Amazon.com
In defending your systems against intruders and other meddlers, a little knowledge can be used to make the bad guys--particularly the more casual among them--seek out softer targets. Counter Hack aims to provide its readers with enough knowledge to toughen their Unix and Microsoft Windows systems against attacks in general, and with specific knowledge of the more common sorts of attacks that can be carried out by relatively unskilled "script kiddies." The approach author Ed Skoudis has chosen is effective, in that his readers accumulate the knowledge they need and generally enjoy the process.
The best part of this book may be two chapters, one each for Windows and Unix, that explain the essential security terms, conventions, procedures, and behaviors of each operating system. This is the sort of information that readers need--a Unix person getting into Windows administration for the first time needs an introduction to the Microsoft security scheme, and vice versa. A third chapter explains TCP/IP with focus on security. With that groundwork in place, Skoudis explains how (with emphasis on tools) attackers look for vulnerabilities in systems, gain access, and maintain their access for periods of time without being discovered. You'll probably want to search online resources for more specific information--Skoudis refers to several--but this book by itself will provide you with the vocabulary and foundation knowledge you need to get the details you want. --David Wall
Topics covered: How black-hat hackers work, what tools and techniques they use, and how to assess and improve your systems' defenses. The author explains how Windows, Unix, and TCP/IP can be exploited for nefarious purposes, and details a modus operandi that's typical of the bad guys.
Customer Reviews:
Great book overall but..........2007-09-08
I can't argue with the fact that this is a great book to learn security. It also serves as a fantastic intro to networking with some really good insight into the interworkings of TCP/IP. One thing that is great about this book is the detail that the author goes into on each section. This should be required reading for all new security/network professionals. Its funny but the things that people take for granted that they know (foundational knowledge)are the very things that not many people in the field truly understand at a deep level. This book will help you to not be one of those people.
Only one real gripe - I know typos happen and errors are common in technical books BUT... in a chapter about TCP/IP to misspell the late Jon Postel's name is just unbelievable -- Wow. (p.32)
Excellent book for those interested in internet security.......2007-07-09
This book has done a great job at informing readers of network security. After supplying a little OS and networking background information the author composes the information in a way that an attacker would view it so the reader can get inside the mind of an intruder. I would highly recommend this book to anyone interested in how attacks are executed.
Execllent!.......2007-01-30
This book does not tell you how to use hacking-tools, but It teachs you how the tools work!
Insightful and Informative.......2006-12-04
As a student studying information technology with goals of having a career in the information systems security field, Mr. Skoudis' book "Counter Hack Reloaded" provides me with an amazing resource that is helping me obtain the knowledge and skills I need to succeed in the Infosec field. His book is insightful and explains the complexity and workings of varius threats and risks to our networks and computer systems in a way that makes them easy to understand. The steps attackers usually take are broken down and analyzed along with ways to secure your systems from such attacks.
The book is broken down into different phases after the few first chapters go over the basics of networking and the major operating systems (Windows and Linux/Unix). Phase One covers Reconnaissance which includes tactics such as social engineering. Phase Two is scanning and the different methods of scanning networks, both wired and wireless. Phase Three covers gaining access to the network through attacks on applications, OSs, DoS attacks, and other network attacks. Phase Four covers maintaining access, which includes information on varius threats such as backdoors, trojans, rootkits, etc. Phase Five reviews covering one's tracks and hiding evidence of network intrusions, etc.
I recommend this book to anyone in my position of currently obtaining an education in any field having to deal with information systems. Even if security is not your main focus, the knowledge this book provides is valuable as a reference and as a way of better understanding the current threats to our organizations and the networks that make them up, both the technical and personnel networks.
Counter Hack this Book.......2006-09-17
Counter Hack
Reloaded
Second Edition
by
Ed Skoudis
with
Tom Liston
Published by Prentice Hall, December 2005
ISBN 0-13-148104-5
This book is an absolute must have for every security professionals bookshelf. If you are new to the arena of Information Systems Security or a CISSP this book leads you down some extremely interesting vulnerability protection paths. Ed Skoudis gives an exhaustive look into the mind and intentions of the "Nasties" out there and how to protect yourself and your network from them.
The chapters are well laid out and each builds on the knowledge from the previous chapter(s). The Table of Contents allows for easy reference back to a specific chapter for later the material is cutting edge and well explained with references to additional material online.
All in all a very insightful book that made me double check all of my firewalls and filesystem protection methods and apply some of the knowledge learned.
Average customer rating:
- Good helpdesk book.
- Terrible Choice
- The one to get!!!
