CNIT 123 Ethical Hacking and Network Defense

Catalog Description
Students learn how hackers attack computers and networks, and how to protect systems from such attacks, using both Windows and Linux systems. Students will learn legal restrictions and ethical guidelines, and will be required to obey them. Students will perform many hands-on labs, both attacking and defending, using port scans, footprinting, exploiting Windows and Linux vulnerabilities, buffer overflow exploits, SQL injection, privilege escalation, Trojans, and backdoors.

Prerequisites: CNIT 106 and 120 or equivalent familiarity with the fundamentals of networking and security.

Upon successful completion of this course, the student will be able to:
Explain what an ethical hacker can and can not do legally, and explain the credentials and roles of penetration testers.
Define the types of malicious software found in modern networks.
Explain the threats and countermeasures for physical security and social engineering.
Perform footprinting to learn about a company and its network.
Perform port scans to locate potential entry points to servers and networks.
Perform enumeration (finding resources, accounts, and passwords) on Microsoft, Netware, and Unix/Linux targets.
Perform very simple programming in C, HTML, and Perl, specifically oriented towards the needs of network security professionals.
Learn how to identify Microsoft Windows vulnerabilities and to harden systems.
Learn how to identify Linux vulnerabilities and to protect servers.
Describe how to take control of Web Servers, and how to protect them.
Locate and hack into wireless networks, and protect them.
Explain how cryptography and hashing work, and perform attacks against them such as password cracking and man-in-the-middle attacks.
Describe and deploy security devices, including routers, firewalls, Intrusion Detection Systems, and honeypots.
Textbooks
Hands-On Ethical Hacking and Network Defense by Michael T. Simpson — ISBN: 0-619-21708-1 Buy from Amazon

CNIT 123: Ethical Hacking and Network Defense — Lecture Notes and Projects (Spring 2008 Revision) by Sam Bowne (buy it at the CCSF Bookstore)
download links:
http://rapidshare.com/files/222349758/S.Bowne.CNIT.part15.rar
http://rapidshare.com/files/222350475/S.Bowne.CNIT.part12.rar
http://rapidshare.com/files/222350492/S.Bowne.CNIT.part03.rar
http://rapidshare.com/files/222350559/S.Bowne.CNIT.part09.rar
http://rapidshare.com/files/222350566/S.Bowne.CNIT.part07.rar
http://rapidshare.com/files/222350589/S.Bowne.CNIT.part02.rar
http://rapidshare.com/files/222350635/S.Bowne.CNIT.part06.rar
http://rapidshare.com/files/222350641/S.Bowne.CNIT.part10.rar
http://rapidshare.com/files/222350684/S.Bowne.CNIT.part14.rar
http://rapidshare.com/files/222350689/S.Bowne.CNIT.part11.rar
http://rapidshare.com/files/222350691/S.Bowne.CNIT.part08.rar
http://rapidshare.com/files/222350702/S.Bowne.CNIT.part04.rar
http://rapidshare.com/files/222350716/S.Bowne.CNIT.part01.rar
http://rapidshare.com/files/222350739/S.Bowne.CNIT.part13.rar
http://rapidshare.com/files/222350748/S.Bowne.CNIT.part05.rar

Ruby for Rails: Ruby Techniques for Rails Developers

Product Description
-The word is out: with Ruby on Rails you can build powerful Web applications easily and quickly! And just like the Rails framework itself, Rails applications are Ruby programs. That means you can’t tap into the full power of Rails unless you master the Ruby language. Ruby for Rails, written by Ruby expert David Black (with a forward by David Heinemeier Hansson), helps Rails developers achieve Ruby mastery. Each chapter deepens your Ruby knowledge and shows you how it connects to Rails. You’ll gain confidence working with objects and classes and learn how to leverage Ruby’s elegant, expressive syntax for Rails application power. And you’ll become a better Rails developer through a deep understanding of the design of Rails itself and how to take advantage of it.

Newcomers to Ruby will find a Rails-oriented Ruby introduction that’s easy to read and that includes dynamic programming techniques, an exploration of Ruby objects, classes, and data structures, and many neat examples of Ruby and Rails code in action. Ruby for Rails: the Ruby guide for Rails developers!

