Internet Books
Related Subjects: Servers Web
More Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250


A no none-sense guide to MPLS VPNs Security!!!Review Date: 2005-10-10
Basic Background InformationReview Date: 2005-07-26
The second chapter continues this analysis through the design of a threat model. Just what is it that you want protection against?
The chapters that follow go into the design of a secure system, followed by some case studies that are used to illustrate the theoretical discussion points from the previous chapters.
It would be nice if the world out there were a friendlier place, but it isn't. If it's your job to set up a secure system using MPLS, this book will provide the basic background information you need before you start entering parameters into the various security devices.
The definitive guide to MPLS Network securityReview Date: 2005-07-27
A definitive Guide on MPLS VPN Security from the MastersReview Date: 2005-08-29
by Michael H. Behringer, Monique J. Morrow ISBN 1587051834
As Multiprocotol Label Switching (MPLS) is becoming widely deployed for providing virtual private network (VPN) services. Security becomes a major concern for companies planning to migrate from the legacy VPN's to MPLS VPN's. This book provides an indepth look at what are the real security issues that both service providers providing MPLS VPN's and companies utlizing such services face. The authors provide a clear understanding of how the MPLS VPN's work differently from other VPN technologies.
The book is divided into four parts MPLS VPN and Security Fundamentals form Part One. The first part of the book provides an excellent overview on the three basic components of security: the architecture, design and operations and defines the "zones of trust" for an MPLS VPN environment. It provides an excellent Security Reference Model for MPLS VPNs. The various threats to a VPN are broken down into parts for better understanding, like threat, intrusion, Denial of Service against a VPN. Threat against an Extranet site. Threats against the core, and from within a Zone of trust.
Part Two of the book provides an analysis of Advanced MPLS VPN Security Issues like VPN Seperation (Address Space and traffic), Robustness against attacks (where and how), protection against spoofing, Specific Inter-AS considerations and comparisons. And other issues not addressed by the MPLS Architecture. It examines in detail Secure MPLS VPN designs and shows how to design a DOS resistant network and the tradeoffs between DOS resistance and network cost. The security recommendations provide tips on general router security, basic templates and ACL Examples. CE-Specific router security and topology design considerations. LAN Security Issues. CE-PE routing Security Best Practices. IPSec both CE to CE and PE to PE. And a comprehensive checklist for securing Core and Routing.
Part Three provides practical guidelines to MPLS VNP Security and shows how IPSec complements MPLS. It explains the deployment of IPSec on MPLS and use of other encryption techniques. It underlines the importance of security of MPLS Layer 2 VPNs and the various generic Layer 2 security considerations. The section ends with providing a plan for the operation management and maintenance of a MPLS core. It deals with the secure management of CE devices, management of VRF and VRF details.
Part Four provides deployment examples and lessons learned, highlighting theoretical discussion points from the previous chapters. It also provides various scenarios for internet access and points out security considerations for each example.
The coauthor Michael H. Behringer is an active member of the IETF and has published work on MPLS VPN security since 2001.
The coauthor Monique J. Morrow (CCIE # 1711) is active in both IETF and ITU-T SG 13 with a focus on OAM. She is currently engaged in MPLS OAM standards development.
I feel this book would be extremely useful for security and operations staff of enterprises that deploy MPLS or subscribe to a service based on MPLS.
I give this book 5 stars on a scale of 5, 5 being the highest. I strongly recommend this book.
Niloufer Tamboly, CISSP

Used price: $14.98

EXCELLENT RESOURCEReview Date: 2008-07-24
Excellent Book!Review Date: 2008-05-12
Extermely engaging book on Multichannel MarketingReview Date: 2008-05-12
As an online marketer myself, I found this book extremely engaging and useful as we delve into combining our online and offline marketing efforts.
Since the only way to prove that our marketing efforts are paying off is measure, measure, measure, the measurement and metrics section of this book gave me a good grounding on what I need to do in terms of metrics.
Overall, it's a great book, especially if you are looking at multiple channels to achieve your marketing goals.
This is an IMPORTANT book....Review Date: 2008-05-10
FINALLY, there is a book that meets MY standards on both the theory and practice of multichannel marketing. Akin's book "Multichannel Marketing: Metrics and Methods for On and Offline Success" provides unique insight and understanding to help marketers either begin the process of executing more complete multi-channel marketing efforts, or refine existing programs.
What I found especially compelling about Akin's book was the very natural and organic progression within each chapter. Chapters open with a quick summary of a business challenge/opportunity. His descriptions (often complimented by case studies) are direct and to-the-point...easily consumed by the multi-channel newbie. As he digs deeper into each topic he offers perspective that even the most seasoned CMOs will find actionable nuggets of wisdom in (I LOVED the Chapter 6 on Measuring Lift Between On-line and Offline).
In closing - is there value in Akin's first book? No matter what your currently level of expertise is...this book will make you a better marketer.
Groundbreaking book on multichannel marketing metrics!Review Date: 2008-05-10
As a Web Analyst and an online marketer I look forward to adding the methods presented in the book to my repertoire. The jargon alerts alone are worth the read.
The book is very well written and should be required reading for marketers and analysts on the web. The interaction between online and offline is becoming more and more important, and companies must understand how to integrate all their marketing efforts.
I warmly recommend reading this book.

