Vickie Nelson
Documents Room Librarian
vmn@uoregon.edu
Exploiting Software: How to Break Code. Greg Hoglund. Addison-Wesley, 2004.
Hoglund describes the attack strategies most commonly used to search for holes
in your software and exploit them. Find out how to fix what's wrong
now, and learn ways to avoid future problems.
Hardening windows. Jonathan Hassell. Apress, 2004.
Hassell presents a quick checklist-style reference of 145 suggestions to help
system administrators harden Windows NT, 2000, XP, or Server 2003, and includes
tips on the endless task of patch management.
Network Security Assessment. Chris McNab. O'Reilly, 2004. Former hacker Chris McNab shows network administrators how to search for vulnerabilities in their networks just the way a determined intruder would.
Security Warrior. Cyrus Peikari and Anton Chuvakin. O'Reilly, 2004.
The words "Know your Enemy" float over the title of this in-depth
book on security, which is divided into four major sections: Software Cracking
(including reverse engineering), Network Stalking, Platform Attacks, and Advanced
Defense.
The Shellcoder's Handbook. Jack Koziol, David Litchfield, Dave Aitel,
and others. Wiley, 2004.
Several contributors to BugTraq, the vulnerability tracking mailing list, share
knowledge and insights to improve your penetration testing skills and help
you find—and close—security holes.
Stealing the Network: How to Own the Box. Ryan Russell. Syngress, 2003.
Russell uses first-person stories that focus on various kinds of network
attacks to give readers a sense of how intruders think, what software and methods
they use, and techniques of tracking and repelling them.