What’s Inside

download

Intelligent and Evolutionary Systems (Studies in Computational Intelligence)

Product Description

Artificial evolutionary systems are computer systems, inspired by ideas from natural evolution and related phenomena. The field has a long history, dating back to the earliest days of computer science, but it has only become an established scientific and engineering discipline since the 1990s, with packages for the commonest form, genetic algorithms, now widely available.

Researchers in the Asia-Pacific region have participated strongly in the development of evolutionary systems, with a particular emphasis on the evolution of intelligent solutions to highly complex problems. The Asia-Pacific Symposia on Intelligent and Evolutionary Systems have been an important contributor to this growth in impact, since 1997 providing an annual forum for exchange and dissemination of ideas. Participants come primarily from East Asia and the Western Pacific, but contributions are welcomed from around the World.

This volume features a selection of fourteen of the best papers from recent APSIES. They illustrate the breadth of research in the region, with applications ranging from business to medicine, from network optimization to the promotion of innovation.

download

Evolutionary Computation, Machine Learning and Data Mining in Bioinformatics

Product Description

This book constitutes the refereed proceedings of the 6th European Conference on Evolutionary Computation, Machine Learning and Data Mining in Bioinformatics, EvoBIO 2008, held in Naples, Italy, in March 2008 colocated with the Evo* 2008 events.

The 18 revised full papers were carefully reviewed and selected from 63 submissions. EvoBio is the premiere European event for experts in computer science meeting with experts in bioinformatics and the biological sciences, all interested in the interface between evolutionary computation, machine learning, data mining, bioinformatics, and computational biology. Topics addressed by the papers include biomarker discovery, cell simulation and modeling, ecological modeling, uxomics, gene networks, biotechnology, metabolomics, microarray analysis, phylogenetics, protein interactions, proteomics, sequence analysis and alignment, as well as systems biology.

download

Beginning Java EE 5: From Novice to Professional

Product Description
Sun’s new lightweight Java Enterprise Edition (EE) 5 is an extremely powerful platform for developing enterprise-level Java-based applications, primarily for the server. This book shows you how to harness that power, examining how the pieces of the new Java EE 5 platform fit together, including the newly redesigned annotations-driven EJB 3 spec as well as JavaServer Faces (JSF), integrated into the platform for the first time.This book surpasses explaining how to code a JSP or an EJB: It explains when and where to use these APIs, what their strengths and weaknesses are, and perhaps most importantly, how to employ the best practices for using them .Hands-on tutorials are also included, along with clear explanations and working code examples. You will grow to take the next step, from writing client-side desktop applications to writing enterprise applications. You will also learn how to use the individual APIs and tools in the J2EE platform, and how to merge these to create your own enterprise applications.

About the Author
Kevin Mukhar is a software developer in Colorado Springs, Colorado. For the past 7 years, he has worked on various software systems using different Java Enterprise technologies. He has coauthored several other books, including <i>Beginning Java Databases</i>, and <i>The Ultimate Palm Robot</i>. In addition to developing software during the day, he is working on a master’s degree in computer science.Chris Zelenak is a programmer at Learning Assistant Technologies, where he helps in the development of server-side Cocoon and Rails applications, Java and .NET client applications, and rampant devil’s advocacy. He recently graduated from the Computer Science department of Indiana Wesleyan University.

James L. Weaver is the chief scientist at Learning Assistant Technologies, a company that specializes in developing learner-centric tools. He is also the president of JMentor, a Java mentoring, training, and consulting practice.

Jim Crume is a Java architect at Fusion Alliance, an Indianapolis, Indiana-based consulting company that specializes in web application development. Jim has spent many years as a consultant, and specializes in architecting and developing web-based systems, but he particularly enjoys Java.

download

Stream Data Processing: A Quality of Service Perspective: Modeling, Scheduling, Load Shedding, and Complex Event Processing

Product Description

Traditional database management systems, widely used today, are not well-suited for a class of emerging applications, such as computer network management, homeland security, sensor computing, and environmental monitoring. These applications need to continuously process large amounts of data coming in the form of a stream, and meet stringent response time requirements. Support for handling QoS metrics, such as response time, memory usage, and throughput, is central to any system proposed for the above applications.

