Subscribe Free! to the NewTechReview Consumer Technology Newsletter|
WHAT: It's here: the much anticipated first book by computer security researcher Michal Zalewski, "Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks." Truly unlike anything else out there, this book is a fascinating narrative that explores a variety of unique, uncommon and often quite elegant security challenges that defy classification and eschew the traditional attacker-victim model. Includes introduction by Openwall Project leader Solar Designer.
EARLY REVIEWS: "Zalewski's new work is a demonstration of how seemingly innocuous observations can lead to security vulnerabilities. He works like a detective, piecing together basic facts and evidence, until at last, in a moment of understanding, you find out why your RNG may help disclose your keystrokes or how someone can tell what OS your run by looking at your packets." -- Elias Levy (Aleph1), BUGTRAQ
"Zalewski has taken taken a powerful, low-level approach to information security. He covers many issues not discussed before in so comprehensive a volume, including issues of random memory, the inner workings of computers, electronic emissions and concepts of passive data collection." -- Lance Spitzner, Honeynet Project
"Zalewski is a rare gem of a person, pursuing pure discovery and investigation and artfully combining this with his great intelligence. We're all considerably wiser for hearing his perspective on things." -- Jose Nazario, infosec Daily
WHO CARES?: More narrative than reference work, this book will be riveting reading for security professionals and students as well as technophiles interested in learning about how computer security fits into the big picture and high-level hackers seeking to broaden their understanding of their craft. Mixing elements of computer science, mathematics and electronics, "Silence on the Wire" is provocative and challenging. Rather than approaching computer security as a separate discipline, Zalewski delves into the nuts and bolts of modern-day computing so that readers will ponder network design and their own computing activities from a new perspective. Where other books merely chronicle security exploits, Zalewski provides explanations. He addresses real, significant lapses in computer security that are not well known or, in some cases, aren't even well understood by experts.
AUTHOR INFO: Michal Zalewski is a self-taught information security researcher who has worked on topics ranging from hardware and OS design principles to networking. He has long been known and respected in the hacking and security communities for his intelligence, curiosity and creativity. He's been a prolific bug hunter and a frequent BUGTRAQ poster since the mid '90s, has authored popular security utilities and has published a number of acclaimed security research papers.
For more information: Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks