今天十二时辰财神方位

Thisbookisintendedforthosewhowanttoknowmoreaboutinformationsecurity.Inparticular,it'sidealforsystemadministratorsandsystemarchitectswhowanttoensurethattheinfrastructureandsystemstheyarecreatingandmanagingaresecure.Thisbookhelpsbothbeginnersandintermediatesbyallowingthemtouseitasareferencebookandtogainin-depthknowledge.

·5.1萬字

會員

Hands-On Penetration Testing on Windows

Windowshasalwaysbeenthego-toplatformforusersaroundtheglobetoperformadministrationandadhoctasks,insettingsthatrangefromsmallofficestoglobalenterprises,andthismassivefootprintmakessecuringWindowsauniquechallenge.Thisbookwillenableyoutodistinguishyourselftoyourclients.Inthisbook,you'lllearnadvancedtechniquestoattackWindowsenvironmentsfromtheindispensabletoolkitthatisKaliLinux.We'llworkthroughcorenetworkhackingconceptsandadvancedWindowsexploitationtechniques,suchasstackandheapoverflows,precisionheapspraying,andkernelexploitation,usingcodingprinciplesthatallowyoutoleveragepowerfulPythonscriptsandshellcode.We'llwrapupwithpost-exploitationstrategiesthatenableyoutogodeeperandkeepyouraccess.Finally,we'llintroducekernelhackingfundamentalsandfuzzingtesting,soyoucandiscovervulnerabilitiesandwritecustomexploits.Bytheendofthisbook,you'llbewell-versedinidentifyingvulnerabilitieswithintheWindowsOSanddevelopingthedesiredsolutionsforthem.

·9.8萬字

會員

科技安全：戰略實踐與展望

科技安全是國家安全體系的重要組成部分，科技創新是保障國家安全的戰略支撐。本書梳理分析了科技安全演進脈絡，明確了科技安全的內涵、外延及分類體系框架方法，闡述了科技安全演進歷程與特點，研究了主要國家和地區的科技安全體系架構、工具方法和實踐特點，并提出了科技安全保障舉措與發展路徑，最后對全球科技安全體系構建進行展望。本書面向社會普及世界科技安全形勢，介紹未來科技競爭策略，希望對相關領域的政府決策、干部培訓、企業投資、學者研究等有所啟迪。

·15.8萬字

會員

Active Directory Administration Cookbook

ActiveDirectoryisanadministrationsystemforWindowsadministratorstoautomatenetwork,securityandaccessmanagementtasksintheWindowsinfrastructure.Thisbookstartsoffwithadetailedfocusonforests,domains,trusts,schemasandpartitions.Next,youlearnhowtomanagedomaincontrollers,organizationalunitsandthedefaultcontainers.Goingforward,youdeepdiveintomanagingActiveDirectorysitesaswellasidentifyingandsolvingreplicationproblems.ThenextsetofchapterscoversthedifferentcomponentsofActiveDirectoryanddiscussesthemanagementofusers,groupsandcomputers.YoualsogothroughrecipesthathelpyoumanageyourActiveDirectorydomains,manageuserandgroupsobjectsandcomputeraccounts,expiringgroupmembershipsandgroupManagedServiceAccountswithPowerShell.YoulearnhowtoworkwithGroupPolicyandhowtogetthemostoutofit.Thelastsetofchapterscoversfederation,securityandmonitoring.YouwillalsolearnaboutAzureActiveDirectoryandhowtointegrateon-premisesActiveDirectorywithAzureAD.YoulearnhowAzureADConnectsynchronizationworks,whichwillhelpyoumanageAzureAD.Bytheendofthebook,youhavelearnedindetailaboutActiveDirectoryandAzureAD,too.

·10.7萬字

會員

Spring Security（Third Edition）

ThisbookisintendedforJavaWeband/orRESTfulwebservicedevelopersandassumesabasicunderstandingofcreatingJava8,JavaWeband/orRESTfulwebserviceapplications,XML,andtheSpringFramework.YouarenotexpectedtohaveanypreviousexperiencewithSpringSecurity.