Stream Data Processing: A Quality of Service Perspective (Modeling, Scheduling, Load Shedding, and Complex Event Processing), presents a new paradigm suitable for stream and complex event processing. This book covers a broad range of topics in stream data processing and includes detailed technical discussions of a number of proposed techniques.

This volume is intended as a textbook for graduate courses and as a reference book for researchers, advanced-level students in CS, and IT practitioners.

download

Game Design Workshop: Designing, Prototyping, and Playtesting Games (Gama Network Series)

Product Description
Master the craft of game design so you can create that elusive combination of challenge, competition, and interaction that players seek. This design workshop begins with an examination of the fundamental elements of game design; then puts you to work in prototyping, playtesting, and redesigning your own games with exercises that teach essential design skills. Workshop exercises require no background in programming or artwork, releasing you from the intricacies of electronic game production, so you can develop a working understanding of the essentials of game design.

The ideas and exercises in this Game Design Workshop answer the questions asked by every aspiring game designer: How do I learn to design games? What skills do I need to become a professional game designer? Game design is demystified with a clear, accessible analysis of the formal and dramatic systems of game design. Examples, illustrations, and exercises strengthen your understanding of what makes game systems function; and teach you the skills and tools that you need to create a compelling game.

Refined over a number of years, this workshop curriculum has provided the foundation for hundreds of careers in all areas of the game industry including game design, producing, programming, visual design, quality assurance, and marketing. This guide to the language and business of game design will help anyone pursuing a career in the industry.

download

Data Compression: The Complete Reference

Data compression is one of the most important fields and tools in modern computing. From archiving data, to CD ROMs, and from coding theory to image analysis, many facets of modern computing rely upon data compression.

Data Compression provides a comprehensive reference for the many different types and methods of compression. Included are a detailed and helpful taxonomy, analysis of most common methods, and discussions on the use and comparative benefits of methods and description of “how to” use them. The presentation is organized into the main branches of the field of data compression: run length encoding, statistical methods, dictionary-based methods, image compression, audio compression, and video compression. Detailed descriptions and explanations of the most well-known and frequently used compression methods are covered in a self-contained fashion, with an accessible style and technical level for specialists and nonspecialists. Topics and features: coverage of video compression, including MPEG-1 and H.261; thorough coverage of wavelets methods, including CWT, DWT, EZW and the new Lifting Scheme technique; complete audio compression; QM coder used in JPEG and JBIG, including new JPEG 200 standard; image transformations and detailed coverage of discrete cosine transform and Haar transform; coverage of EIDAC method for compressing simple images; prefix image compression; ACB and FHM curve compression; geometric compression and edgebreaker technique.
Data Compression provides an invaluable reference and guide for all computer scientists, computer engineers, electrical engineers, signal/image processing engineers and other scientists needing a comprehensive compilation for a broad range of compression methods.

download

Database in Depth: Relational Theory for Practitioners

Product Description
This book sheds light on the principles behind the relational model, which is fundamental to all database-backed applications–and, consequently, most of the work that goes on in the computing world today. “Database in Depth: The Relational Model for Practitioners” goes beyond the hype and gets to the heart of how relational databases actually work.

Ideal for experienced database developers and designers, this concise guide gives you a clear view of the technology–a view that’s not influenced by any vendor or product. Featuring an extensive set of exercises, it will help you:

understand why and how the relational model is still directly relevant to modern database technology (and will remain so for the foreseeable future)

see why and how the SQL standard is seriously deficient

use the best current theoretical knowledge in the design of their databases and database applications

make informed decisions in their daily database professional activities

“Database in Depth” will appeal not only to database developers and designers, but also to a diverse field of professionals and academics, including database administrators (DBAs), information modelers, database consultants, and more. Virtually everyone who deals with relational databases should have at least a passing understanding of the fundamentals of working with relational models.

Author C.J. Date has been involved with the relational model from its earliest days. An exceptionally clear-thinking writer, Date lays out principle and theory in a manner that is easily understood. Few others can speak as authoritatively the topic of relational databases as Date can.

download

Securing Converged IP Networks

Product Description
Internet Protocol (IP) networks increasingly mix traditional data assets with traffic related to voice, entertainment, industrial process controls, metering, and more. Due to this convergence of content, IP networks are emerging as extremely vital infrastructure components, requiring greater awareness and better security and management. Offering diverse perspectives from the world’s leading experts on convergence, Securing Converged IP Networks illustrates how to maintain content integrity and network assurance.