- Covers every detail, including some missed in other books
- Good Hands On Desk Reference
|
Running an Effective Help Desk, 2nd Edition
Barbara Czegel
Manufacturer: Wiley
ProductGroup: Book
Binding: Paperback
 Economics
| Business & Investing
| Subjects
| Books
| Agricultural
| Commercial Policy
| Comparative
| Consolidation & Merger
| Cooperatives
| Debt & Deficits
| Development & Growth
| Econometrics
| Economic Conditions
| Economic History
| Economic Policy & Development
| Exports & Imports
| Free Enterprise
| Inflation
| International
| Labor & Industrial Relations
| Macroeconomics
| Microeconomics
| Money & Monetary Policy
| Natural Resources
| Privatization
| Public Finance
| Statistics
| Sustainable Development
| Theory
| Unemployment
| Urban & Regional
Entrepreneurship
| Small Business & Entrepreneurship
| Business & Investing
| Subjects
| Books
Web Graphics
| Web Design
| Web Development
| Computers & Internet
| Subjects
| Books
Technical Support
| Business & Culture
| Computers & Internet
| Subjects
| Books
Information Systems
| Software Engineering
| Computer Science
| Computers & Internet
| Subjects
| Books
General
| Software Engineering
| Computer Science
| Computers & Internet
| Subjects
| Books
General
| Graphic Design
| Computers & Internet
| Subjects
| Books
General
| Networks, Protocols & APIs
| Networking
| Computers & Internet
| Subjects
| Books
General
| Computers & Internet
| Subjects
| Books
General
| Operating Systems
| Computers & Internet
| Subjects
| Books
All Deals
| Blowout Books
| Stores
| Books
Business & Investing
| Blowout Books
| Stores
| Books
Computers & Internet
| Blowout Books
| Stores
| Books
All Amazon Upgrade
| Amazon Upgrade
| Stores
| Books
Business & Investing
| Amazon Upgrade
| Stores
| Books
Computers & Internet
| Amazon Upgrade
| Stores
| Books
All Titles
| Qualifying Textbooks - Fall 2007
| Stores
| Books
Business & Investing
| Qualifying Textbooks - Fall 2007
| Stores
| Books
Computers & Internet
| Qualifying Textbooks - Fall 2007
| Stores
| Books
Similar Items:
-
How to Manage the IT Helpdesk - A Guide for User Support and Call Center Managers (Computer Weekly Professional)
-
Help Desk Practitioner's Handbook
-
Introduction to Help Desk Concepts and Skills
-
The Help Desk Audit: Blueprint for Success
-
A Guide to Help Desk Technology, Tools and Techniques
ASIN: 0471248169 |
Book Description
The definitive guide to setting up and running a successful Help Desk-now updated and expanded to include the latest Web-based technologies.
This book is for you if you are:
* A business manager charged with researching, planning, and setting up a Help Desk in your organization
* An IT manager who wants to improve the level of technical support and communication within your organization with the latest support technologies
* A Help Desk manager looking for guidance on how to upgrade traditional Help Desk functions with Internet- or intranet-related processes.
The thoroughly revised, updated, and expanded Second Edition of the critically acclaimed, first-ever guide to running an effective Help Desk, this book tells you everything you need to know to plan, budget, staff, implement, track, upgrade, and even outsource your organization's Help Desk. Drawing upon her extensive experience as a leading North American expert on Help Desk planning and management, author Barbara Czegel:
* Guides you step-by-step through every phase of setting up traditional and Web-related Help Desks for the Internet and an intranet
* Provides a wealth of practical advice on all technical, management, and human-factor aspects of running an effective Help Desk
* Supplies ready-to-use templates in both Word and HTML formats for an array of Help Desk projects.
On the companion website you'll find:
* Real-life Web-based Help Desk examples
* All the templates from the book in HTML and Word formats.
Customer Reviews:
Good helpdesk book........2003-03-18
Strong in case studies, surveying, outsourcing, metrics, prioritizing, support tools.
Terrible Choice.......2002-11-27
This book has a 1998 copyright date -- that's my own stupidity! To quote the author, "buy in haste, repent in leisure." I bought it because of the reviews on the site.
Always check the copyright date before you buy!
It is verbose and without substance.
If you've spent more than a week in any kind of enterprise environment, you should know most of what is in here.
If anyone really wants it, I'll gladly give you a good deal on my copy!
The one to get!!!.......2001-08-13
The reason I purchased this book was that I found myself creating a helpdesk from scratch. If you are looking for a how to book that will guide on the path of creating a very effective IT helpdesk, this is it. It will show you not only the right way to do things, but also alert you of possible pitfalls. It will teach you how to do things that not really come to mind right away, like how to hire the right people for the job, increasing your budget (to get more helpdesk techs!), the scope of your duties, etc. I keep it in my desk for quick reference.
Covers every detail, including some missed in other books.......2001-04-10
This thorough book provides a clear roadmap to designing, implementing and operating a help desk. The author leaves no key process out and completely covers everything from initial concept to measuring support effectiveness and process improvement.
Ms. Czgel starts with an initial strategy that is focused on planning help desk services that are completely aligned to requirements and are based on a mission statement. This business-oriented approach is refreshing and will keep IT grounded in the real reasons for a help desk. More importantly, in my opinion, is the process that she proposes for careful selection of services to provide. My experience has shown that an overly ambitious set of service goals will kill a help desk implementation early in its life by offering a too much before there is a stable help desk process in place. As such, Ms. Czgel's approach is realistic and lays the foundation for a success implementation. I especially liked the use of customer profiles and the emphasis on roles and responsibilities early in the planning process.
The section on the actual design of the help desk structure provides insights and information that can be applied to a large number of solutions. Since help desks will be organized in accordance with requirements and unique mission statements, this section of the book is like a catalog of patterns. I liked the excellent tips on how to best structure the help desk to meet requirements and mission. The information on accurately estimating staffing requirements is consistent with industry best practices and something that, believe it or not, is often overlooked when help desks are established. I also found the chapter on consolidating help desks valuable because this is a common project that many companies face. The advice given is sound and well thought out. Since my job is service delivery consulting this entire section was particularly valuable. Part three of the book gets into the meat by thoroughly covering the processes that are essential to running a help desk. Most of this material is not new or much different from what other help desk books provide, but there were a few topics that stood out as both unique [to books of this genre] and reflect best practices by the best-run help desks. Examples are change control, disaster recovery and vendor management. These topics show that the author not only considers business alignment, but also cross-functional alignment within IT.
Professional resources and underlying technology are provided in part four. In the first chapters the author points out sources of standards, best practices and other support, such as the Help Desk Institute, Software Support Professionals Association, etc. In the final chapters she provides a clear explanation of how technologies such as ACDs (automatic call distributors) and IVRs (interactive voice response) equipment work and how they can provide additional efficiencies to a well-run help desk operation. The author also provides good coverage of tools and techniques that will make help desk operations responsive to user needs as well as support internal IT processes and procedures.
