 |
Stealing the Network: How to Own an Identity
Download an excerpt:
Chapter 7: Death by a Thousand Cuts
Excerpt provided courtesy of Syngress.
|
Be the First to Write a Review and tell the world about this title!People who purchase this book frequently purchase: - Stealing the Network: How to Own a Continent; Kevin D. Mitnick, et al, $34.95, 30% Off!
- Stealing the Network: How to Own the Box; Ryan Russell, et al, $34.95, 30% Off!
- Rootkits: Subverting the Windows Kernel; Greg Hoglund, et al, $34.50, 37% Off!
- The Database Hacker's Handbook: Hacking Database Servers; David Litchfield, et al, $30.50, 39% Off!
Books on similar topics, in best-seller order:Books from the same publisher, in best-seller order:
You Are Who the Computer Says You Are...
"My name, my real name, is Robert Knoll, Senior. No middle name. Most of those
who matter right now think of me as Knuth. But I am the man of a thousand faces,
the god of infinite forms.
Identity is a precious commodity. In centuries past, those who fancied themselves
sorcerers believed that if you knew a being’s true name, you could control
that being. Near where I live now, there are shamans who impose similar beliefs
on their people. The secret is that if you grant such a man, an agency, this
power over yourself through your beliefs or actions, then it is true.
Only recently has this become true in the modern world. The people of the world
have granted control of their existence to computers, networks, and databases.
You own property if a computer says you do. You can buy a house if a computer
says you may. You have money in the bank if a computer says so. Your blood type
is what the computer says it is. You are who the computer says you are."
-From the Diary of Robert Knoll, Senior
The first two books in this series, Stealing the Network: How to Own the Box
and Stealing the Network: How to Own a Continent, have become classics in the
Hacker and Infosec communities because of their chillingly realistic depictions
of criminal hacking techniques and strategies. But what happens when the tables
turn, and the criminal hackers become the targets of both law enforcement and
each other? What happens when they must evade detection by creating new identities
and applying their skills to get out fast and vanish into thin air. In Stealing
the Network: How to Own an Identity, the hacker crew you’ve grown to both
love and hate find themselves on the run, fleeing from both authority and adversary.
They must now use their prowess in a way they never expected--to survive…
Table of Contents
Part I Evasion
Prologue From the Diary of Robert Knoll, Senior
Chapter 1 In The Beginning
Chapter 2 Sins of the Father
Chapter 3 Saul on the Run
Chapter 4 The Seventh Wave
Chapter 5 Bl@ckTo\/\/3r
Chapter 6 The Java Script Café
Chapter 7 Death by a Thousand Cuts
Chapter 8 A Really Gullible Genius Makes Amends
Chapter 9 Near Miss
Chapter 10 There’s Something Else
Epilogue: The Chase
Part II Behind the Scenes
Chapter 11 The Conversation
Chapter 12 Social Insecurity
About the Authors
Timothy Mullen (Thor) has been educating and training users in the technology
sector since 1983 when he began teaching BASIC and COBOL through a special program
at the Medical University of South Carolina--while still a senior in high school.
Mullen has developed and implemented Microsoft networking and security solutions
for institutions like the US Air Force, Microsoft, the US Federal Court systems,
regional power generation facilities and international banking/financial institutions.
Mullen has been a columnist for Security Focus's Microsoft section, and is a
regular contributor of InFocus technical articles. AKA "Thor," he
is the founder of the "Hammer of God" security co-op group. Mullen's
writings appear in multiple publications such as Hacker's Challenge and the
Stealing the Network (Syngress ISBN 1-931836-87-6 and 1-931836-05-1) series.
Johnny Long is a "clean-living" family guy who just so happens to
like hacking stuff. Over the past two years, Johnny's most visible focus has
been on this Google hacking "thing" which has served as yet another
diversion to a serious (and bill-paying) job as a professional hacker and security
researcher for Computer Sciences Corporation. Johnny has written or contributed
to several books, including the popular book Google Hacking for Penetration
Testers (Syngress, ISBN: 1-931836-36-1).
Riley "Caezar" Eller has extensive experience in Internet embedded
devices and protocol security. He invented automatic web vulnerability analysis
and ASCII-armored stack overflow exploits, and contributed to several other
inventions including a pattern language for describing network attacks. His
credits include the Black Hat Security Briefings and Training series, "Meet
the Enemy" seminars, the book Hack Proofing Your Network: Internet Tradecraft
(Syngress, ISBN: 1-928994-15-6), and the "Caezar's Challenge" think
tank.