Used price: $7.98

A great read for any CEO or employee finding themselves now in the trenches of a web 2.0 companyReview Date: 2008-02-04
I actively refer this book to several friends who have recently started Web 2.0 companies and who are experiencing the same issues Julia covers regarding starting and harnessing an online community. Personally, I have been able to apply similar lessons to my company and to several conversations where insight to the future comes from understanding the roots of the past pioneers such as AOL, especially from the perspective from the trenches.
Do you know what AOL's first vision was and why it failed? Julia covers that, among other topics, with pre-AOL interviews of the early, early days...
Great Writing by a Great WriterReview Date: 2001-12-24
A Real Insiders ViewReview Date: 2001-07-24
Kara Swisher's "AOL.COM" told the story from the executive level. Julia's "My Life At AOL" tells it from the perspective of the regular employees who made the service run on a day to day basis. It's a look at things that happened when AOL was a wacky little company; very different from today's media behemoth.
An Insider's TaleReview Date: 2001-05-24

Used price: $4.64

A great financial guide for personal financeReview Date: 2007-11-06
Phenomenal Resource! Review Date: 2007-10-09
A Must Have! Fantastic Book & Even Better AuthorReview Date: 2007-10-01
A personal finance blog disguised as a book, but well worth the read!Review Date: 2007-10-10
This was a nice little book written by a young professional who works as a wealth manager. It's a personal finance or young person's financial planning book. I liked the way the book presented the material in clear and digestible snippets. I read a book not too long ago that was similar in format. See Blogging and Podcasting (ISBN: 1419584359). In both books the authors promote themselves through blogging. And instead of writing their books as a separate and distinct activity as compared to their blogs, they lift a lot of their content from their blogs and spruce it up a little before calling it a book.
This book has 27 chapters divided up into the following four sections:
1. First perspectives on money (chapters 1-5)
2. Building wealth requires planing (chapters 6-13)
3. Living in a financial world (chapters 14-21)
4. Think long-term about money management (chapters 22-27)
The chapters are short which is why I equate them to spruced-up blog entries. And the number of chapters is large, another reason this book has the feel of a blog rather than something that was put together originally as a book.
The book is well-written and easy to read and follow. It cites much of its content to Web sites and links that can be found online. If you want to learn about some of the things the Internet has to offer regarding personal finance and financial planning, then I highly recommend this book. If you are just wanting to familiarize yourself with personal finance and financial planning, then this would be a nice book to read, too. However, it's not a treatise on the subject. 5 stars!

