Professional Books
Related Subjects: Valets News and Media Personalities Wrestlers Puroresu Promotions
More Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250
Used price: $5.00

Great for students!Review Date: 2008-08-20
One of the best I've readReview Date: 2006-03-16
Informative, but hard to readReview Date: 2003-07-08
Each edition of this book just gets better and better!Review Date: 2000-06-03

Used price: $10.25
Collectible price: $22.95

Devoted Steeler FanReview Date: 2000-05-03
Devoted Steeler FanReview Date: 2000-05-03
Devoted Steeler FanReview Date: 2000-05-03
The Christmas Present of the Year for sports lovers.Review Date: 1998-11-11

Used price: $1.16

ExcellentReview Date: 1998-08-04
The power of questionsReview Date: 2004-02-02
I have to admit, I wasn't too excited about my life at first but once I started asking myself, "What could I be excited about" I found reasons to be excited and that led to taking action.
I also enjoyed the interview with Barbara DeAngelis. Great stuff!
For Barbara De Angeles fans and people who want LOVE!Review Date: 1999-02-14
What would it be like if you created a set of
POWER QUESTIONS that could instantly change your life?
The interview with De Angeles will provide the listener with an insight into her drive as a relationship expert.
mind powerReview Date: 1997-02-06


A great book on applied security visualizationReview Date: 2008-09-24
In the intro, the author accurately scopes the book to operational security visualization. The book is deeply applied: there's a tremendous number of graphs and the data which underlies them. Marty also lays out the challenge that most people know about either visualization or security, and sets out to introduce each to the other. In the New School of Information Security, Andrew and I talk about these sorts of dichotomies and the need to overcome them, and so I really liked how Marty called it out explicitly. One of the challenges of the book is that the first few chapters flip between their audiences. As long as readers understand that they're building foundations, it's not bad. For example, security folks can skim chapter 2, visualization people chapter 3.
Chapter 1, Visualization covers the whats and whys of visualization, and then delves into some of the theory underlying how to visualize. The only thing I'd change in chapter 1 is a more explicit mention of Tufte's small multiples idea. Chapter 2, Data Sources, lays out many of the types of data you might visualize. There's quite a bit of "run this command" and "this is what the output looks like," which will be more useful to visualization people than to security people. Chapter 3, Visually Representing Data covers the many types of graphs, their properties and when they're approprite. He goes from pie and bar charts to link graphs, maps and tree maps, and closes with a good section on choosing the right graph. I was a little surprised to see figure 3-12 be a little heavy on the data ink (a concept that Marty discusses in chapter 1) and I'm confused by the box for DNS traffic in figure 3-13. It seems that the median and average are both below the minimum size of the packets. These are really nits, it's a very good chapter. I wish more of the people who designed the interfaces I use regularly had read it. Chapter 4, From Data to Graphs covers exactly that: how to take data and get a graph from it. The chapter lays out six steps:
1. Define the problem
2. Assess Available Data (I'll come back to this)
3. Process Information
4. Visual Transformation
5. View Transformation
6. Interpret and Decide
There's also a list of tools for processing data, and some comparisons. Chapter 5, Visual Security Analysis covers reporting, historical analysis and real time analysis. He explains the difference, when you use each, and what tools to use for each. Chapter 6, Perimeter Threat covers visualization of traffic flows, firewalls, intrusion detection signature tuning, wireless, email and vulnerability data. Chapter 7, Compliance covers auditing, business process management, and risk management. Marty makes the assumption that you have a mature risk management process which produces numbers he can graph. I don't suppose that this book should go into a long digression on risk management, but I question the somewhat breezy assumption that you'll have numbers for risks.
I had two major problems with chapter 8, Insider Threat. The first is claims like "fewer than half (according to various studies) of various studies involve sophisticated technical means" (pg 387) and "Studies have found that a majority of subjects who stole information..." (pg 390) None of these studies are referenced or footnoted, and this in a book that footnotes a URL for sendmail. I believe those claims are wrong. Similarly, there's a bizarre assertion that insider threats are new (pg 373). I've been able to track down references to claims that 70% of security incidents come from insiders back to the early 1970s. My second problem is that having mis-characterized the problem, Marty presents a set of approaches which will send IT security scurrying around chasing chimeras such as "printing files with resume in the name." (This because a study claims that many insiders who commit information theft are looking for a new job. At least that study is cited.) I think the book would have been much stronger without this chapter, and suggest that you skip it or use it with a strongly questioning bias.
Chapter 9, Data Visualization Tools is a guided tour of file formats, free tools, open source libraries, and online and commercial tools. It's a great overview of the strengths and weaknesses of tools out there, and will save anyone a lot of time in finding a tool to meet various needs. The Live CD, Data Analysis and Visualization Linux can be booted on most any computer, and used to experiment with the tools described in chapter 9. I haven't played with it yet, and so can't review it.
I would have liked at least a nod to the value of comparative and baseline data from other organizations. I can see that that's a little philosophical for this book, but the reality is that security won't become a mature discipline until we share data. Some of the compliance and risk visualizations could be made much stronger by drawing on data from organizations like the Open Security Foundation's Data Loss DB or the Verizion Breaches Report.
Even in light of the criticism I've laid out, I learned a lot reading this book. I even wish that Marty had taken the time to look at non-operational concerns, like software development. I can see myself pulling this off the shelf again and again for chapters 3 and 4. This is a worthwhile book for anyone involved in Applied Security Visualization, and perhaps even anyone involved in other forms of technical visualization.
The reference book about Security Visualization - a topic you must dig in.Review Date: 2008-09-10
The best sentence (unfortunately it is not an image ;) that describes SecViz comes from the author:
A picture is worth a thousand log entries.
This is a great book that joins two separate worlds, visualization and information security (infosec). The first chapter is an excellent introduction to the human perception system, its basic principles, and how we analyze, discern, and assimilate information. It is an eye opener for those new to the field. Chapter two is similar from an infosec perspective, and summarizes the main challenges and data sources, such as packet captures, traffic flows, and firewall, IDS/IPS, system, and application logs. The third chapter details different graph properties and chart types, including some open-source and online tools for chart and color selection. Although we (infosec pros) are familiarized with link graphs to represent relationships between botnet members or hosts, the book provides a whole set of charts for different purposes; one of the most useful types, and we are not very used too it in the security field, is treemaps. The chapter includes a really useful table to select the right graph based on the purpose of the analysis and the data available.
