Web Application Security, A Beginner’s Guide

October 18, 2011

 

 

 

Web Application SecurityWeb Application Security, A Beginner’s Guide

Authors: Bryan Sullivan, Vincent Liu
ISBN: 9780071776165 / 0071776168
©2012 | 1st Edition | 352 pages | Paperback
Pub Date: DEC-11
Price: US$ 40.00
Learn More

 

 

Security smarts for the self-guided IT professional! Learn how to secure Web applications from today’s sneakiest hackers.

True to the hallmarks of our Secure Beginner’s Guides series, Web Application Security, A Beginner’s Guideimparts the hard-learned lessons and experiences of top security professionals, and provides know-how that can otherwise take you years to learn. This book takes you from a professional beginner-level to an up-and-running level of proficiency through a complete overview of Web application security. Important tips and key techniques plus the most common terminology you must know are all clearly explained.

Hackers are smart but security professionals need to be smarter. This book provides you with an actionable, rock-solid foundation in Web application security — from a thorough review of the tools and resources essential to Web application security to the trade’s best practices for detecting vulnerabilities and protecting applications. The aim of this series is to help you work a bit more expertly than your actual years of hands-on experience.

Web Application Security, A Beginner’s Guide features:

  1. Lingo—Concise definitions of frequently used security terms
  2. In Actual Practice—Real-world examples of security concepts in context
  3. Budget Note—Tips for optimizing security processes and technologies to align with an organization’s budget
  4. IMHO—Cautionary advice on errors to avoid, based on the authors’ life lessons
  5. Your Plan—Customizable, on-the-job planning checklists
  6. Into Action—Hands-on exercises that show how to apply new skills

 

 

About the Authors

Vincent Liu, CISSP, is a managing partner at Stach & Liu. He previously led the Attack & Penetration and Reverse Engineering teams for Honeywell’s Global Security group, was a consultant at Ernst & Young Advanced Security Centers, and was an analyst at the National Security Agency. Vincent speaks at industry conferences, including Black Hat, ToorCon, and Microsoft’s BlueHat.

Bryan Sullivan, who is currently Senior Security Researcher at Adobe Systems, has previously served in the roles of Security Program Manager at Microsoft, Senior Security Researcher at SPI Dynamics (a Web application security software & services company purchased by Hewelett-Packard) and held software engineer roles with Click Commerce, Primus Knowledge Solutions, 2order.com, Advanced Technology Services, and Lanier Worldwide. He is the author of Ajax Security (Addison-Wesley).

 

 

 

Other books you might be interested:

  1. 9780071626750     24 Deadly Sins of Software Security
  2. 9780071740647     Hacking Exposed Web Applications

 

 

 

 


Microsoft Office 2010 DeMYSTiFieD

October 18, 2011

Microsoft Office 2010 Microsoft Office 2010 DeMYSTiFieD

Author: Karin Rex
ISBN: 9780071767958 / 0071767959
©2012 | 1st Edition | 464 pages | Paperback
Pub Date: NOV-11
Price: US$ 22.00
Learn More | DeMYSTiFieD Series

 

Master all the Office 2010 features with ease!

Microsoft Office 2010 DeMYSTiFieDtakes you through the whole suite, application-by-application, providing clear, task-oriented procedures for every key feature. Each chapter begins with clearly stated objectives and ends with a summary and quiz, making it simple to for you to discern what the chapter will teach and enabling you to assess your skills as you complete the reading.

Terms, definitions, and real-life challenges, paired with realistic solutions, are found in each chapter. The book also serves as a handy reference for anyone who needs to learn or be reminded of how to perform a specific task. It is also useful study tool for students seeking user certification as a Microsoft Office Specialist (MOS).