Used price: $6.24

This one isn't like the others...Review Date: 2004-04-19
A must read for any WinForms .NET DeveloperReview Date: 2004-03-02
This is more than a resource book. The first half is devoted to getting you up and running with building WinForms apps. The 2nd half is an incredible reference, one I turn to almost daily.
If you plan to use or are using .NET WinForm, please, do yourself a big favor, buy this book and leave it on your desk
An API Reference especially for DataGrid using ADO.netReview Date: 2003-09-17
DotNet provides for creating dynamic Excel-like forms for ASP.NET html. Additional form paging provides for DB presentation similar to Yahoo and eBay searches, which is a familiar and intuitive format. DotNet provides these DataGrid forms with the DotNet Forms API. The API architecture is listed in the last two-thirds of this book, which is an inch and a half thick.
While the authors claim to include a "very fast-paced" tutorial (p1) in the first third (313 pgs) of the book, the DataGrid portion is a mere 6 pages (p307-312), very steep indeed! I'd highly recommend its combined use with another MS Press book by Dino Esposito (0-7356-1578-0) which devotes about half of his book to DataGrid reports and code examples. Another is Jesse Liberty's O'Reilly book on VB.Net (0-596-00438-9) which has one chapter devoted to ADO.net (34pgs).
The publisher include a MS Visual Studio.Net Add-in on the accompanying CD which has the text of the book as integrated help files, 1.7MB MSI files for VS.Net 2K2 and 2K3. Appears a tad bit small? I have not tested the usefulness of the claimed dynamic integration of the O'Reilly Help files along with MS Help during coding process within VS. It appears that this is the initial product enhancement from this publisher. I wonder if an annotatable PDF file of the book would be more useful; at least this would be in a separate window. This tome was read at a local library.
At a local SQL Server Users Group meeting, a new technology that will embellish on the DataGrid and Forms was discussed and demoed. It is the forthcoming SQL Server 2K Reporting Services that will be a low/no cost add-on for SQL 2000 Server and authoring with a Visual Studio.Net 2003 download. It currently is in beta and will be released in 4Q03. It appears to be XML based and production reports can be rendered for browser, printer, PDF, and TIFF output. What a seemingly great idea.
Overall, this detailed 469-page reference on the DotNet Forms API appears needed for the programmer, although this is probably duplicates what's available on a MSDN subscription CD somewhere. The appendix includes another 69-page API term cross-reference and a 23-page index.
A must read for WinForms developersReview Date: 2004-03-01
This is more than a resource book. The first half is devoted to getting you up and running with building WinForms apps. The 2nd half is an incredible reference, one I turn to almost daily.
If you plan to use or are using .NET WinForm, please, do yourself a big favor, buy this book and leave it on your desk.

Used price: $49.99

Very readable, insightful, and much-needed bookReview Date: 2005-01-06
he has now distilled his knowledge in this very readable, insightful, and much-needed book." -- Yukuen Lai
offers 15 design principlesReview Date: 2006-01-10
One key motivator mentioned in the text is to defend against network attacks. For this, it helps to be able to quickly analyse as many IP packets as possible. Perhaps an unfortunate commentary on today's Internet, inasmuch as this will be the most important reason for some of you to get this book.
great book - a must readReview Date: 2005-04-22
excellent bookReview Date: 2005-01-28
Its probably the best networking book I've ever read....and I read a lot.


