healthcare Cybersecurity, Privacy, and Data Protection

Present and Future

Security Operations Center Guidebook

A Practical Guide for a Successful Soc

OS X Incident Response

Scripting and Analysis

This product is categorised by