·9.7萬字

會員

電腦安全與攻防入門很輕松（實戰超值版）

《電腦安全與攻防入門很輕松：實戰超值版》在剖析用戶進行黑客防御中迫切需要或想要用到的技術時，力求對其進行實操式的講解，使讀者對網絡防御技術有一個系統的了解，能夠更好地防范黑客的攻擊。《電腦安全與攻防入門很輕松：實戰超值版》共分為14章，包括電腦安全快速入門、電腦系統漏洞的安全防護、計算機病毒與木馬的安全防護、計算機系統的安全防護、計算機系統賬戶的安全防護、磁盤數據的安全防護、文件密碼數據的安全防護、系統入侵與遠程控制的安全防護、網絡賬號及密碼的安全防護、網頁瀏覽器的安全防護、手機與平板電腦的安全防護、網上銀行的安全防護、手機支付的安全防護、無線網絡的安全防護等內容。《電腦安全與攻防入門很輕松：實戰超值版》內容豐富、圖文并茂、深入淺出，不僅適用于網絡安全從業人員及網絡管理員，而且適用于廣大網絡愛好者，也可作為大、中專院校計算機安全相關專業的參考書。

·10.9萬字

會員

Hands-On Application Penetration Testing with Burp Suite

Burpsuiteisasetofgraphictoolsfocusedtowardspenetrationtestingofwebapplications.Burpsuiteiswidelyusedforwebpenetrationtestingbymanysecurityprofessionalsforperformingdifferentweb-levelsecuritytasks.Thebookstartsbysettinguptheenvironmenttobeginanapplicationpenetrationtest.Youwillbeabletoconfiguretheclientandapplytargetwhitelisting.YouwillalsolearntosetupandconfigureAndroidandIOSdevicestoworkwithBurpSuite.ThebookwillexplainhowvariousfeaturesofBurpSuitecanbeusedtodetectvariousvulnerabilitiesaspartofanapplicationpenetrationtest.Oncedetectioniscompletedandthevulnerabilityisconfirmed,youwillbeabletoexploitadetectedvulnerabilityusingBurpSuite.ThebookwillalsocoversadvancedconceptslikewritingextensionsandmacrosforBurpsuite.Finally,youwilldiscovervariousstepsthataretakentoidentifythetarget,discoverweaknessesintheauthenticationmechanism,andfinallybreaktheauthenticationimplementationtogainaccesstotheadministrativeconsoleoftheapplication.Bytheendofthisbook,youwillbeabletoeffectivelyperformend-to-endpenetrationtestingwithBurpSuite.

·4.5萬字

會員

Kali Linux Wireless Penetration Testing Cookbook

Ifyouareasecurityprofessional,administrator,andanetworkprofessionalwhowantstoenhancetheirwirelesspenetrationtestingskillsandknowledgethenthisbookisforyou.Somepriorexperiencewithnetworkingsecurityandconceptsisexpected.

·5.6萬字

會員

網絡空間安全導論

本書深入淺出、系統地介紹了網絡安全相關的基本知識點，以網絡安全崗位所需要的基本理論知識與技能為主線來組織內容。本書共8章，主要包括網絡空間安全概述、密碼學及應用、Web安全與滲透測試、代碼審計、網絡協議安全、操作系統安全、惡意軟件分析、企業網絡安全建設等內容。本書是360網絡安全大學網絡安全專業的官方指導教材，可作為高等院校網絡安全、網絡工程、計算機等相關專業的教材，也可供從事網絡安全相關工作的技術人員參考。

·17.2萬字

會員

Hands-On Penetration Testing with Kali NetHunter

KaliNetHunterisaversionofthepopularandpowerfulKaliLinuxpentestingplatform,designedtobeinstalledonmobiledevices.Hands-OnPenetrationTestingwithKaliNetHunterwillteachyouthecomponentsofNetHunterandhowtoinstallthesoftware.You’llalsolearnaboutthedifferenttoolsincludedandhowtooptimizeanduseapackage,obtaindesiredresults,performtests,andmakeyourenvironmentmoresecure.StartingwithanintroductiontoKaliNetHunter,youwilldelveintodifferentphasesofthepentestingprocess.Thisbookwillshowyouhowtobuildyourpenetrationtestingenvironmentandsetupyourlab.Youwillgaininsightintogatheringintellectualdata,exploitingvulnerableareas,andgainingcontrolovertargetsystems.Asyouprogressthroughthebook,youwillexploretheNetHuntertoolsavailableforexploitingwiredandwirelessdevices.Youwillworkthroughnewwaystodeployexistingtoolsdesignedtoreducethechancesofdetection.Intheconcludingchapters,youwilldiscovertipsandbestpracticesforintegratingsecurityhardeningintoyourAndroidecosystem.Bytheendofthisbook,youwillhavelearnedtosuccessfullyuseamobilepenetrationtestingdevicebasedonKaliNetHunterandAndroidtoaccomplishthesametasksyouwouldtraditionally,butinasmallerandmoremobileformfactor.