Then, the previous chapters are smoothly mixed together through a reference methodology that defines what is the problem to solve, and the process to manipulate the available data and generate a (or set of) graph(s) that allow gathering relevant conclusions and answers. The methodology is complemented with an introduction to the standard Unix-based text processing tools (grep, awk, Perl, etc). This methodology is later on applied, with a strong hands-on and how-to spirit, to an extensive set of common security use-cases, such as the perimeter threat, compliance, and the insider threat.
The perimeter chapter offers a deep insight into common attack scenarios, such as worms, DoS or anomaly detection, and operational tasks, like firewall log and ruleset analysis, IDS tuning, or vulnerability assessments. I could never forget how useful were SecViz techniques for anomaly detection on a huge DNS-related incident I was involved about 5 years ago. Thanks to the performance and statistical graphs we had available at that time, we were able to easily identify and solve a very complex and critical security incident.
When I saw this chapter included a wireless section I got really excited due to personal interest. However, I was disappointed as it was just a couple of pages. I think it could be extended to gather a whole set of useful information about complex wireless attacks and client and access points relationships, just by inspecting the different 802.11 management, control, and data frames, and even radio-frequency signals (from a spectrum analyzer). SecViz opens the door to a whole new wireless research area!
The compliance chapter offers a whole methodology to check and manage regulations, control frameworks, auditing, and risk monitoring and management from a visual perspective.
The same applies to the insider threat chapter, as it provides an impressive framework, not only visualization-based, to deal with malicious insiders. It is based on setting up scores for certain behaviors and activities (precursors), generating lists of suspicious candidates, and apply thresholds to accommodate exceptions. It also contains an extensive and directly applicable precursor list at the end to detect suspicious insider activities.
Finally, the book contains a whole chapter, full of references and comparison tables, of open-source and commercial visualization tools and libraries that allow the reader to select the appropriate tool for specific tasks and scenarios.
Although the book hands-on component is very significant, with lots of detailed examples of commands, scripts, and tool options to generate the different graphs, I would have liked to see a thorough usage of the how-to portions, as for some sections there are no specific details about how the graphs have been generated. The book layout makes it the perfect candidate to become a fully interactive technical book. I would suggest to add (for a 2nd edition ;)) practical sections to each chapter where the reader could reproduce all the steps discussed. The book CD is the perfect tool to provide the reader with all the (sanitized) data sets and logs used to generate the graphs, and even allow to include some challenges where the reader needs to analyze the data and answer some questions after generating the appropriate graphs.
To sum up, this book is a mandatory reference for anyone involved in the operational side of infosec, doing intrusion detection, incident handling, forensic analysis, etc, and it can be applied to both, historical analysis and real-time monitoring. Additionally, I found it useful too for auditing and pen-testing professionals, as it provides great tips to generate relevant and efficient graphs for the associated reports.
The accompanying DAVIX Live CD is an excellent resource to start applying the techniques covered throughout the book through open-source tools, SecViz is the Web portal to expand your knowledge on this topic, and AfterGlow is (one of) the most relevant SecViz open-source tools.
An excellent combination of informative graphs, security scenarios, and efficient one-line perl parsersReview Date: 2008-08-30
At many points ASV deals with custom data parsing with invocations of clever one-line perl commands, and being a perl hacker myself, these examples are of particular interest.
The discussion in ASV is firmly grounded computer security, and many important security questions are raised along with motivating examples. For instance, a nice example is given for visualizing all outbound connections made from a laptop and differentiating these connections based on whether they are sent over the Tor network for strong anonymity. Additional examples include using visual techniques to detect outliers, combining multiple data sources, using visual aids to assist with regulatory compliance (by quickly conveying meaningful security data to auditors), and much more. One graphing type, invented by Ben Shneiderman, is the Treemap and several examples of its usage are presented. While Treemap graphs are perhaps not intuitively obvious, ASV makes a strong case for why they should be included within your visualization arsenal. A particularly good example is presented in Chapter 6 on using Treemap graphs to visualize vulnerability data provided by Nessus.
Although I'm not an expert in visualization, I have worked in the field of computer security for over ten years, and have written books on the subject (concentrating on intrusion detection systems and firewalls). I gave ASV five stars because it arms the reader with the knowledge required to produce custom visualizations that may not be addressed by any particular tool. This is much more powerful than presenting some specific software and associated (fixed) parser. Security is a process, and ASV provides a foundation for the effective inclusion of visualization techniques in the constant fight to secure computing systems and networks.
make a graph to analyse a lot of dataReview Date: 2008-08-14
So what display methods are there? Well, the text goes over principles known to graphics artists, but perhaps not as well bruited amongst sysadmins. Basically, you have a two dimensional area, like a computer screen, in which to show data. By judicious use of colour, shape and movement [and some other means] you can extend the effective dimensionality of the graph.
The book talks about various graphs. Describing the limitations of the simple pie, bar and line graphs. More versatile are the scatterplot and cluster graph. The latter lets you show a "graph", in another meaning of the latter word as a connected [perhaps via directed arcs] set of nodes.
The example data are drawn from typical internet logs, like those output by a packet sniffer or by a web or mail server. The logs look at different levels of the Internet Protocol stack. The web and mail server logs sit at the application layer.
Also useful is Marty's survey of open source and commercial plotting packages. The book's CD has a collection of the former. You should consider whether an existing package is suitable for your needs. Much quicker to adapt one, than to code a graphics program from scratch.