Microsoft Office 2010 DeMYSTiFieD

  1. Written by a teacher who has trained more than 10,000 students, in person, to use Microsoft Office
  2. Uses procedure-based approach that takes each Office application feature and explains and demonstrates its use in a real-world scenario, focusing on tasks
  3. Chapter-opening objectives offer you insight into what you’re going to learn in each step
  4. Questions at the end of every chapter reinforce learning and pinpoint weaknesses
  5. “Still Struggling?” icon offers specific recommendations for those having difficulty with certain subtopics
  6. Includes a final exam for overall self-assessment
  7. “Curriculum Tree” shows how the topic covered in the book fits into a larger curriculum

 

 

About the Author

Karin Rex is a nationally known technology trainer as well as a frequent speaker/evangelist on various facets of the Internet and other technology-related topics. Since 1989, She has owned Geeky Girl, LLC (formerly ComputerEase), a computer training and technical writing firm based in southeastern Pennsylvania, where she devotes her time to writing, course development (e-learning, synchronous and traditional), consulting, teaching, and speaking. Karin has written several technology-related books and hundreds of user guides, reference manuals, tutorials and course manuals for a wide variety of clients. She teaches university courses in professional writing.

 

 

Other books you might be interested:

  1. 9780071741606    Microsoft Office 2010 QuickSteps

 

Read the rest of this entry »


CEH Certified Ethical Hacker All-in-One Exam Guide

September 2, 2011

CEH Certified Ethical Hacker CEH Certified Ethical Hacker All-in-One Exam Guide

Author: Matt Walker
ISBN: 9780071772297 / 0071772294
©2012 | 1st Edition | 712 pages | Softback with CD
Pub Date: SEP-11
Price: US$ 50.00
Sample Ch02 | Table of Contents | Learn More

A comprehensive guide to the CEH exam

CEH Certified Ethical Hacker All-in-One Exam Guideoffers complete coverage of the CEH certification which certifies individuals in the specific network security discipline of ethical hacking from a vendor-neutral perspective. The book covers all objectives for the new CEH exam, and provides an integrated study system based on proven pedagogy. Special elements reinforce and teach practical skills, including: step-by-step exercises, exam watch and on-the-job call-outs, and chapter self tests, which include knowledge- and scenario-based questions and one case study-based lab question per chapter. The book and CD combined contain more than 400 practice exam questions. Special coverage of DOD 8570 requirements and US-CERT’s EBK and Certified Computer Security Incident Handler (CSIH) standards are included.

CEH Certified Ethical Hacker All-in-One Exam Guide

  • Offers in-depth coverage of all official objectives for the CEH exam
  • Includes CD-ROM with two practice exams, lab simulations, video training from the authors, and an e-book
  • Co-written by security experts and experience trainers
  • Serves as a valuable on-the-job reference after certification

 

About the Author

Matt Walker (Ft. Lauderdale, FL), CCNA, CCNP, MCSE, CEH, CNDA, CPTS, is the IA Training Instructor Supervisor and a Sr. IA Analyst at Dynetics, Inc., in Huntsville, Alabama. An IT education professional for over 15 years, Matt served as the Director of Network Training Center and the Curriculum Lead and Senior Instructor for the local Cisco Networking Academy on Ramstein AB, Germany. After leaving the US Air Force, Matt served as a Network Engineer for NASA’s Secure Network Systems, designing and maintaining secured data, voice and video networking for the agency.

 

Other books you might be interested:

  1. 9780071601238     Mike Meyers’ CompTIA Security+ Certification Passport
  2. 9780071601276     CompTIA Security+ All-in-One Exam Guide
  3. 9780071602174     CISSP All-in-One Exam Guide

Oracle VM Implementation and Administration Guide

July 21, 2011


Oracle PressOracle VM Implementation and Administration Guide

Author: Edward Whalen
ISBN: 9780071639194 / 0071639195
©2011 | 1st Edition | 448 pages | Paperback
Pub Date: AUG-11
Price: US$ 50.00
Podcast | Sample Ch 01 | Learn More

 

The Oracle Press guide to setting up and administering Oracle VM

Oracle VM Implementation and Administration Guideshows you how to install, configure, and utilize Oracle VM—the powerful virtualization solution. Basic and advanced topics, such as configuring HA Virtual Machine Servers, are included. This practical guide explains how to size servers for Oracle VM and how to choose the right virtualization hardware. The book covers Oracle VM architecture and offers best practices for implementation and use.

