# data[].attributes.name
Firewall Policies and VPN Configurations

# data[].attributes.description
A firewall is as good as its policies and the security of its VPN connections. The latest generation of firewalls offers a dizzying array of powerful options; they key to success is to write concise policies that provide the appropriate level of access while maximizing security.

This book covers the leading firewall products: Cisco PIX, Check Point NGX, Microsoft ISA Server, Junipers NetScreen Firewall, and SonicWall. It describes in plain English what features can be controlled by a policy, and walks the reader through the steps for writing the policy to fit the objective. Because of their vulnerability and their complexity, VPN policies are covered in more depth with numerous tips for troubleshooting remote connections.

The only book that focuses on creating policies that apply to multiple products.
Included is a bonus chapter on using Ethereal, the most popular protocol analyzer, to monitor and analyze network traffic.
Shows what features can be controlled by a policy, and walks you through the steps for writing the policy to fit the objective at hand

# data[].attributes.author
Syngress, Dale Liu, Stephanie Miller, Mark Lucas, Abhishek Singh, Jennifer Davis

# data[].attributes.name
Wireshark & Ethereal Network Protocol Analyzer Toolkit

# data[].attributes.description
Ethereal is the #2 most popular open source security tool used by system administrators and security professionals. This all new book builds on the success of Syngress best-selling book Ethereal Packet Sniffing.

Wireshark & Ethereal Network Protocol Analyzer Toolkit provides complete information and step-by-step Instructions for analyzing protocols and network traffic on Windows, Unix or Mac OS X networks. First, readers will learn about the types of sniffers available today and see the benefits of using Ethereal. Readers will then learn to install Ethereal in multiple environments including Windows, Unix and Mac OS X as well as building Ethereal from source and will also be guided through Ethereals graphical user interface. The following sections will teach readers to use command-line options of Ethereal as well as using Tethereal to capture live packets from the wire or to read saved capture files. This section also details how to import and export files between Ethereal and WinDump, Snort, Snoop, Microsoft Network Monitor, and EtherPeek. The book then teaches the reader to master advanced tasks such as creating sub-trees, displaying bitfields in a graphical view, tracking requests and reply packet pairs as well as exclusive coverage of MATE, Ethereals brand new configurable upper level analysis engine. The final section to the book teaches readers to enable Ethereal to read new Data sources, program their own protocol dissectors, and to create and customize Ethereal reports. Ethereal is the #2 most popular open source security tool, according to a recent study conducted by insecure.org Syngress' first Ethereal book has consistently been one of the best selling security books for the past 2 years

# data[].attributes.author
Jay Beale, Angela Orebaugh, Gilbert Ramirez

# data[].attributes.description
Milton Ohring's Engineering Materials Science integrates the scientific nature and modern applications of all classes of engineering materials. This comprehensive, introductory textbook will provide undergraduate engineering students with the fundamental background needed to understand the science of structure-property relationships, as well as address the engineering concerns of materials selection in design, processing materials into useful products, andhow material degrade and fail in service. Specific topics include: physical and electronic structure; thermodynamics and kinetics; processing; mechanical, electrical, magnetic, and optical properties; degradation; and failure and reliability. The book offers superior coverage of electrical, optical, and magnetic materials than competing text.The author has taught introductory courses in material science and engineering both in academia and industry (AT&T; Bell Laboratories) and has also written the well-received book, The Material Science of Thin Films (Academic Press).

Key Features* Provides a modern treatment of materials exposing the interrelated themes of structure, properties, processing, and performance* Includes an interactive, computationally oriented, computer disk containing nine modules dealing with structure, phase diagrams, diffusion, and mechanical and electronic properties* Fundamentals are stressed* Of particular interest to students, researchers, and professionals in the field of electronic engineering

# data[].attributes.description
The processes of manufacture and assembly are based on the communication of engineering information via drawing. These drawings follow rules laid down in national and international standards. The organisation responsible for the international rules is the International Standards Organisation (ISO). There are hundreds of ISO standards on engineering drawing because drawing is very complicated and accurate transfer of information must be guaranteed. The information contained in an engineering drawing is a legal specification, which contractor and sub-contractor agree to in a binding contract. The ISO standards are designed to be independent of any one language and thus much symbology is used to overcome any reliance on any language. Companies can only operate efficiently if they can guarantee the correct transmission of engineering design information for manufacturing and assembly.This book is a short introduction to the subject of engineering drawing for manufacture. It should be noted that standards are updated on a 5-year rolling programme and therefore students of engineering drawing need to be aware of the latest standards. This book is unique in that it introduces the subject of engineering drawing in the context of standards.

