Open Source Security Tools : Practical Guide to Security Applications

Few frontline system administrators can afford to spend all day worrying about security. But in this age of widespread virus infections, worms, and digital attacks, chances are their jobs depend on how well their network defenses hold.

Written with the harried IT manager in mind, Open-Source Security Tools is a practical, hands-on introduction to open-source security tools. Seasoned security expert Tony Howlett has reviewed the overwhelming assortment of these free and low-cost solutions to provide you with the "best of breed" for all major areas of information security.

Inside, you'll find everything from how to harden Linux and Windows systems to how to investigate breaches with Sleuth Kit, Autopsy Forensic Browser, and Forensic Tool Kit. For each security task described, the author reviews the best open-source tools and how to use them and also provides a case study and sample implementation. Covered tasks include:

• Installing an open-source firewall using Ipchains, Iptables, or T/REX
• Scanning ports and testing vulnerability using Nmap, Nlog, Nmap for Windows, Nessus, or NessusWX
• Using sniffers and network-intrusion systems, including Tcpdump, Ethereal, Windump, Snort—, and Snort— for Windows
• Tracking and analyzing collected data with Swatch, ACID, and NCC
• Encrypting communications with PGP, GPG, SSH, S/WAN, and John the Ripper

This handy reference also tackles the emerging field of wireless security and tools such as Kismet Wireless, Airsnort, and Netstumber. An accompanying CD-ROM contains full versions of all of the tools for easy access and installation as well as RFCs and other useful information.

Whether you're a Windows system administrator or a network administrator, you will come away with an understanding of how open-source security tools can help protect your organization and further your own career.

 

Table of Contents:

 Preface. 
 1. Information Security and Open Source Software. 
 2. Operating System Tools. 
 3. Firewalls. 
 4. Port Scanners. 
 5. Vulnerability Scanners. 
 6. Network Sniffers. 
 7. Intrusion Detection Systems. 
 8. Analysis and Management Tools. 
 9. Encryption Tools.
10. Wireless Tools.
11. Forensic Tools.
12. More Open Source Security.
Appendix A: Common Open Source Licenses.
Appendix B: Basic Linux/Unix Commands.
Appendix C: Well-Known TCP/IP Port Numbers.
Appendix D: Port Scanning and Vulnerability Testing: General Permissions and Waiver.
Appendix E: Nassus Plugins.
Index.