Skip to main content
Elsevier

Books in Social sciences

The Social Sciences collection forms a definitive resource for those entering, researching, or teaching in any of the many disciplines making up this interdisciplinary area of study. Written by experts and researchers from both Academic and Commercial domains, titles offer global scope and perspectives.

Key subject areas include: Library and Information Science; Transportation; Urban Studies; Geography, Planning, and Development; Security; Emergency Management.

  • Transportation Security

    • 1st Edition
    • Clifford Bragdon
    • English
    Insecure transportation systems are costing our worldwide mobility-based economy as much as 6% of GDP annually. The effectiveness of security measures vary widely. In the United States, depending on the mode of transportation, it ranges from “medium effectiveness” for airports to “low effectiveness” for maritime, rail, transit, and intermodal activities. Situational awareness and interoperability are lacking as we try to deal with both natural and man-made disasters. Regardless of the transport mode, improvements are essential if governments and corporations are to address security planning, response, and national preparedness. Transportation Security examines this problem in a comprehensive manner and addresses security-based technologies and solutions to minimize risk.

  • A Short-Cut to Marketing the Library

    • 1st Edition
    • Zuzana Helinsky
    • English
    Technological changes mean that the role of libraries is now not as obvious or assured as in the past. This means that to survive, libraries must actively market their products and services to their users and to their funding sources. A concise handbook which spells out the critical need for marketing for libraries, A Short-cut to Marketing The Library provides a series of practical and accessible tools to achieve success and includes publishers marketing suggestions.

  • Global Information Inequalities

    Bridging the Information Gap
    • 1st Edition
    • Deborah Charbonneau
    • English
    The disparity in access to information is a worldwide phenomenon. Global Information Inequalities offers a captivating look into problems of information access across the world today. One of the unique strengths of the book is the use of examples of library initiatives from around the world to illustrate the range of possibilities for equitable access and library service delivery in a global context. It contains numerous examples of a wide variety of information problems and solutions ranging from developing literacy programs in rural communities in Tanzania, building school libraries in China, making government-related information more transparent in Chile, to exploring how digital technologies have the potential to revolutionize the lives of people with sensory-disabilities... The contributions in Global Information Inequalities address a number of core professional issues, including access to information, library services, collection development, global collaboration, intellectual property, and digital information. The contributors are from Argentina, Canada, Chile, China, Iceland, Malaysia, Peru, South Africa, Tanzania, United States, and Zambia, thereby providing a wide range of perspectives on librarianship. Written in a simple, thorough, and multidisciplinary approach, the book presents and discusses key issues in various library settings and from different perspectives. Overall, this work contributes to a global examination and exploration of libraries in various parts of the world. This book has a wide appeal and is applicable to various library environments (including academic, public, and special libraries).

  • Malware Forensics

    Investigating and Analyzing Malicious Code
    • 1st Edition
    • Eoghan Casey + 2 more
    • English
    Malware Forensics: Investigating and Analyzing Malicious Code covers the complete process of responding to a malicious code incident. Written by authors who have investigated and prosecuted federal malware cases, this book deals with the emerging and evolving field of live forensics, where investigators examine a computer system to collect and preserve critical live data that may be lost if the system is shut down. Unlike other forensic texts that discuss live forensics on a particular operating system, or in a generic context, this book emphasizes a live forensics and evidence collection methodology on both Windows and Linux operating systems in the context of identifying and capturing malicious code and evidence of its effect on the compromised system. It is the first book detailing how to perform live forensic techniques on malicious code. The book gives deep coverage on the tools and techniques of conducting runtime behavioral malware analysis (such as file, registry, network and port monitoring) and static code analysis (such as file identification and profiling, strings discovery, armoring/packing detection, disassembling, debugging), and more. It explores over 150 different tools for malware incident response and analysis, including forensic tools for preserving and analyzing computer memory. Readers from all educational and technical backgrounds will benefit from the clear and concise explanations of the applicable legal case law and statutes covered in every chapter. In addition to the technical topics discussed, this book also offers critical legal considerations addressing the legal ramifications and requirements governing the subject matter. This book is intended for system administrators, information security professionals, network personnel, forensic examiners, attorneys, and law enforcement working with the inner-workings of computer memory and malicious code.

  • Nuclear Safeguards, Security and Nonproliferation

    Achieving Security with Technology and Policy
    • 1st Edition
    • James Doyle
    • James Doyle
    • English
    With an increase of global security concerns over potential terrorist acts, the threat of WMDs, and increasing political issues with nations seeking nuclear capability, the need to track, detect, and safeguard nuclear material globally has never been greater. Nuclear Safeguards, Security and Nonproliferation is a comprehensive reference that covers cutting-edge technologies used to trace, track, and safeguard nuclear material. It is a contributed volume with sections contributed by scientists from leading institutions such as Los Alamos National Labs, Sandia National Labs, Pacific Northwest Nuclear Labs, and Texas A&M University, and the Monterey Institute of International Studies. The book is divided into 3 sections and includes 30 chapters on such topics as - the security of nuclear facilities and material, the illicit trafficking of nuclear materials, improvised nuclear devices, how to prevent nuclear terrorism. International case studies of security at nuclear facilities and illegal nuclear trade activities provide specific examples of the complex issues surrounding the technology and policy for nuclear material protection, control and accountability. Specific cases include analysis of the timely issues in the nuclear programs of countries such as North Korea, Iran, and Kazakstan among others. Nuclear Security is a must-have volume for the dozens of private and public organizations involved in driving Homeland Security, domestic, and international policy issues relating to nuclear material security, non-proliferation, and nuclear transparency.