# data[].attributes.name
Essential Computer Security: Everyone's Guide to Email, Internet, and Wireless Security

# data[].attributes.description
Essential Computer Security provides the vast home user and small office computer market with the information they must know in order to understand the risks of computing on the Internet and what they can do to protect themselves.

Tony Bradley is the Guide for the About.com site for Internet Network Security. In his role managing the content for a site that has over 600,000 page views per month and a weekly newsletter with 25,000 subscribers, Tony has learned how to talk to people, everyday people, about computer security. Intended for the security illiterate, Essential Computer Security is a source of jargon-less advice everyone needs to operate their computer securely.

* Written in easy to understand non-technical language that novices can comprehend

* Provides detailed coverage of the essential security subjects that everyone needs to know

* Covers just enough information to educate without being overwhelming

# data[].attributes.description
Engineering Digital Design, Second Edition provides the most extensive coverage of any available textbook in digital logic and design. The new REVISED Second Edition published in September of 2002 provides 5 productivity tools free on the accompanying CD ROM. This software is also included on the Instructor's Manual CD ROM and complete instructions accompany each software program.

In the REVISED Second Edition modern notation combines with state-of-the-art treatment of the most important subjects in digital design to provide the student with the background needed to enter industry or graduate study at a competitive level. Combinatorial logic design and synchronous and asynchronous sequential machine design methods are given equal weight, and new ideas and design approaches are explored.

The productivity tools provided on the accompanying CD are outlined below:
[1] EXL-Sim2002 logic simulator: EXL-Sim2002 is a full-featured, interactive, schematic-capture and simulation program that is ideally suited for use with the text at either the entry or advanced-level of logic design. Its many features include drag-and-drop capability, rubber banding, mixed logic and positive logic simulations, macro generation, individual and global (or randomized) delay assignments, connection features that eliminate the need for wire connections, schematic page sizing and zooming, waveform zooming and scrolling, a variety of printout capabilities, and a host of other useful features.

[2] BOOZER logic minimizer: BOOZER is a software minimization tool that is recommended for use with the text. It accepts entered variable (EV) or canonical (1's and 0's) data from K-maps or truth tables, with or without don't cares, and returns an optimal or near optimal single or multi-output solution. It can handle up to 12 functions Boolean functions and as many inputs when used on modern computers.

[3] ESPRESSO II logic minimizer: ESPRESSO II is another software minimization tool widely used in schools and industry. It supports advanced heuristic algorithms for minimization of two-level, multi-output Boolean functions but does not accept entered variables. It is also readily available from the University of California, Berkeley, 1986 VLSI Tools Distribution.

[4] ADAM design software: ADAM (for Automated Design of Asynchronous Machines) is a very powerful productivity tool that permits the automated design of very complex asynchronous state machines, all free of timing defects. The input files are state tables for the desired state machines. The output files are given in the Berkeley format appropriate for directly programming PLAs. ADAM also allows the designer to design synchronous state machines, timing-defect-free. The options include the lumped path delay (LPD) model or NESTED CELL model for asynchronous FSM designs, and the use of D FLIP-FLOPs for synchronous FSM designs. The background for the use of ADAM is covered in Chapters 11, 14 and 16 of the REVISED 2nd Edition.

[5] A-OPS design software: A-OPS (for Asynchronous One-hot Programmable Sequencers) is another very powerful productivity tool that permits the design of asynchronous and synchronous state machines by using a programmable sequencer kernel. This software generates a PLA or PAL output file (in Berkeley format) or the VHDL code for the automated timing-defect-free designs of the following: (a) Any 1-Hot programmable sequencer up to 10 states. (b) The 1-Hot design of multiple asynchronous or synchronous state machines driven by either PLDs or RAM. The input file is that of a state table for the desired state machine. This software can be used to design systems with the capability of instantly switching between several radically different controllers on a
time-shared basis. The background for the use of A-OPS is covered in Chapters 13, 14 and 16 of the REVISED 2nd Edition.