This book wraps up with an in-depth coverage of operational requirements for the help desk once it has been implemented. It hits all of the critical success factors, such as performance metrics, service level agreements, communications and internal evaluations. I particularly liked the chapter on marketing, which is something that is important but not often done be most help desks. This proactive approach to keeping users (your customers) informed of new services, accomplishments and tips is excellent and will go a long way towards attaining high customer satisfaction scores - not to mention proving the value of the help desk to IT and business management.
As a service delivery consultant I found this book to be one of the best for planning and implementing a world-class help desk. I personally gained a lot of knowledge from it, and it reinforced some of my past experiences and accomplishments. It earns 5 stars and my highest recommendation.
Good Hands On Desk Reference.......1999-09-24
Provides a soild review of the fundmentals required to run and maintain an effective IT help desk.
I found the information for collecting and reporting help desk performance data to be of great value.
I use the collective information as a daily referecnce to help ensure that my help desk delivers top notch customer support.
Book Description
The Proven Program Used by 600,000 Job Hunters!
You put hours and hours of hard work into your job search and the companies you've contacted never call. It's a story all too common in the fast-paced, highly competitive world of job hunting. Nothing is more discouraging than sending one resumé after another into the job-hunting void. Eventually, you expect silence from the other end.
The Unwritten Rules of the Highly Effective Job Search was written so this never happens to you again. These techniques, developed by author Orville Pierson, have been used successfully for ten years by Lee Hecht Harrison (LHH), the world's premier career services company. Here, Pierson provides you with the job-search techniques that up to now have been limited to the LHH consultants he trains.
Orville Pierson has helped thousands of job hunters during his career, taking note of the characteristics that have led to success as well as failure. In The Unwritten Rules of the Highly Effective Job Search, he supplies key information on how professional job search consultants structure the job search project so you can apply the same winning strategies to your own search. You'll also be privy to inside information on how decision makers operate, enabling you to get the inside track on job openings before they are announced.
This insider's guide covers every phase of the job search, leading you step by step through the process of creating a clear-cut plan-essential to every job search. Using the Pierson Method, you'll learn how to
- Develop a Target List (the key ingredient to every job search)
- Measure your progress
- Create a “core message” about yourself that decision makers won't forget
- Present yourself in the best possible light to prospective employers
Using these strategies, Orville Pierson and LHH have helped 600,000 people land great new jobs. Employ the Pierson Method in your hunt for employment and you'll soon be doing what you love in the company that's right for you.
Customer Reviews:
somewhat helpful in organizing my search efforts.......2007-10-02
this book didn't say anything new that you can't find elsewhere or on the internet. but it surely saves me a lot of trouble googling by putting everything together.
Nice Overview... but there are better books out there.......2007-07-06
When I checked out this book, I was expecting some innovative method that would drastically change my approach to the job search. Instead, what I read was repackaged information that you could find on the Internet. Instead, I would recommend 10 Insider Secrets to a Winning Job Search: Everything You Need to Get the Job You Want in 24 Hours - Or Less. I found that book to be a more concise and thought provoking tool that helped me succeed in getting my most recent job as a Regional Sales Director.
Great Job Search Book.......2007-06-13
I have to tell you this book is outstanding. It was both very informative and entertaining. Searching for a job is never fun. And if you're fortunate, you'll never have to search for many jobs in your life. If you're not experienced at looking for work, the search process can be arduous at best. This book provides a structure/methodology by which to conduct a highly effective job search and helps ease the "pain" of looking for work. I would recommend it to anyone from a new college grad to an experienced executive.
At last....a book that "understands".......2007-02-05
As I read through the Pierson method I was so happy to see a job search method that combines an excellent description of the realities of a job search with a true understanding of the job seeker. Readers will come to know why they balk at the idea of a cold call and spend many hours surfing the internet. And they will also gain confidence in themselves, along with a system that works.
Pierson knows the job search trail and he knows what it's like to look for a job. Bravo for this wonderful book.
Jess Dods, MBA
Career coach
Focus, Structure, Accountability.......2006-10-19
The hardest part of a job search, at least for me, is treating the search itself like a job. Pierson provides structure and methodology to your search but also, and importantly, accountability to yourself through the use of a progress chart. He offers a common sense, step by step process that helps you create an effective marketing plan for yourself along with the not inconsequential side effect of a boost in self confidence.