·4.9萬字

會員

Becoming the Hacker

BecomingtheHackerwillteachyouhowtoapproachwebpenetrationtestingwithanattacker'smindset.Whiletestingwebapplicationsforperformanceiscommon,theever-changingthreatlandscapemakessecuritytestingmuchmoredifficultforthedefender.Therearemanywebapplicationtoolsthatclaimtoprovideacompletesurveyanddefenseagainstpotentialthreats,buttheymustbeanalyzedinlinewiththesecurityneedsofeachwebapplicationorservice.Wemustunderstandhowanattackerapproachesawebapplicationandtheimplicationsofbreachingitsdefenses.Throughthefirstpartofthebook,AdrianPruteanuwalksyouthroughcommonlyencounteredvulnerabilitiesandhowtotakeadvantageofthemtoachieveyourgoal.Thelatterpartofthebookshiftsgearsandputsthenewlylearnedtechniquesintopractice,goingoverscenarioswherethetargetmaybeapopularcontentmanagementsystemoracontainerizedapplicationanditsnetwork.BecomingtheHackerisaclearguidetowebapplicationsecurityfromanattacker'spointofview,fromwhichbothsidescanbenefit.

·8.1萬字

會員

Building Virtual Pentesting Labs for Advanced Penetration Testing

Writteninaneasy-to-followapproachusinghands-onexamples,thisbookhelpsyoucreatevirtualenvironmentsforadvancedpenetrationtesting,enablingyoutobuildamulti-layeredarchitecturetoincludefirewalls,IDS/IPS,webapplicationfirewalls,andendpointprotection,whichisessentialinthepenetrationtestingworld.Ifyouareapenetrationtester,securityconsultant,securitytestengineer,oranalystwhowantstopracticeandperfectpenetrationtestingskillsbybuildingvirtualpentestinglabsinvaryingindustryscenarios,thisisthebookforyou.Thisbookisidealifyouwanttobuildandenhanceyourexistingpentestingmethodsandskills.Basicknowledgeofnetworksecurityfeaturesisexpectedalongwithwebapplicationtestingexperience.

·9.6萬字

會員

Kali Linux 2018：Assuring Security by Penetration Testing

KaliLinuxisacomprehensivepenetrationtestingplatformwithadvancedtoolstoidentify,detect,andexploitthevulnerabilitiesuncoveredinthetargetnetworkenvironment.WithKaliLinux,youcanapplytheappropriatetestingmethodologywithdefinedbusinessobjectivesandascheduledtestplan,resultinginsuccessfulpenetrationtestingprojectengagement.ThisfourtheditionofKaliLinux2018:AssuringSecuritybyPenetrationTestingstartswiththeinstallationofKaliLinux.Youwillbeabletocreateafulltestenvironmenttosafelypracticescanning,vulnerabilityassessment,andexploitation.You’llexploretheessentialsofpenetrationtestingbycollectingrelevantdataonthetargetnetworkwiththeuseofseveralfootprintinganddiscoverytools.Asyoumakeyourwaythroughthechapters,you’llfocusonspecifichostsandservicesviascanningandrunvulnerabilityscanstodiscovervariousrisksandthreatswithinthetarget,whichcanthenbeexploited.Intheconcludingchapters,you’llapplytechniquestoexploittargetsystemsinordertogainaccessandfindawaytomaintainthataccess.You’llalsodiscovertechniquesandtoolsforassessingandattackingdevicesthatarenotphysicallyconnectedtothenetwork,includingwirelessnetworks.Bytheendofthisbook,youwillbeabletouseNetHunter,themobileversionofKaliLinux,andwriteadetailedreportbasedonyourfindings.