# data[].attributes.name
Troubleshooting Centrifugal Pumps and their systems

# data[].attributes.description
This book is intended for those new to the use and abuse of centrifugal pumps. It is also for those whose involvement with pumps is so occasional, that they need a reminder of the basics.

# data[].attributes.name
Elements of Polymer Science & Engineering

# data[].attributes.subtitle
An Introductory Text and Reference for Engineers and Chemists

# data[].attributes.description
Tremendous developments in the field of polymer science, its growing importance, and an increase in the number of polymer science courses in both physics and chemistry departments have led to the revision of the First Edition. This new edition addresses subjects as spectroscopy (NMR), dynamic light scattering, and other modern techniques unknown before the publication of the First Edition. The Second Edition focuses on both theory (physics and chemistry) and engineering applications which make it useful for chemistry, physics, and chemical engineering departments.

# data[].attributes.description
This book is written for an introductory course in space technology. It is intended for senior or graduate level aerospace engineering students and professional engineers seeking a thorough understanding of the aerospace aspects of space systems. As such it focuses on the primary physics and engineering fundamentals necessary to understand and design space based systems. The book does not include the basics of spacecraft electronics, because this is covered in many systems and electronics books and is typically covered in follow-up courses.

* Derived from the author's thirty years of experience in the aerospace industry and several years of university teaching experience
* More than 130 illustrations
* Advanced subjects and problems indicated by asterisks(*)allow the reader and the instructor to omit topics without losing continuity
* All chapters correspond to the engineering subdivisions typically found in the aerospace industry
* Includes United States and international technologies
* Extensive appendix of important data, not easily located in other sources
* The book does not include the basics of spacecraft electronics

# data[].attributes.description
The second edition of this authoritative textbook continues the tradition of providing clear and concise descriptions of the new and classic concepts in financial theory. The authors keep the theory accessible by requiring very little mathematical background.

First edition published by Prentice-Hall in 2001- ISBN 0130174467.

The second edition includes new structure emphasizing the distinction between the equilibrium and the arbitrage perspectives on valuation and pricing, as well as a new chapter on asset management for the long term investor.

"This book does admirably what it sets out to do - provide a bridge between MBA-level finance texts and PhD-level texts....
many books claim to require little prior mathematical training, but this one actually does so.
This book may be a good one for Ph.D students outside finance who need some basic training in financial theory or for those looking for a more user-friendly introduction to advanced theory.
The exercises are very good."
--Ian Gow, Student, Graduate School of Business, Stanford University Completely updated edition of classic textbook that fills a gap between MBA level texts and PHD level texts Focuses on clear explanations of key concepts and requires limited mathematical prerequisites Updates includes new structure emphasizing the distinction between the equilibrium and the arbitrage perspectives on valuation and pricing, as well as a new chapter on asset management for the long term investor

# data[].attributes.description
Scope of PublicationA reference work for process designers and users of decanters, this book aims to bridge the information gap in this field - that between academic theory promoted in student textbooks and case study data in manufacturers sales literature.
DesignIt includes information on design and specification, preparing the reader to select and correctly size equipment.
PurchaseAs a design or project engineer working with vendors to make final equipment selection, this work provides the readers with the full facts before they start talking to product vendors.
SupplyIn an environment of industry consolidation, the handbook allows you to track suppliers old and new, providing a basis on which users can find the new relevant company for the parts/service he/she wishes to purchase.
OperationOnce an equipment purchase is made, the user needs to be made aware of how to optimally operate decanters. The Decanter Centrifuge Handbook covers relevant (process) operating issues such as instrumentation and control and the use of flocculents.

# data[].attributes.description
This is the only book available on building network DMZs, which are the cornerstone of any good enterprise security configuration. It covers market-leading products from Microsoft, Cisco, and Check Point.

