Implementing and Administering Security in a Microsoft® Windows Server™ 2003 Network

This kit covers the material of two core exams for the MCSE. It packs the tools and features exam candidates want most including in-depth, self-paced training based on exam content; exam tips from an expert, exam-certified author; and a robust testing suite. It also provides real-world scenarios, case study examples, and troubleshooting labs for the skills and expertise you can apply to the job. Focusing on implementing and administering network security in a Windows Server 2003 environment, the official study guide covers implementing, managing, and troubleshooting security policies, patch management infrastructure, security features for network communications, and planning, configuring, and troubleshooting authentication, authorization, and PKI.

(Click image go to Amazon.co.uk)

Computer Forensics JumpStart

Computer forensics is a broad field that encompasses such disciplines as network intrusion detection; computer media analysis for criminal, fraud, and counterintelligence investigations; evidence seizure and crime scene analysis; high-level system security design and maintenance; and more. Recent technological developments have catapulted computer forensics outside the realm of Cold War spy movies into the world of modern corporate crime and counterterrorism investigations. In addition, the passage of the Sarbanes-Oxley Act has compelled companies to expand their internal controls efforts. As a result, computer forensics is the fastest growing segment in both the IT and law enforcement industries.

(Click image go to Amazon.co.uk)

The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws

This book is a practical guide to discovering and exploiting security flaws in web applications. The authors explain each category of vulnerability using real-world examples, screen shots and code extracts. The book is extremely practical in focus, and describes in detail the steps involved in detecting and exploiting each kind of security weakness found within a variety of applications such as online banking, e-commerce and other web applications. The topics covered include bypassing login mechanisms, injecting code, exploiting logic flaws and compromising other users. Because every web application is different, attacking them entails bringing to bear various general principles, techniques and experience in an imaginative way. The most successful hackers go beyond this, and find ways to automate their bespoke attacks.This handbook describes a proven methodology that combines the virtues of human intelligence and computerized brute force, often with devastating results. The authors are professional penetration testers who have been involved in web application security for nearly a decade.

They have presented training courses at the Black Hat security conferences throughout the world. Under the alias "PortSwigger", Dafydd developed the popular Burp Suite of web application hack tools.

(Click image go to Amazon.co.uk)

Introduction to Computing in Criminal Justice

For a first course in computing for criminal justice, law enforcement, and administration of justice students. A complete, practical, user/applications-oriented course in computing - with text, microcomputer lab manual, software, and video-taped lessons, this package presents a solid foundation in the skills and knowledge required for using the computer in carrying out the specific kinds of tasks that are encountered on the job in various aspects of law enforcement. It covers the fundamentals of DOS, word processing, database management, spreadsheet, and automated police information systems.

(Click image go to Amazon.co.uk)