This book discusses the convergence market and the business drivers of convergence, details how to measure the sensitivity and assurance requirements of different data assets and discusses a wide range of ICT security threats and vulnerabilities. Later chapters discuss controls and safeguards in terms of management, as well as, technical, and operational tools that can reduce the likelihood of wide range of risks. It also provides recommendations for managing the assurance, implementation and operation of converged ICT network infrastructures and examines the future of ICT security and assurance under IP convergence.

download

Codes and Automata (Encyclopedia of Mathematics and Its Applications)

This major revision of Berstel and Perrin’s classic Theory of Codes has been rewritten with a more modern focus and a much broader coverage of the subject. The concept of unambiguous automata, which is intimately linked with that of codes, now plays a significant role throughout the book, reflecting developments of the last 20 years.

This is complemented by a discussion of the connection between codes and automata, and new material from the field of symbolic dynamics. The authors have also explored links with more practical applications, including data compression and cryptography. The treatment remains self-contained: there is background material on discrete mathematics, algebra and theoretical computer science. The wealth of exercises and examples make it ideal for self-study or courses. In sum this is a comprehensive reference on the theory of variable-length codes and their relation to automata.

download

We don’t own the desktop yet but we do own the first ever Nobel Prize in Cool. Cool Projects that is, we’ve got a Linux powered rocket and a Linux powered submarine. Plus we show you how to use the iRobot Create with Linux, how to convert those old 8mm movies to DVD with Linux, and how to control your house with Linux and Mi Casa Verde.

After checking out the cool projects don’t miss the rest of this cool issue and read how to run Rails under Apache using Phusion Passenger, how to build a secure Squid Web Proxy, how to use OpenFiler to create an open-source network storage appliance, and if just typed “rm -rf /” find out what to do and what not to do in our continuing series of “When Disaster Strikes” articles. And don’t miss our interview with Neuros CEO Joe Born or Doc’s monthly words of wisdom.
Features

* Linux-Powered Amateur Rocket Goes USB by Sarah Sharp
The upgrade continues.
* The Cambridge Autonomous Underwater Vehicle by Andy Pritchard
The Germans probably would call it an Ubunturseeboot.
* Linux-Based 8mm Telecine by Frank Pirz
It’s a power of 2, you gotta convert it!
* Fun with the iRobot Create by Zach Banks
Roll your own!

Indepth

* Interview with Joe Born: CEO of Neuros Technology by James Gray
Neuros Technology’s Linux-powered open devices are driving TV-Internet convergence.
* OpenFiler: an Open-Source Network Storage Appliance by Bill Childers
An open-source alternative to a NetApp filer.

Columns

* Reuven M. Lerner’s At the Forge Phusion Passenger
* Dave Taylor’s Work the Shell More Special Variables
* Mick Bauer’s Paranoid Penguin Building a Secure Squid Web Proxy, Part II
* Kyle Rankin’s Hack and / When Disaster Strikes: Attack of the rm Command
* Kyle Rankin and Bill Childers’ Point/Counterpoint AJAX
* Doc Searls’ EOF Privacy Is Relative

download

UML Applied: A .NET Perspective

Product Description
UML Applied: A .NET Perspective is the first book to examine the two worlds of Unified Modeling Language (UML) and .NET concurrently. The core of UML Applied: A .NET Perspective is a set of proven, hands-on, team-oriented exercises that will have the reader solving real-world problems with UML faster than when using any other approach—often in under a day. Martin L. Shoemaker also demonstrates how to use Rational XDE for effective model-driven development.

download

The Elements of UML(TM) 2.0 Style

Product Description
For all developers who create models using the Unified Modeling Language (UML) 2.x The Elements of UML(TM) 2.0 Style sets the rules for style that will improve your productivity - especially in teams, where understandability and consistency are critical. Coming from renowned UML expert Scott Ambler, the book furnishes a set of rules for modelling in the UML and describes a collection of standards and guidelines for creating effective UML diagrams that will be concise and easy to understand.