Book Description
This book is an upgrade to phpMyAdmin Version 2.8. Written by a member of the development team, this book serves as a comprehensive guide to helping you unlock the full potential of phpMyAdmin 3.8 phpMyAdmin Providing a powerful graphical interface for managing MySQL, phpMyAdmin is one of the most popular open source applications. While most MySQL developers use routine features of phpMyAdmin every day, few are aware of the power and potential of its advanced features. This book builds a solid understanding of the core capabilities of phpMyAdmin before walking you through every facet of this legendary tool. MySQL Used by millions of developers, MySQL is the most popular open source database, supporting numerous large dynamic websites and applications. MySQL has acquired this wide popularity by virtue of its open source nature, performance, reliability, robustness, and support for various platforms. However, this popularity has also been helped by the existence of phpMyAdmin, the industry standard administration tool that makes database management easy for both the experienced developer and their novice. The powerful graphical interface that it provides to MySQL has made phpMyAdmin an indispensable tool for MySQL and web developers. Every phpMyAdmin user can benefit from unlocking the full potential of this powerful application. Whether you are an experienced developer, system administrator, web designer or new to MySQL and phpMyAdmin, this book will show you how to increase your productivity and control when working with your databases. You will learn how to: - Administer MySQL users and privileges, and get statistics about MySQL servers and databases - Manage databases, table data and structures, and indexes - Use bookmarks and metadata - Generate multiple SQL queries - Generate better documentation of evolving table structures Along the way you will build a more detailed understanding of SQL and how it works in MySQL. As an application developer you'll learn how to use phpMyAdmin to: - Effectively perform day-to-day database and table management. - Create efficient database tables and relational structures - Document your evolving data structure easily As a MySQL server administrator, you will benefit from the in-depth and practical coverage of: - Using phpMyAdmin to manage users and privileges - Getting server and database statistics All database users will be able to expand and refine their knowledge of SQL in a MySQL context by using phpMyAdmin to track SQL execution and results. The prior edition of this book was written for version 2.6. Most of the changes to phpMyAdmin in version 3.8 are in the user interface and not the underlying functionality. This book brings the screen shots and user instructions into line with the new interface. If as a reader you are happy with the new interface already you don't need to upgrade to this new edition of the book. The book begins with a comprehensive tutorial of phpMyAdmin that systematically explains and demonstrates the potential of this tool. It then goes on to show the less well known and generally under-used features and capabilities of phpMyAdmin in depth. Whether you are an experienced developer, system administrator, web designer or new to MySQL, phpMyAdmin is a must have tool for anyone who needs to manage MySQL databases and tables. This book is a must read for every serious phpMyAdmin user who would like to use this outstanding application to its full power.
Customer Reviews:
Great book!.......2007-05-13
If you don't like command-line interface with your computer, phpMyAdmin is a great tool! And if you want to learn the right way to interact with phpMyAdmin, this book is your perfect resource!
I stumbled upon a phpMyAdmin screencast by DeLisle at a conference. His calm and collected presentation style along with a great clarity for instruction is repeated in this book.
Mastering phpMyAdmin has enabled me to move out of my limited comfort zone with database management in general. The book is clearly laid out to give you step-by-step instructions to make a database work for you.
I highly recommend this book, and DeLisle's Creating your MySQL Database: Practical Design Tips and Techniques as well. They are great books!
A nice update.......2007-01-20
I've got a review copy of the phpMyAdmin 2.8 book as well as the previous edition of this book. The old edition already was rather comprehensive and had all the features that phpMyAdmin has cleary laid out.
Still, the layout of the new edition improved a notch, this is a nice update. While you probably won't need the book if you already have the old edition, it is a nice book to help you get out the most of phpMyAdmin.
How to Use phpMyAdmin.......2006-11-17
The purpose of this book by Marc Delisle is to teach you how to use phpMyAdmin, which is a popular open source program for working with a MySQL database using the phpMyAdmin user-friendly graphic interface. Most PHP programmers use MySQL for their database needs because these two technologies work so well together. For those who have not yet worked with phpMyAdmin and MySQL, this book will help you get up and running quickly. And for those programmers who have taught themselves to use phpMyAdmin by trial and error, this book will introduce and explain those features you may have missed.
The author begins with an introduction to phpMyAdmin. He covers the main features and some history of the program. After that, he jumps right in to the installation, configuration and security issues for the Linux, Apache and IIS servers. Of course, if you are using phpMyAdmin with your web host account, you may not have much control over these issues. Once the program is installed, he explains the user interface and discusses those easy-to-use features that make this program so popular.
Delisle starts with the basic tasks such as creating databases and setting up tables. He explains the different types of data, table fields and the various choices you have when performing many tasks. Next, he shows you how to move tables between databases and how to backup, copy and move databases between servers. Although the user-friendly graphic interface is what makes phpMyAdmin so nice, you may at some time need to use the SQL commands alone. The author covers the most common tasks you may encounter. Finally, he moves on to more advanced issues such as administrative tasks and generating database reports and documentation.
Marc Delisle is a developer and project administrator for the phpMyAdmin project. He also teaches at the College de Sherbrooke, Quebec, Canada.
Book Description
To manage a service network, managers have to control the network, the application, and the receiving devices--and that's not an easy assignment. Here is a hands-on manual detailing how to design and deploy effective service management systems.
* Covers everything service managers need to know: designing systems, purchasing program software, automating applications, configuring edge devices, testing, monitoring and measuring
* Anlayzes why our current network software and standards have so far been failures
* Walks readers through the steps of building a complete SNMP (Simple Network Management Protocol) edge management system
* Dissects and compares the many competing management protocols now in play
Customer Reviews:
Excellent resource.......2005-10-05
Jon's book fills a void in the network management space. This is an essential reference for those looking for information on building a management system. Many useful hints. We used many of these ideas while I was working for a large internet service provided.
Book Description
* Written by one of Microsoft's key testing trainers, this hands-on tutorial and reference explains why, when, what, and how to test
* Teaches new and experienced testers how to analyze and properly test Web applications
* Filled with practical advice that can be immediately applied to any Web-testing task, on any browser running on any platform
* Concentrates on proven solutions and presents the material in a way that will help develop a professional skill set in novice testers and will improve the productivity of all testers
* Companion Web site includes dozens of valuable templates and test patterns that will allow readers to rapidly conduct tests in multiple languages against all browser and operating-system combinations
Customer Reviews:
Straightforward, practical approach to web testing........2006-08-08
Lydia's book is probably the best written web testing book in the market. The prose is easy to follow, progressive, non-verbose, and sometimes even inspiring. She painfully explicates various testing principles with exacting examples. Published in 2003, some of the examples already show their age but the testing principles and problems are still current. Web technologies have evolved immensely in the last three years and this book would benefit from such updates in a second edition.
