Client-Side Attacks and Defense
- 1st Edition - September 28, 2012
- Imprint: Syngress
- Authors: Sean-Philip Oriyano, Robert Shimonski
- Language: English
- Paperback ISBN:9 7 8 - 1 - 5 9 7 4 9 - 5 9 0 - 5
- eBook ISBN:9 7 8 - 1 - 5 9 7 4 9 - 5 9 1 - 2
Client-Side Attacks and Defense offers background networks against its attackers. The book examines the forms of client-side attacks and discusses different kinds of attacks along… Read more
Purchase options
Institutional subscription on ScienceDirect
Request a sales quoteClient-Side Attacks and Defense offers background networks against its attackers. The book examines the forms of client-side attacks and discusses different kinds of attacks along with delivery methods including, but not limited to, browser exploitation, use of rich internet applications, and file format vulnerabilities. It also covers defenses, such as antivirus and anti-spyware, intrusion detection systems, and end-user education. The book explains how to secure Web browsers, such as Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Apple Safari, and Opera. It discusses advanced Web attacks and advanced defenses against them. Moreover, it explores attacks on messaging, Web applications, and mobiles. The book concludes with a discussion on security measures against client-side attacks, starting from the planning of security. This book will be of great value to penetration testers, security consultants, system and network administrators, and IT auditors.
- Design and implement your own attack, and test methodologies derived from the approach and framework presented by the authors
- Learn how to strengthen your network's host- and network-based defense against attackers' number one remote exploit—the client-side attack
- Defend your network against attacks that target your company's most vulnerable asset—the end user
Penetration testers; security consultants; system and network administrators; IT auditors
Dedication and Thanks
Biography
Chapter 1. Client-Side Attacks Defined
Client-Side Attacks: An Overview
Types of Client-Side Attacks
Summary
Chapter 2. Dissection of a Client-Side Attack
What Constitutes a Client-Side Attack?
Summary
Reference
Chapter 3. Protecting Web Browsers
Common Functions of a Web Browser
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome
Apple Safari
Opera
Web Browsers as a Target
Summary
Chapter 4. Security Issues with Web Browsers
What is Being Exposed?
Summary
Chapter 5. Advanced Web Attacks
What is Active Content?
A Closer Look at Active Content Types
Summary
Chapter 6. Advanced Web Browser Defenses
A Mix of Protective Measures
Summary
Chapter 7. Messaging Attacks and Defense
Evolution of the Email Client
Messaging Attacks and Defense
Summary
Chapter 8. Web Application Attacks
Understanding Web Applications
Web Application Attacks and Defense
What’s the Target?
Summary
Chapter 9. Mobile Attacks
Mobile Devices and Client-Side Attacks
Summary
Chapter 10. Securing Against Client-Side Attack
Security Planning
Securing Applications and Infrastructure
Securing Clients
Summary
Index
- Edition: 1
- Published: September 28, 2012
- Imprint: Syngress
- No. of pages: 296
- Language: English
- Paperback ISBN: 9781597495905
- eBook ISBN: 9781597495912
SO
Sean-Philip Oriyano
Sean-Philip Oriyano (CISSP, CNDA, CEH, MCSE) is a veteran of the Information Teechnology and engineering fields, working with a wide variety of organizations to deliver unique and innovative solutions. He has spent his time in the field working with nearly all aspects of IT and management with special emphasis on Information Security concepts, techniques, and practices. Sean is an advocate of strong security knowledge and practices, has workd with clients such as the U.S. Air Force, U.S. Navy, U.S. Army, and has been sought out to instruct at locations such as the U.S. Air Force Academy and Naval War College.
Sean is an experienced content developer and technical writer who has published articles on the IT and Information Security fields. Sean counts IBM, Amazon, Autodesk, and Microsoft among his clients. Sean publishes content regularly and publishes this information on his web site at www.oriyano.com and shares his knowledge in his classes and lectures.
Sean is a member of EC-Council, InfraGard, and BECCA.
Affiliations and expertise
CISSP, CNDA, CEH, MCSERS
Robert Shimonski
Robert Shimonski is a technology executive specializing in healthcare IT for one of the largest health systems in America. In his role at Northwell Health, Rob is a decision maker and strategy planner for information systems operations and technology services. In his current role, Rob is responsible for bringing operational support into the future with the help of new technologies such as cloud and Artificial Intelligence. He is a best-selling author and editor with over 15 years’ experience developing, producing, and distributing print media in the form of books, magazines, and periodicals. Rob’s professional experience includes work for CompTIA, Entrepreneur Magazine, Microsoft, McGraw-Hill Education, Cisco, the US National Security Agency, and Digidesign. Rob has a diverse background in the publishing, including roles such as author, co-author, technical editor, copy editor, and developmental editor. Since print media shifted to the digital domain, Rob has focused the past decade on developing the needed skills to produce professional audio and video media. His research interests are focused on innovation and developing new solutions to create efficiency and bringing forth better outcomes through technology solutions. Rob has a master’s degree in IT Management and a master’s degree in Industrial Psychology. He is author of Cyber Reconnaissance, Surveillance and Defense, Introduction to Microsoft Certification and Study Skills, and MCSA Windows Server 2003 Upgrade to Server 2008 Technology Specialist Exam Prep from Syngress/Elsevier.
Affiliations and expertise
Director, IT Infrastructure and Management at Northwell Health System, Plainview, NY, USARead Client-Side Attacks and Defense on ScienceDirect