·8.7萬字

會員

數字身份與元宇宙信任治理

本書共八章，其中前四章主要介紹數字身份管理及應用，包括數字身份的相關概念及特性；身份認證管理、應用賦能及零信任安全管理；各國的數字身份實施；討論數字身份在公共治理、商業服務等領域的應用價值。后面四章主要探究元宇宙框架及其信任治理，從Web技術架構的演變，介紹元宇宙的網絡技術基礎Web3.0，以及相關的數字身份模式的發展趨勢；討論元宇宙中的數字身份技術要素及形態特征，以及數字身份、數字分身等關鍵特征要素；探討利用數字身份對元宇宙的信任環境進行治理的方法和技術；探討如何構建元宇宙的信任治理規則。

·14.2萬字

會員

網絡空間安全原理與實踐

《網絡空間安全原理與實踐》是信息安全、網絡空間安全系列教材的第一冊，主要著墨于信息安全的基本原理、各類網絡攻擊方式與基于思科設備的防御特性、AAA（認證、授權和審計）的原理與部署、防火墻的基本原理、加密原理與VPN（虛擬專用網絡）的基本概念及基于思科設備的實現等內容。另外，本書也簡單介紹了一些掃描工具及其在Windows環境中的基本使用方法。《網絡空間安全原理與實踐》不僅適合計算機網絡、信息安全、網絡空間安全專業的學生作為教材使用，而且適合網絡安全技術愛好者，以及各類學完CCNA課程或者思科網院課程，希望進一步了解安全相關技術及原理的技術人員閱讀。

·10.4萬字

會員

Mastering Metasploit

Acomprehensiveanddetailed,stepbysteptutorialguidethattakesyouthroughimportantaspectsoftheMetasploitframework.Ifyouareapenetrationtester,securityengineer,orsomeonewhoislookingtoextendtheirpenetrationtestingskillswithMetasploit,thenthisbookisidealforyou.ThereadersofthisbookmusthaveabasicknowledgeofusingMetasploit.Theyarealsoexpectedtohaveknowledgeofexploitationandanindepthunderstandingofobject-orientedprogramminglanguages.

·6.9萬字

會員

Mastering Blockchain

Thisbookappealstothosewhowishtobuildfast,highlysecure,transactionalapplications.Thisbookisforthosewhoarefamiliarwiththeconceptofblockchainandarecomfortablewithaprogramminglanguage.

·11.1萬字

會員

Nmap 6：Network exploration and security auditing Cookbook

Thebookisacollectionofeasytofollow,practicalrecipeswithexplanationsofthecode,andlinkstofurtherinformation.Thisbookisforanysecurityconsultant,administratororenthusiastlookingtolearnhowtouseandmasterNmapandtheNmapScriptingEngine.

·6.8萬字

會員

AWS Certified Security：Specialty Exam Guide

AWSCertifiedSecurity–Specialtyisacertificationexamtovalidateyourexpertiseinadvancedcloudsecurity.Withanever-increasingdemandforAWSsecurityskillsinthecloudmarket,thiscertificationcanhelpyouadvanceinyourcareer.Thisbookhelpsyoupreparefortheexamandgaincertificationbyguidingyouthroughbuildingcomplexsecuritysolutions.FromunderstandingtheAWSsharedresponsibilitymodelandidentityandaccessmanagementtoimplementingaccessmanagementbestpractices,you'llgraduallybuildonyourskills.ThebookwillalsodelveintosecuringinstancesandtheprinciplesofsecuringVPCinfrastructure.Coveringsecuritythreats,vulnerabilities,andattackssuchastheDDoSattack,you'lldiscoverhowtomitigatetheseatdifferentlayers.You'llthencovercomplianceandlearnhowtouseAWStoauditandgoverninfrastructure,aswellastofocusonmonitoringyourenvironmentbyimplementingloggingmechanismsandtrackingdata.Later,you'llexplorehowtoimplementdataencryptionasyougethands-onwithsecuringaliveenvironment.Finally,you'lldiscoversecuritybestpracticesthatwillassistyouinmakingcriticaldecisionsrelatingtocost,security,anddeploymentcomplexity.BytheendofthisAWSsecuritybook,you'llhavetheskillstopasstheexamanddesignsecureAWSsolutions.