Used price: $23.98

Great Book for architect negotiationsReview Date: 2000-06-19
REAL FROM THE TRENCHES ADVICEReview Date: 2004-03-06
By an architect for architectsReview Date: 2001-08-03
Great source for any professional architectReview Date: 2000-10-28

Excellent book to learn the 360 Degree Review systemReview Date: 2006-03-14
What's Not CoveredReview Date: 2000-06-28
This is not an instructional book in the development of a 360-degree questionnaire.
The book provides excellent knowledge on what, where, who, when, and how. Highly recommended for knowledge, but not for building of the questionnaire.
Practical ideasReview Date: 2002-09-19
The ABC of 360-Degree Feedback.Review Date: 1999-11-28
In this invaluable study, authors organize their book into two parts :
(I). Preparing to use 360-degree feedback.
In this part, they :
i. offer basic information, including a definition of 360-degree feedback and a brief overview of its history and evolution.
ii. illustrate how a diverse group of companies (real cases) has successfully used 360-degree feedback to address different organizational issues, such as achieving business strategy, supporting cultural change, fostering individual development, enhancing team effectiveness, and identifying training and selection requirements.
iii. discuss and compare the two most common methods for collecting 360-degree feedback- interviews and questionnaires.
iv. focus on the use of interviews alone to collect data or as a supplement to the data provided by a questionnaire.
(II). Implementing a 360-degree feedback.
In this part, they :
i. focus on how to administer a 360-degree feedback process in a way that increases people's enthusiasm and ensures a high degree of confidence in the results.
ii. describe and compare three methods for delivering the feedback- group workshops, one-on-one meetings, and self-study.
iii. review what needs to be done after the feedback is collected and reviewed to ensure that recipients absurb the messages they have been given and take appropriate action.
iv. discuss the benefits and obstacles to using 360-degree feedback in HR management systems.
I highly recommend this invaluable study.