Good Reference.......2005-11-19
The Web Testing Companion is a manual written for both beginners and experienced web designers, and the author herself is a testing director at Microsoft. If you've had a few years' experience as a designer, developer or webmaster, then the material is not new to you; i.e., optimizing bandwidth, etc.
Obviously, this is not the kind of book you read straight through from beginning to end, but rather a handbook that you can refer to as problems arise. For the most part, the book succeeds as that, and Ms. Ash has divided the book into four general sections: non-technical issues, technical issues, general advice for testers, and finally an excellent set of appendices on various aspects of Web testing.
I'm sure we all can recall incidents of working with defective software that nobody apparently had tested for bugs, sloppy coding, or slow operating time. This was because there was probably a deadline for the software release time, and the developer concluded that hiring testers would be an extra expense.
Non-Technical Issues:
The first four chapters deal with non-technical issues, mostly related to the planning of the application.
Web site planning can involve a number for goals; for example, which is most important: minimal defects or time-to-market? Developing a medical web application to assist in diagnosing illnesses is different from developing an application that will be used to solicit funds. The medical app could be providing life-or-death information, whereas the solicitation site could need high visual appeal. In other words, the app must meet the customer's requirements and expectations, not yours. Most of us already know that, but in one of the book's appendices, the author has given us a checklist of several pages worth of questions to determine exactly what the customer's needs are. That's what I like about this book: It presents some very objective methods for answering subjective questions.
Server-Side and Client-Side Testing:
For server-side (as opposed to client-side) web apps, performance testing and security testing are the most important. Stability problems need to be identified prior to deployment. The tester, therefore, should create many user scenarios derived from the most common and most intensive user actions, and then analyze the performance statistics after the performance tests are completed.
The author recommends that all of your pages load in 15 seconds or less, but this rule really depends on your particular application and the expectations of the people using it. If your app requires large graphics and the users are architects, they will probably feel that waiting a few minutes is worth the effort.
Testing Scenarios:
The author recommends that you set up a test environment that is separate from your development and production environment. This can include a separate web server, database server, and application server if applicable. This is especially important in testing security features. (It should be noted, of course, that some application developers will not be able to afford the elaborate testing facilities of a large corporation.)
Ms. Ash advises, "One of the most common reasons that performance testing of an application is not successful is that the wrong scenarios were tested." Therefore, she recommends that: "Not every line of code or possible interaction needs to be benchmarked on every build. Identify the critical places, the most frequent code paths, and the most expensive ones, the ones that are most important to the user, and spend the precious test time here. If there is more test time left over, spend it on any code paths that have been added since the last release."
At this stage, the author explains numerous helpful methods for setting up baselines, benchmarks and other metrics to determine Web application performance and efficiency. These metrics also include the application's efficiency when interacting with various servers' processors, memory and disk drives.
The author provides a method for charting data flow, which is helpful in both performance and security testing.
Load and Stress Testing:
"Load testing is done to help identify what the load profile for the service is under a load. Knowing the server profile helps you identify when the server in a line production environment is about to break or crash."
Load testing should answer questions like: How many requests per second can the server take, how long does it take to service a request, and What is the uptime under real-world loads?
Finally, an entire chapter is devoted to automation methods. Automation is "an excellent way to ensure that the software of today is just as good as it was yesterday, but management incorrectly assumes that automation will solve all their problems."
The earlier you perform load testing the better. Most people hate to wait for a web page to load, so simple design changes can often make a significant impact on the performance and scalability of your web application. A good overview of how to perform load testing can be found on Microsoft's Developer Network (MSDN) website.
Security Testing:
As with performance testing, the first steps of security testing need to be taken by the product designers to ensure that their code is safe by employing best practices when writing code.
A general rule to remember is that as your company gains more and more data that is desirable, it is also gathering attackers and gathering more that needs defending. On the other hand, the thought that a less important company or service will not be as interesting to an attacker can lull you into a false sense of security. You can still be attacked, for the same reason that small businesses and houses have been robbed; i.e., because they can be easy targets.
The author outlines various methods of testing your apps for a number of "popular" attack methods:
Denial of Service, in which a server can receive thousands of ICMP "ping" requests from hundreds of workstations;
Buffer Overflow, which is becoming a very common method for installing Trojan horses and back door software;
Cross-site scripting, in which an attacker gets his malicious code to run on someone else's Web site; and
SQL Injection, by which the attacker sends malicious code to an SQL database.
General Testing Advice:
The remainder of the book is concerned with various organizations, web sites and other resources open to testers.
Ms. Ash makes the point that many people enter the field of testing involuntarily, and that the testers should not develop an adversarial relationship with management and developers. (Obviously, hard-working developers don't want to be told how inefficient or unsafe their code is, and vice presidents don't want to be told that they have to postpone a release date because of "holes" in their latest product.) Because testers can wield considerable power, the author stresses diplomacy when notifying the developer team about their mistakes in coding. Additionally, the professional tester should communicate regularly with users by giving presentations and attending meetings with management. They should also become certified in relevant technologies.
Although the author could have provided a more readable index or table of contents, she has provided 200 pages of appendices, covering RFCs, error codes, ASCII character sets, and many helpful tables. The appendix material is also available at the author's companion site at www.wiley.com/compbooks/ash.
Excellent Web QA resource.......2004-12-29
This is the best book I have ever seen on the testing web applications. It covers everything from unicode to Javascript, from security to the validity of the HTML. It teaches through an understanding of the technology, then covers ways to stress the technology to look for bugs. The sections on character encodings and performance testing are particularly well done. This is a must have book for QA professionals tasked with testing a web application.
