Cisco Router and Switch Forensics PDF ePub eBook

Books Info:

Cisco Router and Switch Forensics free pdf Cisco IOS (the software that runs the vast majority of Cisco routers and all Cisco network switches) is the dominant routing platform on the Internet and corporate networks. This widespread distribution, as well as its architectural deficiencies, makes it a valuable target for hackers looking to attack a corporate or private network infrastructure. Compromised devices can disrupt stability, introduce malicious modification, and endanger all communication on the network. For security of the network and investigation of attacks, in-depth analysis and diagnostics are critical, but no book currently covers forensic analysis of Cisco network devices in any detail. "Cisco Router and Switch Forensics" is the first book devoted to criminal attacks, incident response, data collection, and legal testimony on the market leader in network devices, including routers, switches, and wireless access points.Why is this focus on network devices necessary? Because criminals are targeting networks, and network devices require a fundamentally different approach than the process taken with traditional forensics. By hacking a router, an attacker can bypass a network's firewalls, issue a denial of service (DoS) attack to disable the network, monitor and record all outgoing and incoming traffic, or redirect that communication anywhere they like. But capturing this criminal activity cannot be accomplished with the tools and techniques of traditional forensics. While forensic analysis of computers or other traditional media typically involves immediate shut-down of the target machine, creation of a duplicate, and analysis of static data, this process rarely recovers live system data.So, when an investigation focuses on live network activity, this traditional approach obviously fails. Investigators must recover data as it is transferred via the router or switch, because it is destroyed when the network device is powered down. In this case, following the traditional approach outlined in books on general computer forensics techniques is not only insufficient, but also essentially harmful to an investigation. Jargon buster: a network switch is a small hardware device that joins multiple computers together within one local area network (LAN). A router is a more sophisticated network device that joins multiple wired or wireless networks together.This is the only book devoted to forensic analysis of routers and switches, focusing on the operating system that runs the vast majority of network devices in the enterprise and on the Internet. It outlines the fundamental differences between router forensics and traditional forensics, a critical distinction for responders in an investigation targeting network activity. It details where network forensics fits within the entire process of an investigation, end to end, from incident response and data collection to preparing a report and legal testimony.

About Dale Liu

Dale Liu, (MCSE Security, CISSP, MCT, IAM/IEM, CCNA) has been working in the computer and networking field for over 20 years. Dale's experience ranges from programming to networking to information security and project management. He currently teaches networking, routing and security classes, while working in the field performing security audits and infrastructure design for medium to large companies.

Details Book

Author : Dale Liu
Publisher : Syngress Media,U.S.
Data Published : 26 June 2009
ISBN : 1597494186
EAN : 9781597494182
Format Book : PDF, Epub, DOCx, TXT
Number of Pages : 528 pages
Age + : 15 years
Language : English
Rating :

Reviews Cisco Router and Switch Forensics

17 Comments Add a comment

Related eBooks Download

  • Introduction to Network Forensics free pdfIntroduction to Network Forensics

    "Introduction to Network Forensics" presents the latest in forensic computing and IT security. Written in a highly readable form that is applicable to academic courses and as a professional guide..

  • Network Forensics free pdfNetwork Forensics

    "This is a must-have work for anybody in information security. digital forensics. or involved with incident handling. As we move away from traditional disk-based analysis into the interconnectivity of the cloud..

  • The Practice of Network Security Monitoring free pdfThe Practice of Network Security Monitoring

    Network security is not simply about building impenetrable walls - determined attackers will eventually overcome traditional defenses. The most effective computer security strategies integrate network security monitoring (NSM): the collection and analysis of data to help you detect and respond to intrusions..

  • Interconnecting Cisco Network Devices, Part 2 (ICND2) Foundation Learning G ... free pdfInterconnecting Cisco Network Devices, Part 2 (ICND2) Foundation Learning G ...

    Interconnecting Cisco Network Devices. Part 2 (ICND2). is the Cisco-authorized. self-paced learning tool for CCNA foundation learning. This book provides you with the knowledge needed to install. operate..

  • Converged Network Architectures free pdfConverged Network Architectures

    Get the big picture on converged network architectures and emerging protocols. Converged networks integrate voice. video. and data traffic on a single network. This book covers converged network architectures as well as the latest enabling protocols including SIP..

  • Cisco Router and Switch Forensics free pdfCisco Router and Switch Forensics

    . Cisco IOS (the software that runs the vast majority of Cisco routers and all Cisco network switches) is the dominant routing platform on the Internet and corporate networks. This widespread distribu