  • The IT / Digital Legal Companion

    A Comprehensive Business Guide to Software, IT, Internet, Media and IP Law
    • 1st Edition
    • Gene K. Landy + 1 more
    • English
    The IT/Digital Legal Companion is a comprehensive business and legal guidance covering intellectual property for digital business; digital contract fundamentals; open source rules and strategies; development, consulting and outsourcing; software as a service; business software licensing, partnering, and distribution; web and Internet agreements; privacy on the Internet; digital multimedia content clearance and distribution; IT standards; video game development and content deals; international distribution; and user-created content, mash-ups, MMOGs, and web widgets.Chapters deal with topics such as copyrights on the Internet, for software protection and around the world; trademarks and domain names; patents and digital technology companies; trade secrets and non-disclosure agreements; confidentiality, rights transfer, and non-competition agreements for employees; introduction to digital product and service contracts; a pragmatic guide to open source; IT services - development, outsourcing, and consulting; beta test agreements; commercial end-user agreements; terms of use for web sites and online applications; privacy and use of personal data; digital technology standards - opportunities, risks, and strategies; content for digital media; and deals in the web and mobile value chains.This book is intended for executives, entrepreneurs, finance and business development officers; technology and engineering officers; marketers, licensing professionals, and technology professionals; in-house counsel; and anyone else that deals with software or digital technology in business.

  • Securing Citrix XenApp Server in the Enterprise

    • 1st Edition
    • Tariq Azad
    • English
    Citrix Presentation Server allows remote users to work off a network server as if they weren't remote. That means: Incredibly fast access to data and applications for users, no third party VPN connection, and no latency issues. All of these features make Citrix Presentation Server a great tool for increasing access and productivity for remote users. Unfortunately, these same features make Citrix just as dangerous to the network it's running on. By definition, Citrix is granting remote users direct access to corporate servers?..achieving this type of access is also the holy grail for malicious hackers. To compromise a server running Citrix Presentation Server, a hacker need not penetrate a heavily defended corporate or government server. They can simply compromise the far more vulnerable laptop, remote office, or home office of any computer connected to that server by Citrix Presentation Server. All of this makes Citrix Presentation Server a high-value target for malicious hackers. And although it is a high-value target, Citrix Presentation Servers and remote workstations are often relatively easily hacked, because they are often times deployed by overworked system administrators who haven't even configured the most basic security features offered by Citrix. "The problem, in other words, isn't a lack of options for securing Citrix instances; the problem is that administrators aren't using them." (eWeek, October 2007). In support of this assertion Security researcher Petko D. Petkov, aka "pdp", said in an Oct. 4 posting that his recent testing of Citrix gateways led him to "tons" of "wide-open" Citrix instances, including 10 on government domains and four on military domains.

  • Kismet Hacking

    • 1st Edition
    • Frank Thornton + 2 more
    • English
    Kismet is the industry standard for examining wireless network traffic, and is used by over 250,000 security professionals, wireless networking enthusiasts, and WarDriving hobbyists.Unlike other wireless networking books that have been published in recent years that geared towards Windows users, Kismet Hacking is geared to those individuals that use the Linux operating system. People who use Linux and want to use wireless tools need to use Kismet. Now with the introduction of Kismet NewCore, they have a book that will answer all their questions about using this great tool. This book continues in the successful vein of books for wireless users such as WarDriving: Drive, Detect Defend.

  • SonicWALL Secure Wireless Networks Integrated Solutions Guide

    • 1st Edition
    • Khai Tran + 5 more
    • English
    Nearly forty percent of the world's 1 billion+ Internet users are wireless. It's a truly staggering fact to think that the majority of these wireless implementations are fundamentally insecure, leaving users and private data at risk. Many wireless proprietors think that the convenience of wireless outweighs the possible risk of insecure impelentation, or that secure wireless is far too complicated to worry about deploying. SonicWALL® Secure Wireless Networks Integrated Solutions Guide provides a systematic approach to creating secure wireless networks, using the Plan, Design, Implement, and Optimize model. This introduction to wireless network security is both comprehensive and easy to understand. Using straightforward language, this book describes deployment best practices, what SonicWALL security appliances do, and how they interoperate within an existing or new network. It begins with brief overviews of the theory of risk management, the history of wireless networks, and today’s top five wireless threats. Real-world case studies highlight wireless solution business drivers for education, healthcare, retail and hospitality, and government agencies, as well as their respective regulatory compliance requirements. SonicWALL believes that the days of being forced to accept inherent risk in wireless networking are over. By using modern security standards and sound network design methods, your wireless network should be just as secure as your wired network.Wireless networks can be made as secure as wired networks, and deploying this type of security can be far less complicated than you think. In this book, and through their massive product offerings, SonicWALL gives you (the secure wireless network hopeful) all of the planning, implementation, and optimizing tools you need to do wireless. Securely.

  • The IT Regulatory and Standards Compliance Handbook

    How to Survive Information Systems Audit and Assessments
    • 1st Edition
    • Craig S. Wright
    • English
    The IT Regulatory and Standards Compliance Handbook provides comprehensive methodology, enabling the staff charged with an IT security audit to create a sound framework, allowing them to meet the challenges of compliance in a way that aligns with both business and technical needs. This "roadmap" provides a way of interpreting complex, often confusing, compliance requirements within the larger scope of an organization's overall needs.

  • The Real MCTS/MCITP Exam 70-646 Prep Kit

    Independent and Complete Self-Paced Solutions
    • 1st Edition
    • Anthony Piltzecker
    • English
    This exam is designed to validate skills as a Windows Server 2008 Server Administrator. This exam will fulfill the Windows Server 2008 IT Professional requirements of Exam 70-646.The Microsoft Certified IT Professional(MCITP) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCITP candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users; three or more physical locations; and three or more domain controllers. A MCITP Server Administrator is responsible for the operations and day-to-day management of an infrastructure of servers for an enterprise organization. Server administrators manage the infrastructure, web, and IT application servers, and use scripts to accomplish tasks on a regular basis. They conduct most server management tasks remotely by using Terminal Server or administration tools installed on their local workstation. MCITP Server Administrators also support engineering projects, and are responsible for server builds and configuration.