One of the most complicated areas of network technology is designing, planning, implementing, and constantly maintaining a demilitarized zone (DMZ) segment. This book is divided into four logical parts. First the reader will learn the concepts and major design principles of all DMZs. Next the reader will learn how to configure the actual hardware that makes up DMZs for both newly constructed and existing networks. Next, the reader will learn how to securely populate the DMZs with systems and services. The last part of the book deals with troubleshooting, maintaining, testing, and implementing security on the DMZ. The only book published on Network DMZs on the components of securing enterprise networks This is the only book available on building network DMZs, which are the cornerstone of any good enterprise security configuration. It covers market-leading products from Microsoft, Cisco, and Check Point Provides detailed examples for building Enterprise DMZs from the ground up and retro-fitting existing infrastructures

# data[].attributes.name
Developer's Guide to Web Application Security

# data[].attributes.description
Over 75% of network attacks are targeted at the web application layer. This book provides explicit hacks, tutorials, penetration tests, and step-by-step demonstrations for security professionals and Web application developers to defend their most vulnerable applications.

This book defines Web application security, why it should be addressed earlier in the lifecycle in development and quality assurance, and how it differs from other types of Internet security. Additionally, the book examines the procedures and technologies that are essential to developing, penetration testing and releasing a secure Web application. Through a review of recent Web application breaches, the book will expose the prolific methods hackers use to execute Web attacks using common vulnerabilities such as SQL Injection, Cross-Site Scripting and Buffer Overflows in the application layer. By taking an in-depth look at the techniques hackers use to exploit Web applications, readers will be better equipped to protect confidential. The Yankee Group estimates the market for Web application-security products and services will grow to $1.74 billion by 2007 from $140 million in 2002 Author Michael Cross is a highly sought after speaker who regularly delivers Web Application presentations at leading conferences including: Black Hat, TechnoSecurity, CanSec West, Shmoo Con, Information Security, RSA Conferences, and more

# data[].attributes.description
Computer Networks ISE, Fourth Edition, is the only introductory computer networking book written by authors who have had first-hand experience with many of the protocols discussed in the book, who have actually designed some of them as well, and who are still actively designing the computer networks today.

This newly revised edition continues to provide an enduring, practical understanding of networks and their building blocks through rich, example-based instruction. The authors' focus is on the why of network design, not just the specifications comprising today's systems but how key technologies and protocols actually work in the real world to solve specific problems. The new edition makes less use of computer code to explain protocols than earlier editions.

Moreover, this new edition shifts the focus somewhat higher in the protocol stack where there is generally more innovative and exciting work going on at the application and session layers than at the link and physical layers.
Completely updated with NEW sidebars discussing successes/failures of previously deployed networks Thorough companion website with downloadable OpNet network simulation software and lab experiments manual Expanded coverage of topics of utmost importance to today's networking professionals, e.g., security, wireless, multimedia applications

# data[].attributes.description
The only guide for software developers who must learn and implement cryptography safely and cost effectively.

Cryptography for Developers begins with a chapter that introduces the subject of cryptography to the reader. The second chapter discusses how to implement large integer arithmetic as required by RSA and ECC public key algorithms The subsequent chapters discuss the implementation of symmetric ciphers, one-way hashes, message authentication codes, combined authentication and encryption modes, public key cryptography and finally portable coding practices. Each chapter includes in-depth discussion on memory/size/speed performance trade-offs as well as what cryptographic problems are solved with the specific topics at hand. The author is the developer of the industry standard cryptographic suite of tools called LibTom A regular expert speaker at industry conferences and events on this development

# data[].attributes.name
Configuring Juniper Networks NetScreen and SSG Firewalls

# data[].attributes.description
Juniper Networks Secure Access SSL VPN appliances provide a complete range of remote access appliances for the smallest companies up to the largest service providers. This comprehensive configuration guide will allow system administrators and security professionals to configure these appliances to allow remote and mobile access for employees. If you manage and secure a larger enterprise, this book will help you to provide remote and/or extranet access for employees, partners, and customers from a single platform. Configure Junipers Instant Virtual Extranet (IVE) Install and set up IVE through either the command line interface (CLI) or Web-based console Master the "3 Rs": Realms, Roles, and Resources Realize the potential of the "3Rs" for endpoint security, sign-in policies, and authorization of servers Get Inside both the Windows and Java Versions of Secure Application Manager (SAM) Learn to implement SAM, manage the end-user experience, and troubleshoot SAM in the field Integrate IVE with Terminal Services and Citrix Enable terminal services proxy and configure role options, configure Citrix using a custom ICA, configure terminal services resource policies and profiles, and configure terminal services and Citrix using a hosted Java applet Ensure Endpoint Security Use Host Checker, Cache Cleaner, Secure Virtual Workspace, and IVE/IDP integration to secure your network Manage the Remote Access Needs of Your Organization Configure Web access, file access and telnet/SSH access for remote users and offices Configure Core Networking Components through the System Menu Create clusters, manage virtual systems, and monitor logs, reports, and alerts Create Bullet-Proof Sign-in Policies Create standard and custom sign-in pages for both user and administrator access and Secure Meeting pages Use the IVE for Log-Related Tasks Perform log filtering, log management, syslog exporting, SNMP management, and system resource monitoring and reporting.