 

Oracle VM Implementation and Administration Guide

  • Covers Oracle VM and the Oracle Enterprise Linux operating system
  • Contains complete details on installing and administering Oracle VM
  • Includes tips, techniques, and tools for optimizing Oracle products on Oracle VM
  • Offers advice on choosing the best virtualization hardware

 

 

About the Author

Edward Whalen (Texas)is Chairman and CEO of Performance Tuning Corporation (www.perftuning.com), a consulting company specializing in database performance tuning, administration, high-availability and security solutions. Prior to Performance Tuning Corp., Mr. Whalen worked at Compaq Computer Corporation in the capacity of OS developer, and then as database performance engineer. He has extensive experience in database system design and tuning for optimal performance. His career has consisted of hardware, OS, and database development projects for many different companies.

Mr. Whalen is the author of 9 books on the Oracle and Microsoft SQL Server databases for Oracle Press, Addison-Wesley, MacMillan and Microsoft. In addition to writing, he has worked on numerous benchmarks and performance tuning projects with both Oracle and MS SQL Server. Mr. Whalen is recognized as a leader in database performance tuning and optimization.

 

 

Other book you might be interested:

  1. 9780072230536     Oracle Database 10g Linux Administration

Read the rest of this entry »


Windows 7 SP1 QuickSteps

June 2, 2011

Windows 7 SP1

Windows 7 SP1 QuickSteps

Author: Marty Matthews
ISBN: 9780071772471 / 0071772472
©2011 | 1st Edition | 272 pages | Paperback
Pub Date: JUL-11
Price: US$ 20.00
Sample Ch 01| Learn More | QuickSteps Series

 

This full-color, visual guide to Windows 7 is the fastest, easiest way to get up and running on the latest version of Windows.

Windows 7 SP1 QuickStepsis filled with color screenshots and step-by-step instructions to help you get started on Windows 7 Service Pack 1. Learn how to customize the interface, manage files and programs, connect to the Internet, set up and use email, establish a network, control security, and enjoy movies and music. The book covers the essentials up to more advanced features of Windows 7.

 

Windows 7 SP1 QuickSteps

  • Covers all that’s new in Windows 7 Service Pack 1
  • Includes details on Internet Explorer 9, Windows Live Mail 2011, and Windows Live Essentials
  • Features full-color graphics along with step-by-step tutorials
  • High production value, loads of information, and an low price make this book the best value on the market

 

About the Author

Marty Matthews (Langley, WA) is the author or coauthor of more than 70 books–including the bestselling Windows XP QuickSteps and its successor Windows Vista QuickSteps from McGraw-Hill. He is the co-creator of the QuickSteps series with his wife Carole Matthews, who is also a successful computer book author. The husband-and-wife team specializes in explaining complex computing topics to beginners.

 

Other books you might be interested:

  1. 9780072263824     Windows Vista QuickSteps
  2. 9780071635691      Windows 7 QuickSteps

Java The Complete Reference

June 2, 2011

Java 7

Java 7 The Complete Reference

Author: Herbert Schildt
ISBN: 9780071606301 / 0071606300
©2011 | 8th Edition | 1056 pages | Paperback
Pub Date: JUL-11
Price: US$ 60.00
Sample Ch 02 | Learn More

 

The Definitive Guide for Java Programmers

In this international bestseller, top-selling programming author Herbert Schildt shows you everything you need to develop, compile, debug, and run Java programs. The book has been updated to cover the latest version of the world’s number-one programming language.

Java 7: The Complete Reference, Eighth Edition covers all of the Java 7 features, including closures, superpackages, reified generic types, the enhanced switch statement, chained method invocations, extension methods, the enhanced catch statement, and enum values. The book also includes details on the Swing Application Framework and a chapter on language-level XML support.

