Contains excellent security planning information
348781
Very thorough book and excellent information here. My professor was the co-author of this book, so I can attest to its' value. Great book!
1007187
This is a very well written book by a group of very experienced practitioners and teachers. Each chapter reflects their experience and the SANS Institute's no-nonsense approach to teaching highly technical security subjects, making the book a worthwile read for security administrators, analysts and engineers.
Every chapter starts with an introduction to the subject where general aspects are being highlighted in a way that they can be grasped by non-technical people too. From there the authors quickly jump to explaining the hard, technical details. Pros and cons of individual technologies are being discussed, giving expert opinion to those looking for help in deciding about technology choices. A summary, again readable by everybody and their manager closes each chapter.
This is the first book I've seen that groups together and relates all subjects relevant to network perimeter defense. Well chosen diagrams and "real world stories" make it an enjoyable and entertaining read. Highly recommended.
4267878
Clearly written, up-to-date information and a must-read for those contemplating or carrying defensive arms.
2665431
This is a must have for anyone interested in the protection of themselves or their family. Every chapter is filled with critical information and tips on how to minimize your odds of being a victim and strategies if confrontation is inevitable.  I really liked reading about so many different scenarios (business travel, hotel security, home security, car security and many more) and all the different aspects to consider to help make you smarter and safer.  A great book all around!!!!
2612978
This exemplary volume presents a comprehensive view of all the relevant topics for any organization operating in environments where security is a concern.  In a world where increasingly larger amounts of business are being conducted in "non-traditional" regions, this book is imperative for developing a concrete understanding on how to mitigate the threats that these regions present.

Readers of this book will find that risk management solutions are scalable to the level of threat that each organization faces.  Readers will also be forced to acknowledge that the short-term costs of appropriate risk management solutions will help to significantly decrease the long-term costs should such measures not be taken.  In short, this volume is nothing short of indispensible for the increasingly globalized economy.
501550
Mr. Robertson does a great job of introducing the reader to the strategies needed to develop and implement a church security plan. His conversational tone makes it a low-stress task to assimilate the information and translate it to the needs of my local church. PB
3098997
Strategic, Broad-based Training manuals are difficult to find in terms of applicability-this book provides such information! As a Special Forces Operator and Army Military Intelligence Officer, I endorse this book! It isn't going to provide "in the weeds" details but it WILL provide great material to understand as operational planning requires. This definately belongs on the bookshelf-I guarentee it won't collect much dust! It is interesting and gives superb detailed considerations for any operational need.
3494422
Ms. Bragg knows her stuff.  This book is a nuts & bolts approach to implementing security on a variety of Windows systems.  The author's "how-to" instructions start with immediate steps to close the holes in Win systems and proceeds to cover all the bases from physical security to communications to PKI, security policies and more.  This book is very inclusive and covers Win systems from 95 through 2003.
The text is well laid out with plenty of screen shots, tables and explanations.  The index makes this a fine reference book.
The book does not get bogged down with a lot of superficial theory and speaks right to the heart of security issues.
4652478
As we increasingly integrate our lives with the Internet and mobile digital devices, we put our identity at risk more than we think. Steve Wiseman's "50 Ways to Protect Your Identity in a Digital Age" is, as far as I can tell, a very comprehensive handbook of do's and don'ts when it comes to identity theft, security breaches, theft insurance, theft risks associated with smart phones and other mobile devices, and even risks connected to using social media, like Facebook and Twitter. This is a jargon-free book that provides practical ways to secure your identity. The author provides several examples of identity theft and how victims could have protected themselves. Though this book could be used as just a reference book, I ended up reading it cover-to-cover because it addresses nearly everything I do on the Internet and with my digital devices. I started making a checklist of changes that are needed to make that would put me in less of a risk. If you are a heavy Internet and digital devices user, I highly recommend that you read this book. It's nearly 300 pages, but honestly it can be read in a day or two.
1156972
The authors and the technical editor of this book have done a superb job of making the complex subject of firewalls accessible to a wide audience.  Regardless of your level of experience, you will be able to take something of value away from this book, whether it is a basic understanding of firewalls or some deeper insights into the complexities of NAT, IPSec, VPNs, and Kerberos. From setting up a personal firewall, such as Zone Alarm, to setting up multiple industrial-strength firewalls involvings DMZs, you will find a lot of good information and advice.
The authors show a concern for crafting clear, economical, and easy-to-understand explanations of otherwise difficult concepts. Their experience as consultants and educators is obvious. You could buy more expensive and abstruse books on firewalls, but you probably won't enjoy them as much and you probably won't get as much out of them.  The authors have done a great job.
2601705
Does a week ever go by without a major Windows vulnerability coming to light? It is evident that, prior to Windows XP Service Pack 2, the operating system was geared to file and printer sharing, not security. Among security professionals, the common view is that the best way to secure Windows is to use a more secure operating system such as Linux.