# data[].attributes.author
Rob Cameron, Chris Cantrell, Anne Hemni, Lisa Lorenzin

# data[].attributes.subtitle
Discover, Detect, and Eradicate the Internet's Greatest Threat

# data[].attributes.description
Combating Spyware in the Enterprise is the first book published on defending enterprise networks from increasingly sophisticated and malicious spyware.

Combating Spyware in the Enterprise begins by examining the various types of insidious spyware and adware currently propagating across the internet and infiltrating enterprise networks. This section closely examines Spywares ongoing transformation from nuisance to malicious, sophisticated attack vector. Next, the book uncovers spywares intricate economy and network of malicious hackers and criminals. Forensic investigations presented in this section of the book reveal how increasingly sophisticated spyware can compromise enterprise networks via trojans, keystroke loggers, system monitoring, distributed denial of service attacks, backdoors, viruses, and worms. After close examination of these attack vectors, the book begins to detail both manual and automated techniques for scanning your network for the presence of spyware, and customizing your IDS and IPS to detect spyware. From here, the book goes on to detail how to prevent spyware from being initially installed to mitigating the damage inflicted by spyware should your network become infected. Techniques discussed in this section include slowing the exposure rate; web filtering; using FireFox, MacOSX, or Linux; patching and updating, machine restrictions, shielding, deploying anti-spyware, and re-imaging. The book concludes with an analysis of the future of spyware and what the security community must accomplish to win the ware against spyware.

* A recent survey published by Information Security Magazine stated that "combating spyare" was the #2 priority for security professionals in 2005
* Despite the high priority placed on combating spyware by security professionals, there are no other books published or announced that address this market * Author Paul Piccard is Director of Research for Webroot, which is a market leader for pure-play anti-spyware vendors

# data[].attributes.description
The Second Edition of Computerization and Controversy: Value Conflicts and Social Choices is a collection of 78 articles that examine the social aspects of computerization from a variety of perspectives, many presenting important viewpoints not often discussed in the conventional literature. A number of paired articles comprise thought-provoking head-on debate. Fields represented include computer science, information systems, management, journalism, psychology, law, library science, and sociology.

This volume introduces some of the major controversies surrounding the computerization of society and helps readers recognize the social processes that drive and shape computerization. Division into eight provocatively titled sections facilitates course planning for classroom or seminar use. A lead article for each section frames the major controversies, locates the selections within the debates, and points to other relevant literature.
A fully revised and updated version of the first anthological treatment of the subject Organized to facilitate course planning for classroom or seminar use Provides coverage of the influence of computers on a wide variety of fields including computer science, information systems, management, journalism, psychology, law, library science, and sociology

# data[].attributes.name
CIMA Exam Practice Kit Management Accounting Risk and Control Strategy

# data[].attributes.description
CIMA Exam Practice Kits consolidate learning by providing an extensive bank of practice questions. Each solution provides an in depth analysis of the correct answer and highlights why the alternatives are incorrect. CIMA Exam Practice Kits are ideal for students studying independently or attending a tutored revision course. It supplements the Official CIMA Study Systems and CIMA Revision Cards with a wealth of additional questions and material focused purely on applying what has been learnt to passing the exam. CIMA Exam Practice Kits help students prepare with confidence for exam day, and to pass the new syllabus first time.

* Helps CIMA students to prepare and pass the new syllabus first time * Practice applying and displaying knowledge so CIMA examiners can award you marks * Provides worked answers to fully explain the correct answer, and analysis of incorrect answers - helping CIMA students avoid common pitfalls