Hack I.T. - Security Through Penetration Testing

• Start-to-finish coverage: discovery, enumeration, vulnerability mapping, and exploitation.
• Fix the top 50 network security problems.
• Testing your intrusion detection and response capabilities -- in depth.

Using penetration testing, you can hack into your own systems to discover their vulnerabilities -- and fix them, before hackers take advantage of them. This is the first complete guide to every stage of penetration testing: discovery, enumeration, vulnerability mapping, and exploitation. Two leading security experts cover every key technique and tool, demonstrate how to plan for penetration testing, minimize the risks, and act on the lessons you learn. Drawing on their extensive consulting experience, they identify 50 common pitfalls in technology and network defense, presenting realistic solutions. Next, they introduce a framework that organizes penetration testing into four stages: finding the target network, identifying vulnerable services, exploiting weaknesses, and documenting results. They review commercial and open source penetration testing tools, providing many of them on CD-ROM. By using this framework and these tools, network security professionals can perform penetration tests that are well-structured, efficient, repeatable, and provide clear information for action.

T.J. Klevinsky and Scott Laliberte are Managers of Ernst & Young's Security Technology Solutions practice, responsible for coordinating attack and penetration exercises and instructors for the company's Extreme Hacking course. Klevinsky is an instructor of a SANS security course. Jay Gupta is with Deloitte and Touche.