Windows isn't going away, however, and probably millions of businesses will continue to use that platform. These systems should be hardened against attack, a task made easier by this resourceful and practical book.

Hardening Windows Systems provides users a solid guide to implementing security on various Windows operating systems, attempting to close the many holes that have plagued Windows. Chapters cover infrastructure, physical security, communications, security policies, and more.

Valuable security-setting tables and checklists are offered for a vast number of different Windows security services, settings, and parameters. These tables and checklists ensure a systematic approach to system hardening.

Some readers might be overwhelmed by the prodigious number of modifications needed to ensure that a Windows host is indeed secure. Making those modifications is a dirty job, but this book makes it a lot less messy.
1054749
John Vacca has uniquely assembled computer security topics written by specialists in their field into a useful, well-organized handbook. The compilation of various experts allows thorough coverage of many diverse computer security topics.  This book is targetted for technical schools and universities. The added exercises in this second edition will help tailor it to the educational environment.
3615757
This book is an excellent resource for anyone considering investing in an ethical hack or penetration test. It would also be a good read for anyone on a security team in an organization that is getting ready to undergo penetration testing. It is clearly laid out and well edited.

I don't believe that you can learn to become a penetration tester from the book, most of the tools are a bit older, I think the technical development must end in 2004 and the authors skip some steps from time to time especially in the NOTE sections.

My least favorite chapter was 2, Legal and Ethical Considerations, in my view, one to three pages per regulation is not just superficial, but potentially dangerous.  The social engineering chapter is better than most similar attempts.  I enjoyed Chapter 7, Web Server Attacks and intend to read that one again. I was really enjoying Chapter 11 Wireless, until I hit page 361, this is an example of what I mean by skipping a step or two! It is all do this, do that, with nary a clue on how.  One of the ultimate tests for a security book is how well the book can explain buffer overflows. Many times, it is fairly clear the authors themselves don't know what a buffer overflow is and they mumble something about Smashing the Stack and I close the book on the spot.  I have little doubt that Whitaker and Newman know what a buffer overflow is, but I doubt any reader of the book will learn it from the book.  Please do not get me wrong, this is a good book, a very good book, but that is a hard concept to really teach.  I am sure this will go to second edition and I hope that can be an area of focus.

I like the list of tools in the back of the book.  In my view the section on choosing a penetration testing vendor is worth the price of the book. I really wish I had read something like that years ago, I could have saved money and heartache.
1190752
Great book for anyone who's interested in learning about every day self-protection.  This book has a lot of information, but it doesn't feel burdensome or complicated.  It's accessible and easy to understand and really makes you think about worst-case scenarios in a way that you haven't previously considered them.  Lots of great information about fire safety, surviving plane crashes, situational awareness, how to determine if you are being followed, home security, travel safety, etc.  I really like that there is a companion website referred to throughout the book where you can watch videos of the escape and evasion techniques described in this book and you can even get some free personal security item's through the author's website.  As a former CIA officer, this author has alot to offer his audience.  It's not a complicated book and the information is fairly basic, but its enough to at least raise your awareness of potential threats and learn how to protect yourself from becoming a victim.  Get a copy of this book!  You will not regret it!
987759
This book will be extremely useful as a ready reference for a seasoned security professional or as a primer for a novice. This is the first security compendium to provide an easy-to-read explanation of the technical aspects of information security.

This book is a complete, technical guide that covers the details, principles, methods, and technologies of security systems. It also explains the practical applications and covers a number of topics critical for successful security design, implementation, and ongoing management.

This book will be an invaluable read for practitioners, managers and IT personnel - in fact for anyone considering, or involved in, implementing information security systems or practices. Security and financial administrators, computer science professionals, and systems developers will all benefit from an enhanced understanding of this ever growing aspect of technology and information management.
1764069
In the past, Ive recommended one particular book to new and aspiring security consultants, Security Consulting by Chuck Sennewald. After reading Michael Silvas book, Ive added his to the must read list as well. This book has taught me a few things, opened my eyes to other possibilities, and has reinforced so much that Ive learned in the five years since I stepped away from corporate America and started my consulting practice. Silvas book has accomplished the goal of supplementing Chuck Sennewald s book with additional advice and his own perspective. The book paints a very good picture of what its like to be a Security Consultant, both the challenges and the rewards, and shares a lot of very useful advice for establishing and growing a consultancy. The book is full of advice specific to security consulting and offers many examples of both Silvas successes and failures and shares details of his tried and true methods especially in the area of marketing. The practical how-to advice will benefit most anyone considering a career as a security consultant or currently practicing. I highly recommend this book written by one of the preeminent consultants of our time.
2592745
This is an excellent resource for cyber security professionals and those addressing cyber risk situations.  This is not really for a casual reader as it addresses some pretty advanced topics.  If you are a business that needs to set up cyber security safeguards, this will help you do that.  It strikes a good balance between plain English writing, while still exposing the reader to the necessary jargon.