Penetration testing a network requires a delicate balance of art and science. A penetration tester must be creative enough to think outside of the box to determine the best attack vector into his own network, and also be expert in using the literally hundreds of tools required to execute the plan. This second volume adds over 300 new pentesting applications included with BackTrack 2 to the pen tester’s toolkit. It includes the latest information on Snort, Nessus, Wireshark, Metasploit, Kismet and all of the other major Open Source platforms.

. Perform Network Reconnaissance
Master the objectives, methodology, and tools of the least understood aspect of a penetration test.
. Demystify Enumeration and Scanning
Identify the purpose and type of the target systems, obtain specific information about the versions of the services that are running on the systems, and list the targets and services.
. Hack Database Services
Understand and identify common database service vulnerabilities, discover database services, attack database authentication mechanisms, analyze the contents of the database, and use the database to obtain access to the host operating system.
. Test Web Servers and Applications
Compromise the Web server due to vulnerabilities on the server daemon itself, its unhardened state, or vulnerabilities within the Web applications.
. Test Wireless Networks and Devices
Understand WLAN vulnerabilities, attack WLAN encryption, master information gathering tools, and deploy exploitation tools.
. Examine Vulnerabilities on Network Routers and Switches
Use Traceroute, Nmap, ike-scan, Cisco Torch, Finger, Nessus, onesixtyone, Hydra, Ettercap, and more to attack your network devices.
. Customize BackTrack 2
Torque BackTrack 2 for your specialized needs through module management, unique hard drive installations, and USB installations.
. Perform Forensic Discovery and Analysis with BackTrack 2
Use BackTrack in the field for forensic analysis, image acquisition, and file carving.
. Build Your Own PenTesting Lab
Everything you need to build your own fully functional attack lab.

Download

Agile Software Engineering

Product Description

download

Software Abstractions: Logic, Language, and Analysis

Product Description
In Software Abstractions Daniel Jackson introduces a new approach to software design that draws on traditional formal methods but exploits automated tools to find flaws as early as possible.This approach—which Jackson calls “lightweight formal methods” or “agile modeling”—takes from formal specification the idea of a precise and expressive notation based on a tiny core of simple and robust concepts but replaces conventional analysis based on theorem proving with a fully automated analysis that gives designers immediate feedback. Jackson has developed Alloy, a language that captures the essence of software abstractions simply and succinctly, using a minimal toolkit of mathematical notions. The designer can use automated analysis not only to correct errors but also to make models that are more precise and elegant. This approach, Jackson says, can rescue designers from “the tarpit of implementation technologies” and return them to thinking deeply about underlying concepts.

Software Abstractions introduces the key elements of the approach: a logic, which provides the building blocks of the language; a language, which adds a small amount of syntax to the logic for structuring descriptions; and an analysis, a form of constraint solving that offers both simulation (generating sample states and executions) and checking (finding counterexamples to claimed properties). The book uses Alloy as a vehicle because of its simplicity and tool support, but the book’s lessons are mostly language-independent, and could also be applied in the context of other modeling languages.

download

Software Engineering for Internet Applications

Product Description
After completing this self-contained course on server-based Internet applications software, students who start with only the knowledge of how to write and debug a computer program will have learned how to build web-based applications on the scale of Amazon.com. Unlike the desktop applications that most students have already learned to build, server-based applications have multiple simultaneous users. This fact, coupled with the unreliability of networks, gives rise to the problems of concurrency and transactions, which students learn to manage by using the relational database system.

After working their way to the end of the book, students will have the skills to take vague and ambitious specifications and turn them into a system design that can be built and launched in a few months. They will be able to test prototypes with end-users and refine the application design. They will understand how to meet the challenge of extreme business requirements with automatic code generation and the use of open-source toolkits where appropriate. Students will understand HTTP, HTML, SQL, mobile browsers, VoiceXML, data modeling, page flow and interaction design, server-side scripting, and usability analysis.

The book, which originated as the text for an MIT course, is suitable for classroom use and will be a useful reference for software professionals developing multi-user Internet applications. It will also help managers evaluate such commercial software as Microsoft Sharepoint of Microsoft Content Management Server.

About the Author
Eve Andersson is Senior Vice President and Chair of the Bachelor of Science in Computer Science at Neumont University, Salt Lake City

Philip Greenspun, a software developer, author, teacher, pilot, and photographer, originated the Software Engineering for Internet Applications course at MIT. He is the author of Philip and Alex’s Guide to Web Publishing.

Andrew Grumet received his Ph.D. in Electrical Engineering and Computer Science from MIT and builds Web applications as an independent software developer.

download

Computational Fluid Dynamics in Fire Engineering: Theory, Modelling and Practice

Book Description
Engineers and professionals in the fire and combustion field need this book, the only dedicated title on the theory and practical application of computational fluid dynamics (CFD) tools and techniques to fire and combustion engineering

download

Mastering the Requirements Process (2nd Edition)

Written in an engaging style and relevant for any software analyst or designer, Mastering the Requirements Process provides a powerful and useful guide to defining more complete software requirements that lead to better software overall. It’s also filled with innovative advice.

The heart of this book is the authors’ Volere Requirements Process Model, a step-by-step guide to gathering your requisites. Throughout this book, the authors use this process to explicate a single case study–a system for a municipality that will optimize the de-icing of roadways during snowy weather. Along the way, the book provides a solid guide to identifying and refining requirements, both functional and nonfunctional (such as performance and ease of use).

download

Microsoft SharePoint 2007 Development Unleashed

Product Description

This is the most comprehensive, practical guide to building enterpriseclass applications with SharePoint 2007, ASP.NET 2.0, Visual C# 2005, and the Microsoft Office 2007 system. Microsoft SharePoint 2007 Development Unleashed is designed for every working .NET developer: both those with SharePoint experience and those new to SharePoint. The authors thoroughly introduce SharePoint 2007 as a development platform and offer in-depth, example-rich coverage of every significant tool for programmers–from “Features and Solutions” to list events, from user profiles to Web Parts. You’ll walk step-by-step through building each major type of SharePoint application. You’ll also find in-depth coverage of SharePoint 2007’s rich collection of built-in Web services, including services for building document workspaces, centralizing the management of Excel spreadsheets, ensuring security, and much more.

Download

Software Engineering

This book reviews several important technologies for software development with a particular focus on Web applications. Emphasis is given to underlying principles and basic concepts, rather than completeness. This text is designed for upper-division undergraduate and graduate courses in software engineering.

Download

Professional Microsoft SharePoint 2007 Development Using Microsoft Silverlight 2

Product Description
Silverlight is a cross-browser, cross-platform, and cross-device plug-in for delivering the next generation of .NET-based rich interactive applications (RIAs) for the Web; SharePoint is Microsofts portal development platform and the fastest growing server product at Microsoft. If you are seeking to leverage Silverlight 2.0 to optimize SharePoint 2007, you will find what you need in this advanced guide from a well-known author team of Microsoft insiders. The book shows you how to build integrated solutions step-by-step; how to integrate Silverlight applications with different SharePoint objects such as lists, Web parts, and others; and provides source code, so you can replicate and test the code on your own.

Download