Ryan Russell (Blue Boar) has worked in the IT field for over 13 years, focusing
on information security for the last seven. He was the lead author of Hack Proofing
Your Network, Second Edition (Syngress, ISBN: 1-928994-70-9), contributing author
and technical editor of Stealing The Network: How to Own The Box (Syngress,
ISBN: 1-931836-87-6), and is a frequent technical editor for the Hack Proofing
series of books from Syngress. Ryan was also a technical advisor on Snort 2.0
Intrusion Detection (Syngress, ISBN: 1-931836-74-4). Ryan founded the vuln-dev
mailing list, and moderated it for three years under the alias "Blue Boar."
Chris Hurley (Roamer) is a Senior Penetration Tester working in the Washington,
DC area. He is the founder of the WorldWide WarDrive, a four-year effort by
INFOSEC professionals and hobbyists to generate awareness of the insecurities
associated with wireless networks and is the lead organizer of the DEF CON WarDriving
Contest. Chris has spoken at several security conferences and published numerous
whitepapers on a wide range of INFOSEC topics. Chris is the lead author of WarDriving:
Drive, Detect, Defend (Syngress, ISBN: 1-931836-03-5), and a contributor to
Aggressive Network Self-Defense (Syngress, ISBN: 1-931836-20-5) and InfoSec
Career Hacking (Syngress, ISBN: 1-59749-011-3).
Brian Hatch is Chief Hacker at Onsight, Inc., where he is a Unix/Linux and
network security consultant. Brian is the lead author of Hacking Linux Exposed,
and co-author of Building Linux VPNs, as well as article for various online
sites such as SecurityFocus, and is the author of the not-so-weekly Linux Security:
Tips, Tricks, and Hackery newsletter.
Raven Alderis a Senior Security Engineer for IOActive, a consulting firm specializing
in network security design and implementation. In her copious spare time, she
teaches network security for LinuxChix.org and checks cryptographic vulnerabilities
for the Open Source Vulnerability Database. Raven lives in Seattle, Washington.
Raven was a contributor to Nessus Network Auditing (Syngress, ISBN: 1-931836-08-6)
Jay Beale is an information security specialist, well known for his work on
mitigation technology, specifically in the form of operating system and application
hardening. He's written two of the most popular tools in this space: Bastille
Linux, a lockdown tool that introduced a vital security-training component,
and the Center for Internet Security's Unix Scoring Tool. Both are used worldwide
throughout private industry and government. Jay has served as an invited speaker
at a variety of conferences worldwide, as well as government symposia. He's
written for Information Security Magazine, SecurityFocus, and the now-defunct
SecurityPortal.com. He has worked on four books in the information security
space. Three of these, including the best-selling Snort 2.1 Intrusion Detection
(Syngress, ISBN: 1-9318360-43-) make up his Open Source Security Series, while
one is a technical work of fiction entitled Stealing the Network: How to Own
a Continent (Syngress, ISBN: 1-931836-05-1)."
Tom Parker is a computer security analyst who, alongside his work providing
integral security services for some of the world's largest organizations, is
widely known for his vulnerability research on a wide range of platforms and
commercial products. Tom regularly presents at closed-door and public security
conferences, including the Blackhat briefings, and is often referenced by the
world's media on matters relating to computer security. In the past, Tom has
appeared on BBC News and is frequently quoted by the likes of Reuters News and
ZDNet.
Jeff Moss is CEO of Black Hat, Inc. and founder of DEFCON, is a renowned computer
security scientist best known for his forums, bringing together: the best minds
from government agencies and global corporations with the underground's best
hackers. Jeff's forums have gained him exposure and respect from each side of
the information security battle, enabling him to continuously be aware of new
security defense, as well as penetration techniques and trends. Jeff brings
this information to three continents--North America, Europe and Asia--through
his Black Hat Briefings, DEFCON, and "Meet the Enemy" sessions. Jeff
speaks to the media regularly about computer security, privacy and technology
and has appeared in such media as Business Week, CNN, Forbes, Fortune, New York
Times, NPR, National Law Journal, and Wired Magazine. Jeff is a regular presenter
at conferences including Comdex, CSI, Forbes CIO Technology Symposium, Fortune
Magazine's CTO Conference, The National Information System Security Convention,
and PC Expo.
Anthony Reyes (Foreword) is a 15-year veteran with a large metropolitan police
department, located in the northeast region of the United States. He is presently
assigned to the Computer Crimes Squad of his department, where he investigates
computer intrusions, fraud, identity theft, child exploitation, and software
piracy. He sat as an alternate member of New York Governor George E. Pataki's
Cyber-Security Task Force, and serves as President for the Northeast Chapter
of the High Technology Crime Investigation Association. Anthony has over 17
years of experience in the IT field. He is an instructor at the Federal Law
Enforcement Training Center and helped develop the Cyber Counter Terrorism Investigations
Training Program. He also teaches Malware and Steganography detection for Wetstone
Technologies, and computer forensics for Accessdata.
|
|
