Yvette,
Welcome to Network Security :-) It's an interesting world...
I have a little list of books in my head that got me started,
and that I've stumbled across through the years. Let me give
you a few pointers:
First Up, Bill Cheswick and Steven Bellovin's "Firewalls and Internet
Security - Repelling the Wily Hacker". ISBN: 0201633574, this one is
what you might call the 'bible' of building firewalls. Easy to read,
and it gives a good 'ground-up' explanation of how all this stuff
works. Not a new book by IT standards, but still very relevant. A
must buy.
Chapman and Zwicky, "Building Internet Firewalls" comes in a close
second. To be honest, I never read this one cover to cover, but what
I did read was good, honest, and it did a good job. ISBN 1565921240
Craig Hunt's TCP/IP Network Administration, another O'Rielly
book, is the holy grail insofar as TCP/IP goes. Strictly speaking,
the late W. Richard Steven's TCP/IP Illustrated series are the
'bible' on TCP/IP, but Hunt's book is more real-world, more
practical. A good book, not must buy, but definitely SHOULD buy.
ISBN: 1565923227
Albitz and Liu's "DNS and Bind" - Must buy. In my introductory
classes on TCP/IP networking and Network Security, I always teach
that, if you have a problem with mail delivery, the problem is
either (1) DNS, (2) DNS, or (3) DNS. You MUST understand DNS if
you are to be successfull in this game. Buy it. ISBN: 1565925122
... and on a lighter note...
Clifford Stole's "The Cuckoo's Egg" is a must read for when you've
had enough of technical books and you want to see the human side
of this game. Cliff was one of the originals, one of the first to
follow a cracker through the networks and track him down. A very
'old' book in technical terms - we're talking the beginnings of the
Internet and of TCP/IP here, but a _VERY_ entertaining book. MUST
READ. ISBN: 0671726889.
(For the record, don't buy Cliff's second (?) book "Silicon
Snake Oil" - IMHO, he turned into a bitter and twisted old man
by the time he wrote that one, and it simply isn't worth your
time.)
For your manager: Linda McCarthy's "Intranet Security - Stories
from the Trenches". You will find this book to be a very informative
and entertaining read yourself, but it's real value is in passing
it on to your boss. This book will scare the excrement out of
him/her, and you'll have no trouble obtaining the budget you need
to do security properly. Completely non-technical, but guaranteed
to bust the "it couldn't happen to us" bubble. MUST BUY.
ISBN: 0138947597
Hope this helps,
Geoff
--
CREDIT | FIRST Geoff Breach, [EMAIL PROTECTED], +61293944040
SUISSE | BOSTON Global Network Services - Asia Pacific Engineering
Opinions expressed herein are mine, not my employer's
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