The best on Architectural Illustration/RenderingReview Date: 2007-03-20
the art of architectureReview Date: 2000-05-15
this is a letter to Mr. GriceReview Date: 2004-06-02
I loved your book so much, that I have decided that this is what
I would like to do. I am unable to go
to college, but I have completed architectural drafting at a local art school. What do I have to study to do renderings
such as the type you have in the book? (10 stars!)
If you do get to read this, please contact amazon so that you
can
answer my letter.
I tried to find a site where I could send you an e-mail, but
was not succesful.
Thank you so kindly.
Mrs.
W
This is the one!Review Date: 2003-10-07
on how to do this type of work. It is only to inspire. If
you have a passion for learning architectural illustration, as
I do, you will reach the heavens after looking at some of these gorgeous drawings. There are illustrations in airbrush, pencil, watercolor, tempra, and by computer. If that's what you are
looking for, it's worth every penny!

Used price: $16.23

The Art of Computer Programming, Volume 4, Fascicle 4: Generating All Trees--History of Combinatorial Generation (Art of
CompuReview Date: 2007-06-29
has a distinctive historical monographReview Date: 2006-03-30
Still, to perhaps compensate for the thin length, the book contains a distinctive section on the history of combinatorial generation. Knuth delves into this subject while giving a deeper treatment of the maths than one would likely encounter in a popular text directed at a general audience. He cites the I Ching, as well as ancient Indian and Arab manuscripts. The I Ching is notable as it is still in print and likely to be familiar to many.
With the publication of this fascicle, the collective set of four would make a respectable book in its own right. However, Knuth is scarcely done yet. We can expect more fascicles, and soon, one might hope. And eventually, a hardcover.
Expands upon a multi-volume work with hundreds of new programming exercisesReview Date: 2006-04-13
Great for comp sci and math majors...Review Date: 2006-04-30
Content:
Chapter 7 - Combinatorial Searching: 7.2 - Generating All Possibilities; 7.2.1 - Generating Basic Combinatorial Patterns; 7.2.1.1 - Generating all n-tuples; 7.2.1.2 - Generating all permutations; 7.2.1.3 - Generating all combinations; 7.2.1.4 - Generating all partitions; 7.2.1.5 - Generating all set partitions; 7.2.1.6 - Generating all trees; 7.2.1.7 - History and further references; Answers to Exercises; Index and Glossary
Don't refresh your browser thinking the Content section didn't load properly. There's just chapter 7... For those who don't understand the "fascicle" concept (like I didn't before getting this volume), it's a small book (120 pages) of material that either updates writings in previous volumes or a "preview" of material that will eventually be rolled into a single volume (in this case, volume 4). Knuth has a lot of information he wants to convey, and by using fascicles, the public can get a steady flow of information and help shape the continuing evolution of the series. Interesting concept, and one I can appreciate. Another review stated that this was probably one of the "skimpiest" volumes in terms of mathematical knowledge. If true, then I fear what will await me with future installments. To get the most of out Knuth's work, you really do need to be well-grounded in computer science and mathematical theory. Every page is populated with numerous formulas to prove the subject matter, and I'll admit to being completely lost in most of it. That doesn't mean the book isn't good. It *is* excellent work, but I'm definitely not the target audience. I don't come from a formal computer science and mathematics background, so I'd have to really slog through everything from page 1 with supporting texts in order to fully benefit from it.
It wasn't a total loss for me, though... I enjoyed the History and Further References chapter, where he shows the tree theory and how it affected such things as literature and culture through the ages. Whether the ancient Chinese had all this in mind when developing the I Ching is open to debate, but the theory and underpinnings of trees is definitely there. And for those readers who really want to work through and apply the material, there are exercises galore at the end (with answers graciously provided for those who get stuck). You could likely set up a college level course based on this (and associated) book, and it would be foundational to a computer science degree.
So, for the right audience, this is the type of book that will allow for weeks of thought and learning. But if you're more like me, someone who deals more with business systems and development (without a comp sci degree to back it up), you'll likely miss most of the value here.
Used price: $3.20

Excellent way to brush up on the bookReview Date: 2007-02-23
EVERYBODY should read this book.Review Date: 2007-01-10
The author recounts stories from IDEO, to give examples for the ideas presented. I found myself wanting a job at IDEO after reading only a quarter of the book.
The lessons that can be learned from this book extend beyond business analysis. A CEO, manager, teacher, priest, parent or any type of leader will be able to gain insight and make positive changes in their organizations using the ideas presented. If you're in any type of leadership role, READ THIS BOOK! If you're not, buy it for your boss - You'll benefit from it too!
Read this BookReview Date: 2002-02-26
The Art of InnovationReview Date: 2001-03-01


Phenomenal!!!!!Review Date: 2008-04-17
An invaluable tool!Review Date: 2005-12-13
A Must Have in Corporate AmericaReview Date: 2000-01-16
This is a great learning tool for all life's students.Review Date: 1999-03-27
Related Subjects: Valets News and Media Personalities Wrestlers Puroresu Promotions
More Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250