The first book on deploying VoIP products from Nortel, the largest supplier of voice products in the world.

This is the only book you need if you are tasked with designing, installing, configuring, and troubleshooting a converged network built with Nortel’s Multimedia Concentration Server 5100, and Multimedia Communications Portfolio (MCP) products. With this book, you’ll be able to design, build, secure, and maintaining a cutting-edge converged network to satisfy all of your business requirements.
This book begins with a discussion of the current protocols used for transmitting converged data over IP as well as an overview of Nortel’s hardware and software solutions for converged networks. In this section, readers will learn how H.323 allows dissimilar communication devices to communicate with each other, and how SIP (Session Initiation Protocol) is used to establish, modify, and terminate multimedia sessions including VOIP telephone calls. The next sections introduce the reader to the Multimedia Concentration Server 5100, and Nortel’s entire suite of Multimedia Communications Portfolio (MCP) products. The following chapters of the book teach the reader how to design, install, configure, and troubleshoot the entire Nortel product line including coverage of i2004 IP Phones, PC Client, Personal Agent, Call Pilot, and Meet Me. The next section of the book details advanced and configurations and troubleshooting scenarios including wireless deployments. In the final chapter, you will learn to secure your entire multimedia network from malicious attacks.

Brian Contos has created what few security specialists can claim: a truly readable book about the threats to our businesses from insiders who know how to attack the critical components of modern business, the computers, applications and networks that make it all work. During the last fifteen years we have witnessed incredible strides in network centric business processes that have spawned the productivity of our workforce and the globalization of our supply chains. All of this progress is based on Information Technology advances that connect people and processes together to achieve more than our traditional approaches would have ever allowed… “Enemy at the Water Cooler is a must read for CIOs and security officers everywhere, but it is also part of the literature that CEOs and government leaders should read to understand how their businesses can be threatened by lack of attention to the fundamental IT infrastructure and its vulnerabilities to the insider threat.”—William P. Crowell, former Deputy Director of the National Security Agency (NSA)

Scientific american Sept 2006 special issue

PDF | 6.5MB

Bignum math is the backbone of modern computer security algorithms. It is the ability to work with hundred-digit numbers efficiently using techniques that are both elegant and occasionally bizarre. This book introduces the reader to the concept of bignum algorithms and proceeds to build an entire library of functionality from the ground up. Through the use of theory, pseudo-code and actual fielded C source code the book explains each and every algorithm that goes into a modern bignum library. Excellent for the student as a learning tool and practitioner as a reference alike BigNum Math is for anyone with a background in computer science who has taken introductory level mathematic courses. The text is for students learning mathematics and cryptography as well as the practioner who needs a reference for any of the algorithms documented within.

Wireless connectivity is now a reality in most businesses. Yet by its nature, wireless networks are the most difficult to secure and are often the favorite target of intruders. Some of the primary threats are the result of the following factors:

• Denial of service (DoS) and other network layer attacks
• Unauthorized access across the perimeter and within the organization Application layer intrusions and attacks, both from within and outside the network Extended connectivity through remote access and extranets
• An increase in unmanaged or ill-managed endpoint devices
• New applications like VoIP, instant messaging, and peer-to-peer

This book provides the busy network administrator with best-practice solutions address these threats and to maintain a secure and accessible wireless network. The book endorses the principle that the best strategy is to deploy multiple layers of security, each reinforcing the other. Yet it never strays from its emphasis on the practical; that any tool or methodology that is deployed must work reliably, allow sufficient access, and require a minimal amount of maintenance.

Reposted due to requests

· Determine What You Want to Be When You Grow Up (or at Least Get Older)
See how the InfoSec field has matured, and decide if this is the life for you.
· Social Engineering for Profit
Use both your people and research skills to perform reconnaissance on the InfoSec job market.
· Choose the Right Path
Learn what certifications, work experience, and education are required (or not) to land your dream job.
· There’s No Place Like Home…for a Test Lab!
Build a fully functional test lab and attack machine in your basement to fine-tune both your attack and defense skills.
· Learn the Laws of Security
Master the ten guiding principles of information security to outwit malicious hackers in the real world.
· Know Your Enemies
Identify and understand the classes of attack: denial of service, information leakage, regular file access, misinformation, special file/database access, remote arbitrary code execution, elevation of privileges.
· Feeling Vulnerable?
Navigate the dangerous waters of vulnerability disclosure from nondisclosure to full disclosure.
· Don’t Trip the Sensors
Use your l337 H4×0r skillz to assimilate into the workplace and hack the corporate ladder.
· Master Incident Response
Develop contingency plans to put out fires in the workplace without getting burned.
· Install Your Career Rootkit
Since you got there, you might as well stay there!

Combating Spyware in the Enterprise is the first book published on defending enterprise networks from increasingly sophisticated and malicious spyware. System administrators and security professionals responsible for administering and securing networks ranging in size from SOHO networks up the largest, enterprise networks will learn to use a combination of free and commercial anti-spyware software, firewalls, intrusion detection systems, intrusion prevention systems, and host integrity monitoring applications to prevent the installation of spyware, and to limit the damage caused by spyware that does in fact infiltrate their network. Combating Spyware in the Enterprise begins by examining the various types of insidious spyware and adware currently propagating across the internet and infiltrating enterprise networks. This section closely examines spyware’s ongoing transformation from nuisance to malicious, sophisticated attack vector. Next, the book uncovers spyware’s intricate economy and network of malicious hackers and criminals. Forensic investigations presented in this section of the book reveal how increasingly sophisticated spyware can compromise enterprise networks via trojans, keystroke loggers, system monitoring, distributed denial of service attacks, backdoors, viruses, and worms. After close examination of these attack vectors, the book begins to detail both manual and automated techniques for scanning your network for the presence of spyware, and customizing your IDS and IPS to detect spyware. From here, the book goes on to detail how to prevent spyware from being initially installed to mitigating the damage inflicted by spyware should your network become infected. Techniques discussed in this section include slowing the exposure rate; web filtering; using FireFox, MacOSX, or Linux; patching and updating, machine restrictions, shielding, deploying anti-spyware, and re-imaging. The book concludes with an analysis of the future of spyware and what the security community must accomplish to win the ware against spyware.

Wireless connectivity is now a reality in most businesses. Yet by its nature, wireless networks are the most difficult to secure and are often the favorite target of intruders. Some of the primary threats are the result of the following factors:

• Denial of service (DoS) and other network layer attacks
• Unauthorized access across the perimeter and within the organization Application layer intrusions and attacks, both from within and outside the network Extended connectivity through remote access and extranets
• An increase in unmanaged or ill-managed endpoint devices
• New applications like VoIP, instant messaging, and peer-to-peer

This book provides the busy network administrator with best-practice solutions address these threats and to maintain a secure and accessible wireless network. The book endorses the principle that the best strategy is to deploy multiple layers of security, each reinforcing the other. Yet it never strays from its emphasis on the practical; that any tool or methodology that is deployed must work reliably, allow sufficient access, and require a minimal amount of maintenance.