Spotlight customer reviews:
|
Customer Rating: 
Summary: Light Face of the Dark Side
Comment: The Global Network is not a battle ground. It is a play ground.
This book although it covers security issues is great insight into the mentality that the security geeks can have. For them the security of platforms and networks are faulted and the hackers task is to disclose that.
Customer Rating:
Summary: A Wonderful Treatment of Network Security
Comment: At a conference I was at some time ago, a fellow mentioned to me that one person he would probably not want to play poker with is Michal Zalewski. I didn't really get his statement at the time, but after reading this book, I can now wholeheartedly understand his reluctance.
Although only 260 pages long, Michal's book covers an incredibly wide range of topics, pinpointing numerous areas in which incredible amounts of information about you and your computer are available, even though it may not seem that way at first blush. From the keyboard, to the processor, to the operating system, to the network wire, Michal points out the many holes from which this information is leaking from. His writing style gives rise to an entertaining narrative where a high-level picture makes the main concept available to everyone, while at the same time providing citations in the footnotes that let you delve into the details at a later point.
Silence on the Wire impressed me in so many ways that it's difficult to list them all here. Michal's understanding of so many areas in computer security is simply astounding. He covers each topic in just enough detail, not bogging down the reader in lots of technical jargon, but also not doing an inordinate amount of 'hand-waving'. His movement through the various components of the computer and the network is very well done; it ties together in a nice progression that the reader can follow easily.
I enjoyed the a nice selection of papers Michal discusses in which many ingenious attacks were described (timing attacks on RSA, SSH password recovery through timing analysis, TEMPEST, etc.). But one thing that truly stood out in this book is Michal's own contribution, which includes his work with p0f, the analysis of various ISN generators, and his work on identifying various web browsers through timing analysis. I was just amazed at how easily Michal pulled these 'fingerprints' out of seemingly random and/or innocuous data sets.
I had actually read about much of the work that Silence on the Wire covers beforehand, but in spite of that I learned a great deal from this book, and I know that many others can too. If you only read one book on network security, make it this one!
Customer Rating:
Summary: super
Comment: Thanks a lot, we are very happy to have this book in our library!
Customer Rating: 
Summary: New look at the (in)security of networked computers
Comment: I am a student studying information security and I've read many books lately on the subject. Silence on the Wire is truly a unique book, and a nice change from the conventional reading material. Michal is a known expert in his field, and you can find many of his works and research in a simple search. His book focuses on the basic, yet most overlooked computer and network designs that can be attacked. In Silence on the Wire, Michal takes us on a long, treacherous journey of a packet, from when the data is first entered to its final destination. Along the way, we look at flaws in the design of computers and networks and how they are eventually exploited.
I held off reading this book all summer, after trying to read through the second chapter and finally getting frustrated with it. Chapter two is the book's downfall, as it spends entirely too much time getting to "the point" (as Richard Bejtlich puts it). Michal's explanations here were too confusing and will lose almost any reader. I think the section on the Turing Machine can be skipped over, unless you slow down and take notes and draw yourself diagrams of the information. Only then, will you probably understand what it's getting at. I'm happy to say though, reading the rest of the book was fairly easy; anybody with a background in network computing and security will be able to follow along.
Silence on the Wire is a fascinating read and I definitely recommend it to anybody who is interested or responsible for information security. Michal hopes his book will give you a new perspective on security and explore the relationships and interactions between components. I am glad I got to read this book and hope one day to contribute my own research to the topic.
Customer Rating:
Summary: Something to have in mind
Comment: Maybe not all of the possible threats described are real today, but one really get a glimpse into a world where the major objective is to exploit possibilities not intended to be there. People populating this world think differently than the rest of us, and an explanation of how they think is both scary and enlightening. Michal Zalewski walks us through various scenarios in an easy to understand and an often humorous way.
|
|
|