It provides conventions for: Class diagrams; Timing Diagrams; Use case diagrams; Composite Structure Diagrams; Sequence diagrams; Interaction Overview Diagrams; Activity diagrams; Object diagrams; State machine diagrams; Package diagrams; Communication diagrams; Deployment diagrams and Component diagrams. The Elements of UML(TM) 2.0 Style sets the rules for style that will improve your productivity.

download

Oracle Magazine May/June 2009
92 pages | English | PDF | 14 MB

download

Frustrated Spin Systems

Product Description
Frustrated spin systems have been first investigated five decades ago. Well-known examples include the Ising model on the antiferromagnetic triangular lattice studied by G H Wannier in 1950 and the Heisenberg helical structure discovered independently by A Yoshimori, J Villain and T A Kaplan in 1959. However, many properties of frustrated systems are still not well understood at present.

Recent studies reveal that established theories, numerical simulations as well as experimental techniques have encountered many difficulties in dealing with frustrated systems. This volume highlights the latest theoretical, numerical and experimental developments in the field. The book is intended for post-graduate students as well as researchers in statistical physics, magnetism, materials science and various domains where real systems can be described with the spin language. Explicit demonstrations of formulae and full arguments leading to important results are given.

download

Strategies for Sustainable Architecture

Product Description
Filling a gap in existing literature on sustainable design, this new guide introduces and illustrates sustainable design principles through detailed case studies of sustainable buildings in Europe, North America and Australia. The guide will provide the reader with a deeper understanding of the design issues involved in delivering sustainable buildings, and giving detailed description of the process of integrating principles into practice. One hundred buildings, ranging from small dwellings to large commercial buildings, and drawn from a range of countries, demonstrate best current practice. The sections of the book are divided into design issues relating to sustainable development, including site and ecology, community and culture, health, materials, energy, and water. With over 400 illustrations, this highly visual guide will be an invaluable reference to all those concerned with architecture and sustainability issues.

download

City Edge: Contemporary Discourses on Urbanism

Product Description
This series of essays outlines a number of case studies from Europe, North America, Australia and Asia and provides first hand accounts of the experiences that planners, architects and politicians have had in reshaping cities. These insights provide a pragmatic assessment of the challenges and constraints posed by changing patterns of urban growth in a broad spectrum of urban environments. The reader will discover, through these multiple voices and views, the diverse forms of global cities, and will have a grasp of where the debate on urban design stands today, and where it may be going in the future.

1. Hear first hand from planners and architects who have worked on some of the most challenging urban design projects
2. Gain an insight into the latest debates on urban design, including reconstruction and sustainability
3. International examples from Melbourne through Tokyo to New York provide a global perspective on the subject

download

Glass & interactive building envelopes

Product Description
The main objective of the COST Action C13 was to increase the knowledge of properties and possibilities of glazing in order to increase the performance of building envelopes, to reduce the energy consumption and to improve the quality of life with respect to interior space, impact on the environment and human welfare.

This collection of papers presented at meetings and workshops of the COST C13 working groups 1 (Architectural Aspects and Design Integration), 2 (Quality of Interior Space) and 3 (Structural Aspects of Glass) are the result of 5 years of exchange of ideas, experiences and know-how between members, delegates and experts. It represents the body of knowledge from a restricted but representative group of professionals in Europe on the subject of glass building envelopes. The Steel Structures Laboratory at Ecole Polytechnique Fédérale de Lausanne (CH) and the research group ‘Façades & Systems’ of the Faculty of Architecture at Delft University of Technology (NL) have taken the initiative to publish these COST C13 papers in order to disseminate the knowledge to the world of glass façade professionals and to contribute to the development of a new generation of high-performance glass building envelopes.

download

Structural Design - Structural Foundation Designers' Manual

This manual for civil and structural engineers aims to simplify as much as possible a complex subject which is often treated too theoretically, by explaining in a practical way how to provide uncomplicated, buildable and economical foundations.

It explains simply, clearly and with numerous worked examples how economic foundation design is achieved. It deals with both straightforward and difficult sites, following the process through site investigation, foundation selection and, finally, design.

download