  • UNIX and Linux Forensic Analysis DVD Toolkit

    • 1st Edition
    • Chris Pogue + 2 more
    • English
    This book addresses topics in the area of forensic analysis of systems running on variants of the UNIX operating system, which is the choice of hackers for their attack platforms. According to a 2007 IDC report, UNIX servers account for the second-largest segment of spending (behind Windows) in the worldwide server market with $4.2 billion in 2Q07, representing 31.7% of corporate server spending. UNIX systems have not been analyzed to any significant depth largely due to a lack of understanding on the part of the investigator, an understanding and knowledge base that has been achieved by the attacker. The book begins with a chapter to describe why and how the book was written, and for whom, and then immediately begins addressing the issues of live response (volatile) data collection and analysis. The book continues by addressing issues of collecting and analyzing the contents of physical memory (i.e., RAM). The following chapters address /proc analysis, revealing the wealth of significant evidence, and analysis of files created by or on UNIX systems. Then the book addresses the underground world of UNIX hacking and reveals methods and techniques used by hackers, malware coders, and anti-forensic developers. The book then illustrates to the investigator how to analyze these files and extract the information they need to perform a comprehensive forensic analysis. The final chapter includes a detailed discussion of loadable kernel Modules and malware. Throughout the book the author provides a wealth of unique information, providing tools, techniques and information that won't be found anywhere else.

  • Netcat Power Tools

    • 1st Edition
    • Jan Kanclirz
    • English
    Originally released in 1996, Netcat is a netowrking program designed to read and write data across both Transmission Control Protocol TCP and User Datagram Protocol (UDP) connections using the TCP/Internet Protocol (IP) protocol suite. Netcat is often referred to as a "Swiss Army knife" utility, and for good reason. Just like the multi-function usefullness of the venerable Swiss Army pocket knife, Netcat's functionality is helpful as both a standalone program and a backe-end tool in a wide range of applications. Some of the many uses of Netcat include port scanning, transferring files, grabbing banners, port listening and redirection, and more nefariously, a backdoor. This is the only book dedicated to comprehensive coverage of the tool's many features, and by the end of this book, you'll discover how Netcat can be one of the most valuable tools in your arsenal.* Get Up and Running with Netcat Simple yet powerful...Don't let the trouble-free installation and the easy command line belie the fact that Netcat is indeed a potent and powerful program.* Go PenTesting with Netcat Master Netcat's port scanning and service identification capabilities as well as obtaining Web server application information. Test and verify outbound firewall rules and avoid detection by using antivirus software and the Window Firewall. Also, create a backdoor using Netcat.* Conduct Enumeration and Scanning with Netcat, Nmap, and More! Netcat's not the only game in town...Learn the process of network of enumeration and scanning, and see how Netcat along with other tools such as Nmap and Scanrand can be used to thoroughly identify all of the assets on your network.* Banner Grabbing with Netcat Banner grabbing is a simple yet highly effective method of gathering information about a remote target, and can be performed with relative ease with the Netcat utility.* Explore the Dark Side of Netcat See the various ways Netcat has been used to provide malicious, unauthorized access to their targets. By walking through these methods used to set up backdoor access and circumvent protection mechanisms through the use of Netcat, we can understand how malicious hackers obtain and maintain illegal access. Embrace the dark side of Netcat, so that you may do good deeds later.* Transfer Files Using Netcat The flexability and simple operation allows Netcat to fill a niche when it comes to moving a file or files in a quick and easy fashion. Encryption is provided via several different avenues including integrated support on some of the more modern Netcat variants, tunneling via third-party tools, or operating system integrated IPsec policies.* Troubleshoot Your Network with Netcat Examine remote systems using Netat's scanning ability. Test open ports to see if they really are active and see what protocls are on those ports. Communicate with different applications to determine what problems might exist, and gain insight into how to solve these problems.* Sniff Traffic within a System Use Netcat as a sniffer within a system to collect incoming and outgoing data. Set up Netcat to listen at ports higher than 1023 (the well-known ports), so you can use Netcat even as a normal user.

  • Scene of the Cybercrime

    • 2nd Edition
    • Debra Littlejohn Shinder + 1 more
    • English
    When it comes to computer crimes, the criminals got a big head start. But the law enforcement and IT security communities are now working diligently to develop the knowledge, skills, and tools to successfully investigate and prosecute Cybercrime cases. When the first edition of "Scene of the Cybercrime" published in 2002, it was one of the first books that educated IT security professionals and law enforcement how to fight Cybercrime. Over the past 5 years a great deal has changed in how computer crimes are perpetrated and subsequently investigated. Also, the IT security and law enforcement communities have dramatically improved their ability to deal with Cybercrime, largely as a result of increased spending and training. According to the 2006 Computer Security Institute's and FBI's joint Cybercrime report: 52% of companies reported unauthorized use of computer systems in the prior 12 months. Each of these incidents is a Cybecrime requiring a certain level of investigation and remediation. And in many cases, an investigation is mandates by federal compliance regulations such as Sarbanes-Oxley, HIPAA, or the Payment Card Industry (PCI) Data Security Standard. Scene of the Cybercrime, Second Edition is a completely revised and updated book which covers all of the technological, legal, and regulatory changes, which have occurred since the first edition. The book is written for dual audience; IT security professionals and members of law enforcement. It gives the technical experts a little peek into the law enforcement world, a highly structured environment where the "letter of the law" is paramount and procedures must be followed closely lest an investigation be contaminated and all the evidence collected rendered useless. It also provides law enforcement officers with an idea of some of the technical aspects of how cyber crimes are committed, and how technology can be used to track down and build a case against the criminals who commit them. Scene of the Cybercrime, Second Editions provides a roadmap that those on both sides of the table can use to navigate the legal and technical landscape to understand, prevent, detect, and successfully prosecute the criminal behavior that is as much a threat to the online community as "traditional" crime is to the neighborhoods in which we live. Also included is an all new chapter on Worldwide Forensics Acts and Laws.