Take the title literally.......2004-06-22
This book is overshadowed by "Testing Applications on the Web: Test Planning for Mobile and Internet-Based Systems" ISBN 0471201006, which is one of the most highly regarded in the testing community. However, that does not mean this book is without merit. On the contrary, the rich content of the appendices, which comprise a significant portion of this work, make it an ideal companion to the aforementioned book.
Another point in this book's favor is that it is basic enough and structured to make it an ideal text for a course on web testing. The author did an excellent job of describing good practices in web testing and covering the basics. She also provides a good deal of sage advice on careen matters, which a more technical book will overlook.
I found the chapters on server-side testing accurate and clear enough for new test professionals to completely follow. The chapters on performance and security testing were reasonably complete, and the chapters on client side were as well and clearly written. I also like the author's objectivity - she works for Microsoft, but did not emphasize that company's technologies or processes over standard industry practices.
As a supplement to a more technical book, such as the one I cited above, or as a text in a basic web testing course this book shines. It is not the definitive reference, but is worth reading if for no other reason than to have the appendices nearby as a ready reference during test cycles.
An excellent web testing reference.......2004-01-24
I came across this book in the bookstore and was so impressed I dropped the $$$ on it there. I have referred to it at least weekly for test cases. It has more than paid for the purchase price through what it has done to make my job easier. Few books touch on security or performance in a practical manner, but this one digs right in and actually has information you can apply immediately to your app. I can see where the other reviewer might have been frustrated in that it didn't tell him how to write web applications. It is purely about testing them and doesn't get hung up walking you through any specific technologies. It concentrates on the information you need to test your app.
Don't take my word for it. Stickyminds gave it 4 stars. ...
Amazon.com
Many C/C++ programmers know at least the basics of TCP/IP, but becoming an expert network programmer usually requires a lot of experience and sometimes hard-to-find knowledge. Written to give the intermediate or advanced developer a leg up in creating robust network applications using TCP/IP and related protocols, Effective TCP/IP Programming offers a truly valuable review and guide to getting the most out of your networked programs that are based on this popular standard.
This book is packaged as a series of 44 tips for better TCP/IP programs, but it actually does much more. Early sections review the basics of the TCP, UDP and IP protocols, along with related standards. A winning feature here is the author's care to distinguish between the well-known BSD (for Unix) and Winsock (for Windows) versions of sockets. (By using macros and "skeleton" programs, his sample C code will run easily on either implementation.)
Besides offering nuts-and-bolts programming advice and plenty of hints for better performance, Snader also discusses how IP works under the hood. Standout sections here include a discussion of the pitfalls of scaling a stand-alone or LAN TCP/IP application to the Internet, as well as what a "reliable" protocol like TCP really means. He shows you how to handle misbehaving servers and clients, and how to use multiple sockets effectively, and he offers several useful tips for optimizing data streamed across the wire. Although he doesn't mention Java here (which offers strong socket support on its own), the author does provide Perl examples that work with sockets in order to get you started with sockets used within scripting languages.
Because IP is the protocol of choice for the Internet, more and more of us are faced with becoming socket-programming experts in a hurry. In all, Effective TCP/IP Programming offers a good mix of basic and advanced tips on today's IP and related protocols. It's a valuable resource for any developer who programs for the Internet and wants to write better code using sockets. --Richard Dragan
Topics covered: TCP/IP overview and programming tips, Berkeley Socket Distribution (BSD) vs. Winsock/Windows socket implementation issues, connected and connectionless protocols, network-programming frameworks, UDP vs. TCP, reliable protocols, network programming for single workstations, LANs and WANs; event-driven programming, improving write operations, IP packet layout, byte ordering issues, the Nagle and delayed ACK algorithms, using network utilities: inetd, tcpmux, tcpdump, traceroute, ttcp, and netstat; and resources and hints for improving network-programming skills.
Book Description
Programming in TCP/IP can seem deceptively simple. Nonetheless, many network programmers recognize that their applications could be much more robust. Effective TCP/IP Programming is designed to boost programmers to a higher level of competence by focusing on the protocol suite's more subtle features and techniques. It gives you the know-how you need to produce highly effective TCP/IP programs.
In forty-four concise, self-contained lessons, this book offers experience-based tips, practices, and rules of thumb for learning high-performance TCP/IP programming techniques. Moreover, it shows you how to avoid many of TCP/IP's most common trouble spots.
Effective TCP/IP Programming offers valuable advice on such topics as:
Exploring IP addressing, subnets, and CIDR Preferring the sockets interface over XTI/TLI Using two TCP connections Making your applications event-driven Using one large write instead of multiple small writes Avoiding data copying Understanding what TCP reliability really means Recognizing the effects of buffer sizes Using tcpdump, traceroute, netstat, and ping effectively
Numerous examples demonstrate essential ideas and concepts. Skeleton code and a library of common functions allow you to write applications without having to worry about routine chores.
Through individual tips and explanations, you will acquire an overall understanding of TCP/IP's inner workings and the practical knowledge needed to put it to work. Using Effective TCP/IP Programming, you'll speed through the learning process and quickly achieve the programming capabilities of a seasoned pro.
Customer Reviews:
Effective to learn TCP/IP programming best practices.......2007-08-14
Not all of the 44 tips are exceptional. Some of them are pretty trivial such as "Read Stevens books" or "consult RFCs" but about 35 tips are very good. The author knows well this topic and explains very well the reasons behind these tips. I am sure that all these good tips can be found in the TCP/IP Illustrated books but if you do not have the time to read 3 volumes consisting of about 2000 pages, this less than 300 pages book will provide a nice synthesis of TCP/IP programming good practices.
excellent for developing network programs.......2006-08-16
I bought this about 4 years ago. It was extremely helpful for the socket programs that I have had to develop. I don't do TCP/IP socket programming full time, but this helped me to develop several robust applications. I used it to develop a BGP peering monitor application as a server that also uses sockets for remote reporting. I also used it in developing an active network probing application that looks for forwarding plane faults, making use of various active sending and recieving sockets: UDP, raw and ICMP.
entry-level textbook disguised as "tips".......2006-07-21
I don't know why this book is rated so highly. There's nothing wrong with the content (what little there is), but I feel that it's misrepresented as a book for intermediate level network programmers. I was expecting discussion on when to use select() vs. multi-threaded vs. single-threaded servers, for example. But this book is more for beginners (Tip #1, "Understand the difference between connectionless and connection-oriented protocols").