 

About the Author

Herb Schildt (Mahomet, IL) is the world’s leading programming author, whose books have sold more than 3.5 million copies worldwide. His acclaimed books include Java: The Complete Reference, C++: The Complete Reference and C#: The Complete Reference.

 

 

 


RHCSA/RHCE Red Hat Linux Certification Study Guide (Exams EX200 & EX300)

May 23, 2011

 

 

RHCSA/RHCE Red Hat Linux CertificationRHCSA/RHCE Red Hat Linux Certification Study Guide (Exams EX200 & EX300)

Author: Michael Jang
ISBN: 9780071765657 / 0071765654
©2011 | 6th Edition | 896 pages | Softback with CD
Pub Date: JUL-11
Price: US$ 60.00
Sample Chapter 01 | Learn More

 

Fully revised to cover the Red Hat Certified Engineer exam revision based on Red Hat Enterprise Linux 6

Updated for the release of Red Hat Enterprise Linux 6 and the related Red Hat Certified Engineer certification exam revision, RHCE Red Hat Certified Engineer Linux Study Guide, Sixth Editionprovides complete coverage of all official exam objectives and the revised format for the RHCE exam. The RHCE exam revises twice annually and the latest exam update has removed multiple-choice questions from the exam completely, moving to a solely lab-based testing format. This integrated study system is based on proven pedagogy. Special elements reinforce and teach practical skills while preparing you for this difficult, hands-on exam.

Each chapter includes step-by-step exercises, exam watch and on-the-job elements, chapter drills, and self tests. Self-test sections include simulated lab questions that mimic the look and feel of the actual exam. The study guide also includes two complete practice lab exams available on the CD-ROM. All practice exam lab questions receive detailed explanations as to why the answer is the correct answer.

RHCE Red Hat Certified Engineer Linux Study Guide, Sixth Edition

  • Offers proven lab-based exam preparation for RHCE; plus coverage of the RHCT exam objectives
  • Provides complete coverage of all exam objectives and performance-based requirements related to the exam, including difficult lab-based questions
  • Includes two complete RHCE practice exams—purchased separately, practice exams can cost more than $50; each exam features hands-on lab exams

 

About the Author

Michael Jang, (Kill Devil Hills, NC), LCP, MCSE, RHCE, is the author of a number of books covering such topics as GNU, Linux, and MCSE. Michael is the author behind the last two best-selling editions of the RHCE Study Guide (McGraw-Hill), and is also the author of the CompTIA Linux+ Exam Cram and Sair Linux/GNU Installation and Configuration Exam Cram (Wiley), and co-author of Mastering Red Hat Linux for Sybex. Michael has developed white papers on new products and processes, is a skilled communicator, experienced troubleshooter, and a seasoned project manager. Michael has extensive overseas experience, and currently resides in Kill Devil Hills.

 

Read the rest of this entry »


Oracle Fusion Middleware 11g Architecture and Management

May 19, 2011

 

Oracle Fusion Middleware 11g Architecture and ManagementOracle Fusion Middleware 11g Architecture and Management

Authors: Reza Shafii, Stephen Lee, Gangadhar Konduri
ISBN: 9780071754170 / 0071754172
©2011 | 1st Edition | 560 pages | Paperback
Pub Date: JUN-11
Price: US$ 60.00
Learn More

 

A complete Oracle Press guide to Oracle Fusion Middleware 11g

Featuring best practices for deploying, securing, virtualizing, and managing enterprise-grade Oracle Fusion Middleware applications throughout all life-cycle phases, Oracle Fusion Middleware 11g Architecture and Management is organized into two parts. Part I provides an end-to-end description of the architecture of Oracle Fusion Middleware components—WebLogic Server, SOA Suite, WebCenter, Oracle ADF, and Oracle Identity and Access Management Suite—with each chapter introducing a different component of the Oracle Fusion Middleware 11gstack. Each chapter in this section introduces a sample use case which shows how the concepts discussed apply to a real-life scenario. Part II focuses on provisioning, securing, optimizing, monitoring, and virtualizing for applications built on Oracle Fusion Middleware.