Network Security Architectures Review Must HaveReview Date: 2004-08-02
Under the section titled "security policies and operations lifecycle", I found the introduction very helpful. I like the way the topics are broken down into business needs, risk analysis, security policy development, followed by the operations lifecycle that included information on system monitoring maintenance, compliance checking, and incident response.
Under the section titled "what is a security policy", I also found this section helpful and the simple statements describing a security policy as a formal statement of rules where people are given access to an organizations technology information assets, was very concise and understandable.
Under the section titled "security policy enforcement considerations", I found it interesting that this was broken into several different sections of real-time technology enforcement, passive technology assisted compliance checking, non-technical compliance checking, and contractual compliance checking. This little section made policy enforcement crystal clear while providing a practical outline for policy enforcement.
Another helpful feature of this book was on page 45 where an outline of best practice steps are given. These four steps to building a best practice for security provided a decent roadmap for developing a practical security policy.
Under the section "secure networking threats", the descriptions provided for the attack process and attacker types was very enlightening. I also found it interesting to read about the Script Kittie, Crackers, and Elite network attackers.
The section also described vulnerability types as software, hardware, configuration, policy, and usage, which I also found to be a great outline and organized structure for understanding where these vulnerabilities lie.
Also in this section of "secure networking threats" on the summary page on 115 I found the attack summary table with scoring to be a very ingenious tool. This table breaks down the following attack elements and rates them according to detection difficulty, ease-of-use, frequency, impact and, overall rating. The following attack elements were included in this table: Buffer overflow, Identity spoofing, war dialling/driving, virus/word/Trojan horse, direct access, remote control software, probe scan, rootkit, Sniffer, application floating, udp spoofing, rouge devices, Web applications, data scavenging, man in the middle, distributed denial of service, TCP spoofing, Arp redirection spoofing, TCP Syn flood, IP spoofing, IP redirection, Smurf, transport redirection, MAC Flooding, Mac spoofing, network manipulation, and STP redirection. All in all I felt this was a very comprehensive list.
In the section titled "general design considerations", this section provided a fantastic overview of how to control physical access to facilities and the different methods for doing so including lock and key access, key card access, and key card access with TurnStyle. The layer 2 security considerations section covered a great bit of detail concerning general Protocol considerations as well as the Cisco specific protocol considerations.
In the chapter "Identity design considerations" the descriptions were also very helpful and understandable. This section outlined the basic foundation Identity concepts describing the differences between device and user Identity. On page 324 a great outline of the chain of events for Identity and authentication, authorization, and accounting is outlined. This step-by-step explanation was very helpful in understanding this process.
In chapter 14 the "campus security design" section, a very good explanation of what campus networks are made up of was given on page 536. This portion of the book also describes the campus trust model and expected threats. The threat mitigation and Identity considerations were also outlined in a very simple to follow way.
On page 541 the network design considerations for the campus are very well outlined with layer 2 considerations including explanations of stateful versus stateless ACL's and L3 versus L4 Filtering.
Overall this book is exceptional in the way it describes complex information and breaks down this information into simple to understand concepts. The applied knowledge questions at the end of each chapter were also very helpful along with the appendix B where the answers to these questions can be found.
This book is an outstanding education tool as well as a reference bible for network security.
Recommended for professional infosec architectsReview Date: 2004-06-26
- Good practice network security design guidelines ('axioms')
- Purpose and definition of network security policies
- Good advice on designing the network security system (i.e. the overarching network security architecture into which individual network devices must fit) from the ground up (i.e. physical security to application security, OSI layers 1 to 7)
- Specific technical advice on configuring network devices for
security ('hardening')
- Technical descriptions of the vulnerabilities in network services, accompanied by advice on how to secure them
- Typical design considerations for network perimeter ('edge') security, internal network ('campus') security and remote access (teleworker) security
- Secure network management and network security management (compared and contrasted in 40 pages)
I appreciate the author's emphasis on architectural security design but he also succeeds in giving a reasonably comprehensive introduction to more specific elements of network security. This is not a hand-waving helicopter-overview of the topic but a far more substantial tome. At the same time, the clear writing style, simple diagrams and nuggets of practical advice make it an enjoyable read.
The book is liberally sprinkled with URLs to useful additional resources and the author maintains a website with up-to-date links and a sample chapter (www.seanconvery.com).
Each chapter concludes with exam-style review questions (with answers) and further questions intended to stimulate the reader to think about the material in their local organizational context. The topic almost inevitably involves loads of acronyms so thankfully a succinct glossary is included.
Three network security design examples (mini case studies) towards the end of the book demonstrate the techniques previously described. These are good for getting readers to practice thinking like a real network security architect.
Despite being published by Cisco Press, the book is not specifically about Cisco products. However, the examples and several of the security features are Cisco-specific. Given the market presence of Cisco, this is not a serious drawback but a little more balance would have added credibility (e.g. security vulnerabilities in LEAP, Cisco's wireless LAN authentication protocol, are not described but merely hinted-at).
All in all, this book has already proved its worth to me. I read it cover-to-cover in a couple of days and have already started using it as a reference. Recommended reading for those with a professional interest in information security architecture.
Cisco Security for Network ArchitectureReview Date: 2004-12-02
A close look at the book's table of contents will point out different areas that any Network Engineering individual from the Junior Administrator to the Senior Architect needs to be knowledgeable in. Sean examines policy, threats and the technologies available, he details how to harden devices and describes items that need to be considered in designing either new networks or enhancing existing ones. For these reasons alone this book is necessary for anyone that manages any portion of a computer network. This book offers far more than an education of network security. It is clearly designed not only to educate individuals, but provide a single reference for all network security areas as well.
Like many Cisco Press books, "Network Security Architectures" chapters are divided into three sections --: an introduction, the body, and finally a summary. It is these summary sections that help the most. In For example, in Chapter 6 on pages 262 thru 264, the concept of Design Consideration is summarized with charts. Where individual summaries appear light or limited, the book enhances the information covered in a section called "Applied Knowledge". This section helps individuals quickly implement what is covered in extreme detail in the chapter. Don't just look at the summary and applied knowledge sections, because this would not do all the hard work Sean placed in the book justice. For instance, in Chapter 5 on Hardening Devices, Sean provides clear examples on how to configure devices for security and hardening. This topic alone has not similarly covered since O'Reilly's book on "Hardening Cisco Routers" and that one did not go to the level of how to configure the devices fully.
As anyone that is familiar with Cisco Technology and Cisco Systems knows, they routinely publish various "SAFE" documents on topics. This book takes input from those documents, combining them with other both real world examples and theory to provide a greater combined presentation. Like any Cisco documentation this book can either be read in its entirety from cover to cover or only the sections that are needed now. But as you read the book you will realize that while "SAFE" documents focus on key issues, this book details not only the issues and the possible alternatives, but provides reasoning for implementing the recommendations in clear English. Convery's book is both an excellent resource and a great guide. Its ability to present both the Cisco and the real world philosophy on network architecture is critical for all that work in this arena.
As I mentioned previously Convery, uses the Cisco "SAFE" documents as guide points, but those are only detailed references. His book takes them to the next logical level and as such I could spend hours and pages detailing all the other reasons someone should acquiring a copy of this book, but the key reason I believe is that it is a clear consolidated source to design, implement and support a secure and highly available network. But the simple fact is in this day and age with more and more Viruses, Worms, Trojan horses, Network Probe attacks and numerous other problems in the growing Internet can anyone not afford to plan a "SMART" and "SAFE" network architecture? That is the real question that should drive someone to consider this book for there library and refer to it on a regular basis. I know I have already.
I highly recommend this excellent reference book for networking and security practitioners in any size environment. The investment will save time and money, even if only a few of the recommendations are implemented. You will find yourself referring to it frequently.
Network Security Design Must HaveReview Date: 2004-06-01
Raymond Santini CCIE# 12315