  • Nagios 3 Enterprise Network Monitoring

    Including Plug-Ins and Hardware Devices
    • 1st Edition
    • Andrew Hay + 4 more
    • English
    The future for Nagios in the enterprise is certainly bright! Nagios 3 Enterprise Network Monitoring can help you harness the full power of Nagios in your organization. Nagios 3 contains many significant new features and updates, and this book details them all for you. Once up and running, you'll see how a number of useful add-ons and enhancements for Nagios can extend the functionality of Nagios throughout your organization. And, if you want to learn how to write your own plugins...this is the book for you! In these pages you'll find a cookbook-style chapter full of useful plugins that monitor a variety of devices, from HTTP-based applications to CPU utilization to LDAP servers and more.

  • Organising Knowledge in a Global Society

    Principles and Practice in Libraries and Information Centres
    • 1st Edition
    • Philip Hider + 1 more
    • English
    Organising Knowledge in a Global Society updates the successful first edition, which has been widely used as an introduction to the field of information organisation, both in Australia and overseas. The work reflects current practice and trends, paying particular attention to how libraries and other information services provide intellectual access to digital information resources through metadata. In this revision, the various information organisation components of the Web 2.0 phenomenon are discussed, including social tagging and folksonomies. The new edition also covers the latest developments in metadata standards, such as Resource Description and Access, and information retrieval systems such as the increasing support for faceted navigation. Examples and case studies have been updated throughout.

  • Joint-Use Libraries

    Libraries for the Future
    • 1st Edition
    • Sarah McNicol
    • English
    This book examines all aspects of joint-use libraries, from the implications of government policy, to design and operational issues and evaluation. It considers all forms of joint-use library (e.g. school-public, college-public, university-public, health-university), reflecting on different models adopted around the world. Some of the main issues discussed include: partnership working, staffing and management, stock, digital resources, learning and literacy and community involvement.

  • Information History - An Introduction

    Exploring an Emergent Field
    • 1st Edition
    • Toni Weller
    • English
    This is a pioneering introduction to the emergent field of information history. It explores how the contemporary values and concerns of our own information society have helped lead to a reconsideration of our history, and of what constitutes our historical understanding of information in the twenty-first century. In Information History, Toni Weller examines the historiography of information and asks how the key schools of thought have explored the concept in terms of its social, technological, economic and cultural understandings. Based on personal experiences, the author also proposes some practical applications of information history in research and university teaching, offering some suggestions as to how the field may develop based on its growth during the last decade.

  • Integrating ISA Server 2006 with Microsoft Exchange 2007

    • 1st Edition
    • Fergus Strachan
    • English
    This book is a convenient, targeted, single-source guide to integrating Microsoft's ISA Server with Exchange 2007 SP1. Unlike longwinded "comprehensive resources" it doesn't waste time re-hashing general information on the architectures and purposes of ISA and Exchange for raw beginners. Instead, its pragmatic purpose is to smooth the path of the busy administrator who is under pressure to get the integration done quickly, and done right, the first time. It features "break-out sessions" for issues that require in-depth discussion, "tips and tricks" sections that hone in on and demystify trouble spots, and "FAQs" alphabetized by topic that act as a quick-reference for readers who just want a quick answer to a specific question.Readers will learn how to:*Create the protocol definitions and firewall policy to allow only authorized users to connect to your Exchange Server*Configure SMTP Filtering and SMTP Message Screener*Troubleshoo... the SSL connection to your Exchange Server*Take advantage of ISA 2006's integrated Exchange 2007 support*Enable forms-based authentication for Outlook Web Access*Leverage unified SSL, VPN, application-layer filtering and endpoint securityto optimize access for mobile devices*Configure user-based settings to provide pre-authenticated access to specific Web applications...and much more!

  • Securing Windows Server 2008

    Prevent Attacks from Outside and Inside Your Organization
    • 1st Edition
    • Aaron Tiensivu
    • English
    Microsoft hails the latest version of its flagship server operating system, Windows Server 2008, as "the most secure Windows Server ever". However, to fully achieve this lofty status, system administrators and security professionals must install, configure, monitor, log, and troubleshoot a dizzying array of new features and tools designed to keep the bad guys out and maintain the integrity of their network servers. This is no small task considering the market saturation of Windows Server and the rate at which it is attacked by malicious hackers. According to IDC, Windows Server runs 38% of all network servers. This market prominence also places Windows Server at the top of the SANS top 20 Security Attach Targets. The first five attack targets listed in the SANS top 20 for operating systems are related to Windows Server. This doesn't mean that Windows is inherently less secure than other operating systems; it's simply a numbers game. More machines running Windows Server. More targets for attackers to hack.As a result of being at the top of the "most used" and "most hacked" lists, Microsoft has released a truly powerful suite of security tools for system administrators to deploy with Windows Server 2008. This book is the comprehensive guide needed by system administrators and security professionals to master seemingly overwhelming arsenal of new security tools including: 1. Network Access Protection, which gives administrators the power to isolate computers that don't comply with established security policies. The ability to enforce security requirements is a powerful means of protecting the network.2. Enhanced solutions for intelligent rules and policies creation to increase control and protection over networking functions, allowing administrators to have a policy-driven network.3. Protectio... of data to ensure it can only be accessed by users with the correct security context, and to make it available when hardware failures occur.4. Protection against malicious software with User Account Control with a new authentication architecture.5. Incr... control over your user settings with Expanded Group Policy....to name just a handful of the new security features. In short, Windows Server 2008 contains by far the most powerful and complex suite of security tools ever released in a Microsoft Server product. Securing Windows Server 2008 provides system administrators and security professionals with the knowledge they need to harness this power.

  • The Real MCTS/MCITP Exam 70-620 Prep Kit

    Independent and Complete Self-Paced Solutions
    • 1st Edition
    • Anthony Piltzecker
    • English
    This exam is designed to validate proficieny supporting Windows Vista client. This exam will fulfill the Windows Vista Technology Specialist requirements of Exam 70-620.The Microsoft Certified Technology Specialist (MCTS) on Windows Vista credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience in Tier 1 or Tier 2 phone support in an upper midsize organization or enterprise environment. MCTS candidates should have experience resolving issues concerning network connectivity, desktop operating systems, security, and applications. Their experience should also include addressing logon problems, performing password resets, and resolving most issues with desktop applications.