 

Oracle Fusion Middleware 11g Architecture and Management

  • Targets life-cycle management for Oracle Fusion Middleware 11gbuilt enterprise applications
  • Covers the entire stack of Oracle Fusion Middleware 11gcomponents in depth
  • Provides an end-to-end detailed description of Oracle Fusion Middleware SOA, WebCenter, ADF, and IDM system architecture as well as their dependencies on common components
  • Describes patterns in which the components of each Oracle Fusion Middleware product suite can be configured and deployed, as well as the trade-offs that should be considered
  • Includes advanced topics in the areas of provisioning, securing, optimizing, monitoring, and virtualizing for an enterprise-grade application built on Oracle Fusion Middleware
  • Highlights best practices—a series of opinions based on the authors’ field experience
  • Features a real-world, complex, distributed application throughout the book, leveraging key Oracle WebLogic Server, SOA, ADF, and WebCenter feature

 

 

About the Authors

Reza Shafii (San Francisco, CA)is a Senior Principal Product Manager within the Oracle Fusion Middleware Platform Architecture team. Reza is responsible for ensuring that all Oracle Fusion Middleware products are architecturally aligned, optimized for life-cycle management, and tightly integrated. In this role, Reza has developed an in-depth understanding of the FMW products and their use by customers. Reza blogs and speaks at local user groups and large conferences such as Oracle OpenWorld.

Stephen Lee (San Francisco, CA)is a Principal Product Manager, Oracle Identity and Access Management. Stephen focuses in the area of Identity Administration, Audit and Compliance as well as Middleware Security. Prior to joining the product management team, Stephen led the design and development of the application runtime and deployment security model for Oracle Application Server 10g. Previously, Stephen was a key developer for Oracle Internet Directory, an LDAP directory product.

Paul Encarnación (Bethesda, MD) is a Director in development with Oracle.

 

 

Other books you might be interested:

  1. 9780072255836     Oracle JDeveloper 10g Handbook
  2. 9780071602389     Oracle JDeveloper 11g Handbook
  3. 9780071622547     Oracle Fusion Developer Guide
  4. 9780071629324     Oracle WebCenter 11g Handbook

 

 

Read the rest of this entry »


The Data Warehouse Mentor

May 19, 2011

 

Data Warehouse The Data Warehouse Mentor
Practical Data Warehouse and Business Intelligence Insights

Author: Robert Laberge
ISBN: 9780071745321 / 0071745327
©2011 | 1st Edition | 416 pages | Paperback
Pub Date: JUN-11
Price: US$ 50.00
Sample Chapter | Learn More

 

Proven strategies for implementing the right data warehouse and business intelligence solutions for current and future business needs

In The Data Warehouse Mentor: Practical Data Warehouse and Business Intelligence Insights, business intelligence and data warehousing expert Robert Laberge explains the components and different alternatives in building a data warehouse and describes pros and cons for choosing one path over another. Building a data warehouse is unique for each organization but can be guided by the author’s years of knowledge obtained from working on many differing data warehouse and business intelligence environments in organizations around the world.

The book covers practical and technical aspects of current data warehouse and business intelligence issues with views on realistic solutions within the management and technical arenas. Data warehousing topics are first presented from a high-level overview to ensure the terminology and context is understood, and are then covered in deeper detail to clarify the specifics. These topics all pertain to data warehousing, business intelligence, and performance management.