No nonsense helpful guideReview Date: 2003-02-26
I found the figures and troubleshooting tips to be especially helpful. In particular, showing how to recover when my DSL provider goes on the fritz (which, unfortunately does happen from time to time).
I highly recommend this book for readers looking for a practical, no nonsense, easy to follow guide for setting up home and small office networks and safely and securely connecting them to the internet.
Excellent "How To" BookReview Date: 2003-01-23
This Book Enables You To Overcome The ObstaclesReview Date: 2003-01-22
High Ranking from a NoviceReview Date: 2003-01-20
The book gave me a high level of understanding of the internet and was easy to follow.I highly recommend this book to any novice.

Much better than the first oneReview Date: 1999-12-08
Much better than the first editionReview Date: 1999-10-09
Great improvementsReview Date: 2000-02-19
Creative, fun and challengingReview Date: 1999-10-23

Used price: $0.01

Excellent handbook for NetWare 4.x administratorsReview Date: 1998-10-29
Essential tool for Novell NetworksReview Date: 1997-12-28
Great resource for IntranetWareReview Date: 1997-08-12
Invaluable ReferenceReview Date: 1999-12-14
Related Subjects: Servers Web
More Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250
Part I focuses on MPLS VPNs and network security fundamentals, upon completion of this part you are not only up to speed with the key security concepts for analyzing MPLS network scenarios and where security needs to be implemented (i.e., zones of trust) but also the complete threat model for it which even discusses on securing NOC.
Part II introduces you to advanced concepts of MPLS VPN security, i.e., Inter-AS, Carrier's Carrier (CsC) architectural security. Authors do a good job of keeping in check the security issues which are independent of MPLS and need to be solved separately. They also make it very clear that security is an important network design aspect and how some design decisions can make an entire network insecure. Chapter 5 is mostly a re-hash of basic network security fundamentals in Cisco IOS feature set.
Part III walks you through the practical guidelines of how IPSec complements MPLS and security of Layer 2 VPNs and concludes with how you can effectively operate a secure MPLS VPN core. Authors make it clear that both technologies work together very well, but before considering IPSec into MPLS, one should clearly outline what are the goals (basically when to use PE-to-PE versus CE-to-CE encryption etc.).
In Part IV, the chapter I like most is the "case studies" - it provides use cases, application examples, and best practices guidelines for the key concepts discussed in the whole book.
This book discusses security in the context of MPLS VPNs Security and other related aspects (like Internet access within a VRF, Extranet or common services etc.). Both authors are very well known at IETF and Distinguished engineers at Cisco Systems. Their experience in the areas of network security and attack mitigation shines throughout the book.
Overall, I strongly recommend this book to all network security engineers as MPLS (due to its inherent advantages and applications) is gaining momentum not only in the service provider space but also in the enterprise market segment.