I also feel that the title is misleading. I was expecting a book of specific tips on par with Scott Meyers' Effective C++/STL series which are vastly superior references on their own topics).
It's decent as a textbook, once you realize that's what this is. But it's still pretty shallow, and definitely not worth the high price tag.
Perfect reference for network programmers.......2006-03-01
This book is a perfect addition to the library of any network programmer. It brings the balance between practicality and knowledge to a topic as TCP/IP Programming. If you want more knowledge go with Stevens, but if you want to learn fast or to review some concepts or even have a reference book, this is your book.
If want to do network programming without getting too deeply into every network programming concept, this book will show you how to code simple and fast with very good reference examples. It will also give you tips that will help you to avoid network programming mistakes that can lead to network buffer overflows.
buy it even if you own Stevens' book.......2004-01-31
This book has a perfect balance of brevity and depth. Anything shorter would have been superficial, anything deeper would begin to compete with Stevens' Unix Network Programming (and lose). As is, this book fits very well for developers who do occasional TCP/IP development, but still need to develop reliable, industrial-grade software.
Book Description
Today, hard disk drives for desktop PCs, laptops, servers, and storage appliances use either Parallel ATA or SCSI interconnect technology. Serial ATA is the new storage interconnect standard for these systems. Computer engineers and architects who plan to incorporate Serial ATA in new products must answer questions such as: Why make the change? What problems does Serial ATA solve for me? How do I transition from Parallel ATA to Serial ATA and from SCSI to Serial ATA? This book helps you answer these questions.
If you are a systems engineer, product architect, or product line manager, you could be asked to contribute to the planning process for a transition to Serial ATA. This book provides you with reliable information, in sufficient technical depth to help you implement the Serial ATA specifications.
Topics include PHY signaling and interface states, protocol encoding, programming model, flow control, performance, compatibility with legacy systems, enclosure management, signal routing, hot-plug, presence detection, activity indication, power management, and cable/connector standards.
Serial ATA Storage Architecture and Applications brings you authoritative insights on:
- The goals driving Serial ATA standard development
- The advantages of Serial ATA adoption for OEMs, IHVs, and end-users
- Capabilities defined by the Serial ATA 1.0 and Serial ATA II standards, with "under the covers" explanations of how Serial ATA works
- Performance and reliability characteristics of Serial ATA
- Hands-on, how-to designs for building real-world systems that use Serial ATA
Customer Reviews:
Great way to learn about this new technology..........2003-12-11
This concise, yet complete book is a great way to learn about this new technology, very likely to dominate storage interface to HDDs. It is a great substitute for going through the actual specs, and the authors have a wonderful job of presenting the material to the novice. It is also a wonderful peek into other serial interconnect technologies.
Book Description
This book explains the key features of Symbian OS and will help you to write effective C++ code. It focuses on aspects of good C++ style that apply particularly to Symbian OS.
21 items are used to target particular aspects of the operating system and provide a simple and straightforward exploration of coding fundamentals. Using example code and descriptions of best practice to deconstruct Symbian OS, the items guide you to what you should and should not do (and why), pointing out commonly-made mistakes along the way.
Technologies covered include:
- client-server architecture
- descriptors and dynamic containers
- active objects, threads and processes
- leaves, cleanup stack and 2-phase construction
- thin templates, good API design, memory optimization, debug and test macros
- the ECOM plug-in framework
Symbian OS Explained can be read cover-to-cover or dipped into as a reference that will improve your code style when programming with Symbian OS.
Download Description
This book explains the key features of Symbian OS and will help you to write effective C++ code. It focuses on aspects of good C++ style that apply particularly to Symbian OS. 21 items are used to target particular aspects of the operating system and provide a simple and straightforward exploration of coding fundamentals. Using example code and descriptions of best practice to deconstruct Symbian OS, the items guide you to what you should and should not do (and why), pointing out commonly-made mistakes along the way. Technologies covered include: client-server architecture descriptors and dynamic containers active objects, threads and processes leaves, cleanup stack and 2-phase construction thin templates, good API design, memory optimization, debug and test macros the ECOM plug-in framework Symbian OS Explained can be read cover-to-cover or dipped into as a reference that will improve your code style when programming with Symbian OS.
Customer Reviews:
Good Reference but don't follow the examples.......2006-04-07
This book can be used as a good reference but it does not serve the basic purpose.
This book is an introductory level book so assumption is that most of the readers will be new to Symbian Programming. There is notion in the industry that Symbian is a bit tough to follow, particularly to .NET and Java programmers. One of the main reason for that is Poor documenetation from Symbian. So only reference to learn Symbian is books like these and most of them serves the purpose.
The examples used by the author are very complicated, not because of the rules of programming for symbian but because of the examples chosen by the Author. Here are some eg classes and objects
RHerculesSession::CaptureCeryneianHind
RHerculesSession::CleanAugeanStables
RHerculesSession::SlayStympalianBirds
If we can imagie how a program works, then it will be easy to implement( that is the reason why Dietel & Dietel became so famous). If I am a Mathematecian and if I am writing a book on programming doesn't mean the Class examples should be the calculations of most complex equations in Mathematics.