 

The Data Warehouse Mentor

  • Explains the proper implementation of the many available technologies and practices
  • Shares the author’s nearly 30 years of data warehouse and business intelligence experience in more than 20 countries worldwide
  • Mentors you to success in determining and deploying the most effective data warehouse and business intelligence solutions for your business
  • Helps you anticipate future data requirements and usage to ensure the design and build environment for your solution is flexible and open to change

 

About the Author

Robert (Bob) Laberge (CA) is currently a lead principle consultant for the IBM world centre lab for Industry Models and Assets in Dublin which focuses on data warehousing and business intelligence solutions. Bob has helped over 50 large organizations including Target, Qwest, ING, Mayo Clinic, Canadian Tire, Shoppers Drug Mart, BMW, Korea Telecom, Scotiabank, Capital One, Reliance Infocomm, and Tata Group in this area. Bob has a Masters of Business Administration from the University of Durham in Durham, UK and has nearly 30 years in Information Technology. His IT interests started at Saint Francis Xavier University in Nova Scotia in 1979, entered the business / IT world in Montreal soon after and has since travelled the world in over 20 countries mentoring, training, demonstrating data warehouse and business intelligence practicalities and solutions.

 

Other books you might be interested:

  1. 9780072262650     BusinessObjects XI (Release 2): The Complete Reference
  2. 9780071498524      IBM Cognos 8 Business Intelligence: The Official Guide
  3. 9780071548083     Microsoft SQL Server 2008 Reporting Services

 

Read the rest of this entry »


Microsoft Project 2010 The Complete Reference

May 19, 2011

 

Microsoft Project 2010 Microsoft Project 2010 The Complete Reference

Authors: George Angel, Keith Hansen
ISBN: 9780071749312 / 0071749314
©2011 | 1st Edition | 704 pages | Paperback
Pub Date: JUN-11
Price: US$ 50.00
Learn More

 

Written by project management experts, this comprehensive guide explains how to use all of the enhanced features and expanded functionality of Microsoft Project 2010

Microsoft Project 2010: The Complete Referencewill help any project manager—beginner to expert—jumpstart a new or existing project and effectively use Microsoft Project 2010 to stay on schedule and on budget, meet customer expectations, and minimize risk. Successful project management requires mastery of this industry-leading tool and this book’s focus is all about timely and accurate reports and a clear, shared vision of project deliverables using Microsoft Project.

This definitive guide covers the improved project and portfolio management features and the enhanced view and report capabilities, empowering project managers with an automated method of concise communication and razor-sharp performance analysis and management. Two real-world case studies illustrate 1) how to jumpstart a new project and 2) how to effectively step into an existing project and gain the ability to quickly assess and improve the project, even if it is failing. You will gain critical project management skills from this authoritative resource.

 

Microsoft Project 2010: The Complete Reference

  • Teaches Project 2010 essentials along with necessary concepts and skills to turn data, requirements, and ideas into a powerful foundation to drive an entire project from charter to close with proven results
  • Covers Project 2010 scheduling basics to ensure accuracy at each step of a project, regardless of scope
  • Includes thorough explanations of new reporting tools and shows how to message the current state of each stage of a project
  • Features real-world case studies that highlight skills and concepts
  • Contains information based on the authors’ combined 40 years of project management success and hundreds of courses taught

 

About the Authors

George G. Angel, PMP, IBM Certified Executive Project Manager (Fort Collins, CO)logged more than 27 years as a successful project manager and 39 years with IBM.He created and managed a Global Delivery Program Management Education Program for IBM that reaches over 3,000 IBM project executives and managers each year. George is founder and manager of Eagle Business Services, a project management education and consulting company. He teaches PMP exam prep and Project Management Certificate courses.

Keith Hansen (Orangevale, CA) is a senior trainer and consultant with over 19 years of project management-related experience. Keith started as a Microsoft Project Certified consultant in 1991 and was an early pioneer of the project portfolio management process. He has developed a tool set using Microsoft Project to manage projects, and has written templates and manuals for project management.

 

Other books you might be interested:

  1. 9780072263411      How to Do Everything with Microsoft Office Project 2007
  2. 9780071626736     PMP Project Management Professional Study Guide
  3. 9780071633703     PMP Certification, A Beginner’s Guide

 

Read the rest of this entry »


Follow

Get every new post delivered to your Inbox.