  • Emergency Management and Tactical Response Operations

    Bridging the Gap
    • 1st Edition
    • Thomas D. Phelan
    • English
    Is emergency management education undoing an age-old tradition in the American Fire Service? Has the time arrived to educate emergency managers in college classrooms rather than in twenty years of tactical operations experience? Over one hundred forty-three (143) institutions of higher education are now offering certificate or degree programs in emergency management with no tactical operations experience required for admission. Resistance by veteran law enforcement officers and fire fighters may have to be overcome if we are to prepare emergency managers with required skill sets. Dr. Tom Phelan explores the skills being taught to emergency management students and addresses the concerns of experienced first responders in accepting their leadership.

  • Nessus Network Auditing

    • 2nd Edition
    • Russ Rogers
    • English
    The Updated Version of the Bestselling Nessus Book. This is the ONLY Book to Read if You Run Nessus Across the Enterprise. Ever since its beginnings in early 1998, the Nessus Project has attracted security researchers from all walks of life. It continues this growth today. It has been adopted as a de facto standard by the security industry, vendor, and practitioner alike, many of whom rely on Nessus as the foundation to their security practices. Now, a team of leading developers have created the definitive book for the Nessus community.Perform a Vulnerability AssessmentUse Nessus to find programming errors that allow intruders to gain unauthorized access.Obtain and Install NessusInstall from source or binary, set up up clients and user accounts, and update your plug-ins.Modify the Preferences TabSpecify the options for Nmap and other complex, configurable components of Nessus.Understand Scanner Logic and Determine Actual RiskPlan your scanning strategy and learn what variables can be changed.Prioritize VulnerabilitiesPrior... and manage critical vulnerabilities, information leaks, and denial of service errors.Deal with False PositivesLearn the different types of false positives and the differences between intrusive and nonintrusive tests.Get Under the Hood of NessusUnderstand the architecture and design of Nessus and master the Nessus Attack Scripting Language (NASL).Scan the Entire Enterprise NetworkPlan for enterprise deployment by gauging network bandwith and topology issues.

  • A Quick Guide to Health and Safety

    • 1st Edition
    • R Gilbert
    • English
    Health and safety issues now impose upon almost every part of business life. The system of enforcement is managed and implemented in the UK by The Health and Safety Executive (HSE) – but at times it can be difficult to know exactly which bits of this elaborate spider’s web should be applied in a given instance, and which are most important. This Quick Guide puts the subject into context, providing a rational overview and a valid starting point to applying health and safety in the workplace, and offers a concise and readily accessible interpretation of what health and safety legislation means in practice.

  • Library Project Funding

    A Guide to Planning and Writing Proposals
    • 1st Edition
    • Julie Carpenter
    • English
    Managers and staff in libraries and information services in all sectors are increasingly required to prepare project proposals and bid for funding, usually for external funding, but also as part of internal strategic planning and management processes. The projects proposed must be realistic and feasible, because library managers and staff will be required to deliver their project on time and in budget. If managers get the planning wrong at project proposal stage, the consequences for implementation can be difficult to overcome. This book provides guidance on the various steps involved in project development, planning and the preparation of bids for funding based on the author’s own experience and that of many organisations in the cultural heritage and education sectors. It guides service managers and staff through the task of scoping, developing and writing viable, realistic and winning proposals, drawing on a range of techniques from strategic planning, financial management, project management and business.

  • Adaptive Behavior Assessment System-II

    Clinical Use and Interpretation
    • 1st Edition
    • Thomas Oakland + 1 more
    • English
    Adaptive Behavior Assessment System-II summarizes information on adaptive behavior and skills as well as general issues in adaptive behavior assessment with the goal of promoting sound assessment practice during uses, interpretations, and applications of the Adaptive Behavior Assessment System-II. Adaptive behavior and skills refer to personal qualities associated with the ability to meet one’s personal needs such as communication, self-care, socialization, etc. and those of others. Data from measures of adaptive behavior have been used most commonly in assessment and intervention services for persons with mental retardation. However, the display of adaptive behaviors and skills is relevant to all persons. The Adaptive Behavior Assessment System-II (ABAS-II) provides a comprehensive, norm-referenced assessment of the adaptive behavior and skills of individuals from birth through age 89. The comprehensive natures of the ABAS-II, ease in administration and scoring, and wide age range have resulted in its widespread use for a large number of assessment purposes. The book provides practical information and thus serves as a valuable resource for those who use the ABAS-II.

  • The Bioarchaeology of Metabolic Bone Disease

    • 1st Edition
    • Megan B. Brickley + 1 more
    • English
    The Bioarchaeology of Metabolic Bone Disease provides a comprehensive and invaluable source of information on this important group of diseases. It is an essential guide for those engaged in either basic recording or in-depth research on human remains from archaeological sites. The range of potential tools for investigating metabolic diseases of bone are far greater than for many other conditions, and building on clinical investigations, this book will consider gross, surface features visible using microscopic examination, histological and radiological features of bone, that can be used to help investigate metabolic bone diseases.

