1. Home
  2. Networking
  3. Network security assessment

Audience

This book assumes you are familiar with IP and administering Unix-based operating systems, such as Linux or Solaris. A technical network administrator or security consultant should be comfortable with the contents of each chapter. To get the most out of this book, you should be familiar with:

  • The IP protocol suite, including TCP, UDP, and ICMP

  • Workings of popular Internet network services, including FTP, SMTP, and HTTP

  • At least one Unix-like operating system, such as Linux or a BSD-derived platform

  • Configuring and building Unix-based tools in your environment

  • Firewalls and network filtering models (DMZ segments, bastion hosts, etc.)



    		Network Security Assessment
    		Foreword
    		Preface
    		Recognized Assessment Standards
    		Hackers Defined
    		Organization
    		Audience
    		Mirror Site for Tools Mentioned in This Book
    		Using Code Examples
    		Conventions Used in This Book
    		Comments and Questions
    		Acknowledgments
    		Chapter 1. Network Security Assessment
    		Chapter 2. The Tools Required
    		Chapter 3. Internet Host and Network Enumeration
    		Chapter 4. IP Network Scanning
    		Chapter 5. Assessing Remote Information Services
    		Chapter 6. Assessing Web Services
    		Chapter 7. Assessing Remote Maintenance Services
    		Chapter 8. Assessing FTP and Database Services
    		Chapter 9. Assessing Windows Networking Services
    		Chapter 10. Assessing Email Services
    		Chapter 11. Assessing IP VPN Services
    		Chapter 12. Assessing Unix RPC Services
    		Chapter 13. Application-Level Risks
    		Chapter 14. Example Assessment Methodology
    		Appendix A. TCP, UDP Ports, and ICMP Message Types
    		Appendix B. Sources of Vulnerability Information
    		Colophon