Apart from the examples its a good reference book.
Nice Reference.......2005-08-31
This book is great as a reference to help understand various concepts, code constructs and conventions.
Concise, detailed explanations...also not many screendumps which makes it more compact.
Strange examples.......2005-04-24
This books gives as the title indicates a run down on how the Symbian OS works. The examples in the book are to complicated to be of any use with some exeptions. Many times the examples are just too long and one gets tired of starring of made up C++ code kind of quickly. The author seem to have good knowledge about the subject but I can't say I smilled many times reading this book.
Symbian makes sense..........2005-02-11
This book does actually explain Symbian OS and its 'special' C++! Not every last detail, of course, but so many of the things that I never completely understood have become clear. There's loads of good stuff on active objects, client-server and cleanup.
Book Description
A completely updated and revised edition of a bestselling book that has helped tens of thousands of people learn how to network effectively, Success Runs in Our Race is more important than ever in this fluctuating economy. With scores of anecdotes taken from interviews with successful African Americans -- from Keith Clinkscales, founder and former CEO of Vanguarde Media, to Oprah Winfrey -- Fraser shows how to network for information, for influence, and for resources. Readers will learn, among other things, how to cultivate valuable listening skills, which conferences blacks are most likely to attend when looking to build their business network, and how to effectively circulate a résumé.
More than a guide for personal achievement, this is an information-packed bible of networking that also seeks to inspire a social movement and a rebirth of the "Underground Railroad," in which successful African Americans share the lessons of self-determination and empowerment with those still struggling to scale the ladder of success.
Customer Reviews:
Great Networking Resource.......2007-07-25
Networking is a significant part of my business. George C. Fraser's Book - "Success Runs in Our Race", provides many excellent and effective strategies for networking.
Quality business and professional guidance!.......2007-03-24
George Fraser knows what is required to be successful in business or in your professional life no matter what your career or profession. Many of the skills he talks about in his book can be applied to your work life or your personal endeavors. On the surface this might sound odd but the success characteristics are the same. What he talks about are the required behaviors that lead to your ultimate success. I will never forget how he emphasizes the importance of networking and how your networks must be cultivated in order to gain maximum benefit. He made the point very clear when I heard him talk to a group when he said, "networking is much more than meeting someone then calling them the next week to ask for a business favor." If everyone learns that networking is and must be created for win/win situations, everyone realizes benefits in the long run. This is a wonderful book and one that has value for anyone attempting to gain a competitive advantage in the business world. Relationships are how things get done in the business world and this book certainly provides the required tools for making that happen.
Connecting The Community.......2004-09-07
Networking as defined by the small business glossary is developing business contacts to form relationships, increase your knowledge, expand your business or serve the community. Author, George C. Fraser is adamant that networking is the key to uplifting and unifying the Black community.
SUCCESS RUNS IN OUR RACE is saturated with advice and information about being successful in all walks of life. Mr. Fraser's primary goal is to establish a "New Underground Railroad" of sorts, which basically would not only work for the success of an individual, but also for the Black population.
This book is a compilation of facts, personal stories and tips on improving life for all of us. A sense of community and caring is something that is missing in the world today, and the author hopes to make us more aware of that fact. While I found SUCCESS RUNS IN OUR RACE to be a very informative book,it is not a novel, it is more in the vein of a textbook.
Reviewed by Simone A. Hawks
of The RAWSISTAZ Reviewers
The book for the next millenium!.......2001-04-24
I would recommend reading this book, as well as giving this book as a gift to all college graduates. The chapter that tells how to create and do an awards ceremony in less than 2 hours alone is worth the price of the book! I particularly liked the way he defined "networking" vs. "neck-working"--and how to handle those who have mistaken one for the other. (Neck-working is misusing your opportunity to network by trying to hit on the opposite sex--a definite no-no!) Mr. Fraser's solid hints on connecting with like-minded individuals in the black community and giving back to the community, not abandoning it are fantastic--and doable. If you like commentary by people like Tavis Smiley, this is your book!
This is an invaluable how-to book for individuals & groups.......1997-10-09
George Fraser has written a common-sense guide for networking and getting ahead. It includes anecdotes, charts, graphs and folk wisdom. Every home should have this reference book.
Books:
- Culture Warrior
- Developing Quality Technical Information: A Handbook for Writers and Editors (2nd Edition) (IBM Press Series--Information Management)
- Doctor Strange: Beginnings and Endings (New Avengers)
- Doing Business in the New Latin America: A Guide to Cultures, Practices, and Opportunities
- Doing Business Internationally, Second Edition: The Guide To Cross-Cultural Success
- Effective Group Discussion: Theory and Practice
- Effective Phrases for Performance Appraisals: A Guide to Successful Evaluations
- Effective Phrases for Performance Appraisals: A Guide to Successful Evaluations
- Essential SNMP, Second Edition
- Essentials of Business Communication
Books Index
Books Home
Recommended Books
- The Trusted Advisor
- Lee's Lieutenants: A Study in Command
- Capstone: Exemplary Lessons for High School Economics: Teacher's Guide/student activities set
- Century 21 Accounting for Texas General Journal
- History: Fiction or Science
- Lifeguard
- Introduction to Business with Business Plan Booklet and CD-ROM
- 2000 Business Owner's Complete Tax & Employment Advisor
- Early Warning Systems for Financial Crisis: Applications to East Asia
- Common wildflowers of the Grand Canyon,
Malware: Fighting Malicious Code
Real Digital Forensics: Computer Security and Incident Response
Gray Hat Hacking : The Ethical Hacker's Handbook
Google Hacking for Penetration Testers, Volume 1
File System Forensic Analysis