  • OS X Exploits and Defense

    Own it...Just Like Windows or Linux!
    • 1st Edition
    • Chris Hurley + 6 more
    • English
    Contrary to popular belief, there has never been any shortage of Macintosh-related security issues. OS9 had issues that warranted attention. However, due to both ignorance and a lack of research, many of these issues never saw the light of day. No solid techniques were published for executing arbitrary code on OS9, and there are no notable legacy Macintosh exploits. Due to the combined lack of obvious vulnerabilities and accompanying exploits, Macintosh appeared to be a solid platform. Threats to Macintosh's OS X operating system are increasing in sophistication and number. Whether it is the exploitation of an increasing number of holes, use of rootkits for post-compromise concealment or disturbed denial of service, knowing why the system is vulnerable and understanding how to defend it is critical to computer security. Macintosh OS X Boot Process and Forensic Software All the power, all the tools, and all the geekery of Linux is present in Mac OS X. Shell scripts, X11 apps, processes, kernel extensions...it's a UNIX platform....Now, you can master the boot process, and Macintosh forensic software Look Back Before the Flood and Forward Through the 21st Century Threatscape Back in the day, a misunderstanding of Macintosh security was more or less industry-wide. Neither the administrators nor the attackers knew much about the platform. Learn from Kevin Finisterre how and why that has all changed! Malicious Macs: Malware and the Mac As OS X moves further from desktops, laptops, and servers into the world of consumer technology (iPhones, iPods, and so on), what are the implications for the further spread of malware and other security breaches? Find out from David Harley Malware Detection and the Mac Understand why the continuing insistence of vociferous Mac zealots that it "can't happen here" is likely to aid OS X exploitationg Mac OS X for Pen Testers With its BSD roots, super-slick graphical interface, and near-bulletproof reliability, Apple's Mac OS X provides a great platform for pen testing WarDriving and Wireless Penetration Testing with OS X Configure and utilize the KisMAC WLAN discovery tool to WarDrive. Next, use the information obtained during a WarDrive, to successfully penetrate a customer's wireless network Leopard and Tiger Evasion Follow Larry Hernandez through exploitation techniques, tricks, and features of both OS X Tiger and Leopard, using real-world scenarios for explaining and demonstrating the concepts behind them Encryption Technologies and OS X Apple has come a long way from the bleak days of OS9. THere is now a wide array of encryption choices within Mac OS X. Let Gareth Poreus show you what they are.

  • The Real MCTS/MCITP Exam 70-649 Prep Kit

    Independent and Complete Self-Paced Solutions
    • 1st Edition
    • Brien Posey
    • English
    This exam is designed to validate Windows Server 2003 Microsoft Certified Systems Administrators (MCSEs) AD, Network Infrastructure, and Application Platform Technical Specialists skills. The object of this exam is to validate only the skills that are are different from the existing MCSE skills. This exam will fulfill the Windows Server 2008 Technology Specialist requirements of Exams 70-640, 70-642, and 70-643.The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users; three or more physical locations; and three or more domain controllers. MCTS candidates will manage network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management. In addition MCTS candidates must understant connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet.

  • The Real MCTS/MCITP Exam 70-643 Prep Kit

    Independent and Complete Self-Paced Solutions
    • 1st Edition
    • Brien Posey + 5 more
    • English
    This exam is designed to validate Windows Server 2008 applications platform configuration skills. This exam will fulfill the Windows Server 2008 Technology Specialist requirements of Exam 70-643. The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users; three or more physical locations; and three or more domain controllers. MCTS candidates will manage network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management. In addition MCTS candidates must understant connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet.

  • The Real MCTS/MCITP Exam 70-648 Prep Kit

    Independent and Complete Self-Paced Solutions
    • 1st Edition
    • Brien Posey
    • English
    This exam is designed to validate Windows Server 2003 Microsoft Certified Systems Administrators (MCSAs) AD and Application Platform Technical Specialists skills. The object of this exam is to validate only the skills that are are different from the existing MCSA skills. This exam will fulfill the Windows Server 2008 Technology Specialist requirements of Exams 70-640 and 70-643.The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users; three or more physical locations; and three or more domain controllers. MCTS candidates will manage network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management. In addition MCTS candidates must understant connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet.

  • Criminal Profiling

    An Introduction to Behavioral Evidence Analysis
    • 3rd Edition
    • Brent E. Turvey
    • English
    Now in its third edition, Criminal Profiling is established as an industry standard text. It moves evidence-based criminal profiling into a full embrace of the scientific method with respect to examining and interpreting behavioral evidence. If focuses on criminal profiling as an investigative and forensic process, helping to solve crime through an honest understanding of the nature and behavior of the most violent criminals. Throughout the text, the author outlines specific principles and practice standards for Behavioral Evidence Analysis, focusing on the application of theory and method to real cases. Criminal Profiling, Third Edition, is an ideal companion for students and professionals alike, including investigators, forensic scientists, criminologists, mental health professionals, and attorneys. With contributing authors representing law enforcement, academic, mental health, and forensic science communities, it offers a balanced perspective not found in other books on this subject. Readers will use it as a comprehensive reference text, a handbook for evaluating physical evidence, a tool to bring new perspectives to cold cases, and as an aid in preparing for criminal trials.

  • Managing Catastrophic Loss of Sensitive Data

    A Guide for IT and Security Professionals
    • 1st Edition
    • Constantine Photopoulos
    • English
    Offering a structured approach to handling and recovering from a catastrophic data loss, this book will help both technical and non-technical professionals put effective processes in place to secure their business-critical information and provide a roadmap of the appropriate recovery and notification steps when calamity strikes.

  • Metadata for Digital Resources

    Implementation, Systems Design and Interoperability
    • 1st Edition
    • Muriel Foulonneau + 1 more
    • English
    This book assists information professionals in improving the usability of digital objects by adequately documenting them and using tools for metadata management. It provides practical advice for libraries, archives, and museums dealing with digital collections in a wide variety of formats and from a wider variety of sources. This book is forward-thinking in its approach to using metadata to drive digital library systems, and will be a valuable resource for those creating and managing digital resources as technologies for using those resources grow and change.

  • Library Performance and Service Competition

    Developing Strategic Responses
    • 1st Edition
    • Larry Nash White
    • English
    A practice-driven and proven resource for library administrators of all types of libraries. The work describes how the library can identify the service environment factors impacting customers; strategic needs; identify library competitors; strategic abilities and service environment impacts; and use the combined results to develop proactive competitive responses that drive the service environment instead of reacting to the service environment. These strategic competitive responses would allow the library to increase the value of its service impact and effectiveness while increasing customer appreciation and the libraries advantage in the competitive service environment.

  • The Real MCTS/MCITP Exam 70-640 Prep Kit

    Independent and Complete Self-Paced Solutions
    • 1st Edition
    • Anthony Piltzecker
    • English
    This exam is designed to validate Windows Server 2008 Active Directory skills. This exam will fulfill the Windows Server 2008 Technology Specialist requirements of Exam 70-640.The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users; three or more physical locations; and three or more domain controllers. MCTS candidates will manage network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management. In addition MCTS candidates must understand connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet.

  • The Real MCTS/MCITP Exam 70-642 Prep Kit

    Independent and Complete Self-Paced Solutions
    • 1st Edition
    • Brien Posey
    • English
    This exam is designed to validate Windows Server 2008 network infrastructure configuration skills. This exam will fulfill the Windows Server 2008 Technology Specialist requirements of Exam 70-642. This is a test for new certification seekers, not for those who are upgrading from Windows 2000/2003 MCSE/MCSA certification.The Microsoft Certified Technology Specialist (MCTS) on Windows Server 2008 credential is intended for information technology (IT) professionals who work in the complex computing environment of medium to large companies. The MCTS candidate should have at least one year of experience implementing and administering a network operating system in an environment that has the following characteristics: 250 to 5,000 or more users; three or more physical locations; and three or more domain controllers. MCTS candidates will manage network services and resources such as messaging, a database, file and print, a proxy server, a firewall, the Internet, an intranet, remote access, and client computer management. In addition MCTS candidates must understand connectivity requirements such as connecting branch offices and individual users in remote locations to the corporate network and connecting corporate networks to the Internet.

  • Digital Information Culture

    The Individual and Society in the Digital Age
    • 1st Edition
    • Luke Tredinnick
    • English
    Digital Information Culture is an introduction to the cultural, social and political impact of digital information and digital resources. The book is organised around themes, rather than theories and is arranged into three sections: culture, society and the individual. Each explores key elements of the social, cultural and political impact of digital information. The culture section outlines the origins of cyber culture in fifties pulp-fiction through to the modern day. It explores the issues of information overload, the threat of a digital dark age, and the criminal underbelly of digital culture. Section two, society, explores the economic and social impact of digital information, outlining key theories of the Information Age. Section three explores the impact of digital information and digital resources on the individual, exploring the changing nature of identity in a digital world.

  • Learning Commons

    Evolution and Collaborative Essentials
    • 1st Edition
    • Barbara Schader
    • English
    This book examines successfully planned and implemented learning commons at several different academic institutions around the world. These case studies provide a methodology for effective planning, implementation and assessment. Practical information is provided on how to collaborate with campus stakeholders, estimate budgeting and staffing and determine the equipment, hardware and software needs. Also provided are memoranda of understandings (MOUs), planning checklists and assessment tools. This book reflects a unifying focus on both the evolution of learning commons to learning spaces and the collaborative aspect of co-creating learning spaces.

  • The Role of China in Global Dirty Industry Migration

    • 1st Edition
    • Haitian Lu
    • English
    The first book to comprehensively analyze the regulation of dirty industry migration - a global issue that has complex economic, environmental and social implications. The book examines the mechanisms of regulation of dirty industry migration under internal trade, investment, environment and human rights laws. Other than international law, the host and home country regulation of dirty industry migration in the context of domestic laws and policies are examined. Finally, this book critically evaluates the voluntary codes relating to corporate environmental citizenship and social responsibility which bear implications on the regulation of dirty industry migration.

  • The Future of Information Architecture

    • 1st Edition
    • Peter Baofu
    • English
    The Future of Information Architecture examines issues surrounding why information is processed, stored and applied in the way that it has, since time immemorial. Contrary to the conventional wisdom held by many scholars in human history, the recurrent debate on the explanation of the most basic categories of information (eg space, time causation, quality, quantity) has been misconstrued, to the effect that there exists some deeper categories and principles behind these categories of information - with enormous implications for our understanding of reality in general. To understand this, the book is organised in to four main parts: Part I begins with the vital question concerning the role of information within the context of the larger theoretical debate in the literature. Part II provides a critical examination of the nature of data taxonomy from the main perspectives of culture, society, nature and the mind. Part III constructively invesitgates the world of information network from the main perspectives of culture, society, nature and the mind. Part IV proposes six main theses in the authors synthetic theory of information architecture, namely, (a) the first thesis on the simpleness-complicat... principle, (b) the second thesis on the exactness-vagueness principle (c) the third thesis on the slowness-quickness principle (d) the fourth thesis on the order-chaos principle, (e) the fifth thesis on the symmetry-asymmetry principle, and (f) the sixth thesis on the post-human stage.

  • Scholarly Communication in China, Hong Kong, Japan, Korea and Taiwan

    • 1st Edition
    • Jingfeng Xia
    • English
    This is one of the very few books that systematically explores the characteristics of scholarly communication outside the West. Over the last decade the advances in information technology have remodelled the foundation of scholarly communication. This book examines how countries/regions in East Asia (China, Japan, Korea and Taiwan) have reacted to the innovations in the conduct of research and in the exchange of ideas. It outlines the traditional systems of scholarly exchange in China, Japan, Korea and Taiwan, and then concentrates on the efforts of these countries/regions to provide revolutionary ways of writing, publishing, and reading of information produced by members of the academic community. It also discusses the achievements as well as challenges in the process of technology innovations, highlighting the uniqueness of practices in scholarly communication in this part of the world.

  • Marketing the Best Deal in Town

    Your Library
    • 1st Edition
    • Nancy Rossiter
    • English
    This book covers basic marketing tenets and terminology, how to go about setting up a marketing plan, and contemporary topics such as branding and marketing to women. This book is illustrated throughout with successful strategies libraries are currently using to market their services. Skill-building exercises are included for students and practitioners and cases studies are incorporated for analyzing current library marketing issues.

  • Kidnapping

    An Investigator's Guide to Profiling
    • 1st Edition
    • Diana M. Concannon
    • English
    Kidnapping: An Investigator's Guide to Profiling is based on a three-part analysis of 100 randomly selected kidnapping cases prosecuted in the United States that have survived Supreme Court appeal. The results of the analysis are incorporated into each chapter as part of the exploration of the inductive profile of each subtype, thereby offering a statistically based tool that can inform investigative strategies and the allocation of limited resources. The analysis includes standardized input from four levels of professional law enforcement including a forensic psychologist, a crime analyst, a detective, and a city prosecutor. Kidnapping: An Investigator's Guide to Profiling is an excellent resource for law enforcement and mental health professionals who are investigating and analyzing specific incidents of kidnapping, and will also appeal to the 6,000+ members of the American Academy of Forensic Sciences (AAFS).

  • Background Screening and Investigations

    Managing Hiring Risk from the HR and Security Perspectives
    • 1st Edition
    • W. Barry Nixon + 1 more
    • English
    Hiring highly qualified people is crucial to every company, and Background Screening and Investigations is an essential guide to succeeding in a turbulent business environment. A crucial part of any hiring process should be employment background screening, pre- and post-hire, which gives hiring personnel a glimpse into a person's past behavior patterns, propensities, and likely future behavior. Background Screening and Investigations describes all aspects of the employment background screening processes - its history and evolution, the imperative for implementing a screening process, and the creation of a comprehensive policy. Nixon and Kerr show how security and human resources professionals can work together to negotiate legal hurdles and make their background screening process successful.

  • Introduction to Security

    • 8th Edition
    • Robert Fischer + 1 more
    • English
    Introduction to Security has been the leading introduction to private security for over 30 years, celebrated for its balanced and professional approach to this increasingly important area. Now the 8th edition expands the key topics and adds material important in the 21st century environment. The author team brings together top-level professional experience in industry with years of teaching experience. As a recommended title for security certifications, it is a crucial resource for the 30,000+ ASIS International members, and is also used as a core security textbook in universities throughout the country. This is Butterworth-Heineman... best-selling security text of all time, an essential reference for all security professionals.

  • Check Point NGX R65 Security Administration

    • 1st Edition
    • Ralph Bonnell
    • English
    Check Point NGX R65 is the next major release of Check Point's flagship firewall software product, which has over 750,000 registered users. Check Point's NGX is the underlying security software platform for all of the company's enterprise firewall, VPN and management solutions. It enables enterprises of all sizes to reduce the cost and complexity of security management and ensure that their security systems can be easily extended to adapt to new and emerging threats. This title is a continuation of Syngress' best-selling references on Check Point's market leading Firewall and VPN products.

  • Biosecurity and Bioterrorism

    Containing and Preventing Biological Threats
    • 1st Edition
    • Jeffrey Ryan + 1 more
    • English
    Biosecurity and Bioterrorism is the first book to take a holistic approach to biosecurity with coverage of pathogens, prevention and response methodology. The book is organized into four thematic sections: Part I provides a conceptual understanding of biowarfare, bioterrorism and the laws we have to counteract this; Part II investigates known bioagents and the threat from emerging diseases; Part III focuses on agricultural terrorism and food security; Part IV outlines international, US, and local initiatives for biodefense and biosecurity. Case studies illustrate biodefense against both intentional terrorism and natural outbreaks. The authors bring an extraordinary combination of experience in academia and the clinical world, as well as real-world experience in technical and practical matters, to their writing. They make technical material clear and fascinating for readers with a basic knowledge of biology. Ryan and Glarum address the hazards in the context of vulnerability assessments and the planning strategies government and industry can take to prepare for and respond to such events.

  • Secrets Stolen, Fortunes Lost

    Preventing Intellectual Property Theft and Economic Espionage in the 21st Century
    • 1st Edition
    • Richard Power + 1 more
    • English
    The threats of economic espionage and intellectual property (IP) theft are global, stealthy, insidious, and increasingly common. According to the U.S. Commerce Department, IP theft is estimated to top $250 billion annually and also costs the United States approximately 750,000 jobs. The International Chamber of Commerce puts the global fiscal loss at more than $600 billion a year.Secrets Stolen, Fortunes Lost offers both a fascinating journey into the underside of the Information Age, geopolitics, and global economy, shedding new light on corporate hacking, industrial espionage, counterfeiting and piracy, organized crime and related problems, and a comprehensive guide to developing a world-class defense against these threats. You will learn what you need to know about this dynamic global phenomenon (how it happens, what it costs, how to build an effective program to mitigate risk and how corporate culture determines your success), as well as how to deliver the message to the boardroom and the workforce as a whole. This book serves as an invaluable reservoir of ideas and energy to draw on as you develop a winning security strategy to overcome this formidable challenge.

  • OSSEC Host-Based Intrusion Detection Guide

    • 1st Edition
    • Daniel Cid + 2 more
    • English
    This book is the definitive guide on the OSSEC Host-based Intrusion Detection system and frankly, to really use OSSEC you are going to need a definitive guide. Documentation has been available since the start of the OSSEC project but, due to time constraints, no formal book has been created to outline the various features and functions of the OSSEC product. This has left very important and powerful features of the product undocumented...until now! The book you are holding will show you how to install and configure OSSEC on the operating system of your choice and provide detailed examples to help prevent and mitigate attacks on your systems.-- Stephen Northcutt OSSEC determines if a host has been compromised in this manner by taking the equivalent of a picture of the host machine in its original, unaltered state. This "picture" captures the most relevant information about that machine's configuration. OSSEC saves this "picture" and then constantly compares it to the current state of that machine to identify anything that may have changed from the original configuration. Now, many of these changes are necessary, harmless, and authorized, such as a system administrator installing a new software upgrade, patch, or application. But, then there are the not-so-harmless changes, like the installation of a rootkit, trojan horse, or virus. Differentiating between the harmless and the not-so-harmless changes determines whether the system administrator or security professional is managing a secure, efficient network or a compromised network which might be funneling credit card numbers out to phishing gangs or storing massive amounts of pornography creating significant liability for that organization. Separating the wheat from the chaff is by no means an easy task. Hence the need for this book. The book is co-authored by Daniel Cid, who is the founder and lead developer of the freely available OSSEC host-based IDS. As such, readers can be certain they are reading the most accurate, timely, and insightful information on OSSEC.

Related subjects