Bokler's Bookstore

Bokler Software Corp.amzn-assoc.gif (1012 bytes)
Categories:
Find it yourself
Enter keywords...

Crypto & Security

Click to order

Title, Author & Review

Crypto : How the Code Rebels Beat the Government -- Saving Privacy in the Digital Age
by Steven Levy
If the National Security Agency (NSA) had wanted to make sure that strong encryption would reach the masses, it couldn't have done much better than to tell the cranky geniuses of the world not to do it. Levy writes, "Behind every great cryptographer, it seems, there is a driving pathology," but his respect for the mathematicians and programmers who spearheaded public key encryption as the solution to Information Age privacy invasion shines throughout. Even the governmental bad guys are presented more as hapless control fetishists who lack the prescience to see the inevitability of strong encryption as more than a conspiracy of evil.
0471117099.gif (5805 bytes) Applied Cryptography : Protocols, Algorithms, and Source Code in C
by Bruce Schneier
Schneier's Applied Cryptography: Protocols, Algorithms, and Source Code in C offers an authoritative introduction to the field of cryptography, suitable for both the specialist and the general reader. The book adopts an encyclopedic approach to cryptographic systems throughout history, from ciphers to public key cryptography.
Readable, instructive, and truly exhaustive, this text is a must for anyone wanting a solid introduction to the field in a single volume. Applied Cryptography presents the source code for most algorithms and other procedures in C rather than using pure math. The book also includes source code for the Data Encryption Standard (DES) and other algorithms, but readers don't need to know programming to benefit from this text. With a truly comprehensive bibliography of over 1,600 entries, Applied Cryptography provides the reader with plenty of sources for more information.
book4_crypto.gif (7581 bytes) Handbook of Applied Cryptography
by Alfred J. Menezes, Paul C. Van Oorschot, Scott A. Vanstone
Cryptography, in particular public-key cryptography, has emerged in the last 20 years as a very serious discipline that is not only the subject of an enormous amount of research, but is providing the basis for information security in many applications. This Handbook will serve as a valuable reference for the novice as well as for the expert who needs a wider scope of coverage within the area of cryptography.
  • Serves as an introduction to the more practical aspects of both conventional and public-key cryptography
  • A valuable source of the latest techniques and algorithms for the serious practitioner
  • Provides an integrated treatment of the field, while still presenting each major topic as a self-contained unit
  • Used in data communications, financial services, and alarm systems
book2_crypto.gif (13848 bytes) The Codebreakers; The Comprehensive History of Secret Communication from Ancient Times to the Internet
by David Kahn
"Few false ideas have more firmly gripped the minds of so many intelligent men than the one that, if they just tried, they could invent a cipher that no one could break," writes David Kahn in this massive (almost 1,200 pages) volume. Most of The Codebreakers focuses on the 20th century, especially World War II. But its reach is long. Kahn traces cryptology's origins to the advent of writing. It seems that as soon as people learned how to record their thoughts, they tried to figure out ways of keeping them hidden. Kahn covers everything from the theory of ciphering to the search for "messages" from outer space. He concludes with a few thoughts about encryption on the Internet.
more crypto books...

Software Development

Click to order Title, Author & Review
Visual Basic .NET Text Manipulation Handbook: String Handling and Regular Expressions
by Paul Wilton, Craig McQueen, François Liger
The .NET Framework brings a variety of string manipulation features to the VB language, and some of these, namely regular expressions and the StringBuilder class, are something VB 6 developers may not have seen before. This book teaches you how to manipulate text using these string matching, manipulation, and replacement classes. Issues such as Localization and data conversion will also be investigated.
Building Secure Software: Avoid Security Problems the Right Way
by John Viega, Gary McGraw
Most organizations have a firewall, antivirus software, and intrusion detection systems, all of which are intended to keep attackers out. So why is computer security a bigger problem today than ever before? The answer is simple--bad software lies at the heart of all computer security problems. Traditional solutions simply treat the symptoms, not the problem, and usually do so in a reactive way. This book teaches you how to take a proactive approach to computer security.
Writing Secure Code
by Michael Howard, David Leblanc
Security mistakes by software architects, designers, and developers are an ongoing plague that costs businesses millions of dollars every year when malicious intruders attack interconnected applications, steal credit-card numbers, and deface Web sites. WRITING SECURE CODE offers a ready cure. This fact-filled title covers the major aspects of creating secure applications. Its short, easily-digested chapters can provide software designers, architects, developers, and testers with the training, theory, and techniques they need to take the right actions to ensure security. Topics covered include security principles, design, code, and test for security, why companies neglect security, the 10 immutable laws of security and security administration, and more. Developers who read this title will have the peace of mind that comes from knowing that the code they develop is not only fast, but secure. 
Developer's Workshop to COM and ATL 3.0
by Andrew Troelsen
Microsoft’s Component Object Model is one of the most important concepts in software development today. Developer’s Workshop to COM and ATL 3.0 provides an in-depth treatment of COM and shows how to adopt a component framework, namely ATL, to help lessen the burden of repetitive code. Every chapter contains integrated lab assignments that give you numerous opportunities to build COM clients and servers using raw C++ and IDL, as well as the Active Template Library.
Programming Server-Side Applications for Microsoft Windows 2000
by Jeffrey Richter, Jason D. Clark
An ever-growing number of applications are being developed for the Windows server platform. As more companies come to rely on this burgeoning code base, software developers require the skills to closely integrate with Windows. Administrators resent applications with obvious bugs, but they will also reject code that is difficult to administer, performs poorly, or dominates system resources. Programming Server-Side Applications for Microsoft Windows 2000 helps intermediate and advanced Windows programmers by covering a range of topics needed to develop reliable applications for Windows 2000.
Programming Applications for Microsoft Windows
by Jeffrey Richter
Aimed at the experienced C/C++ developer, this edition supplies expanded coverage of essential advanced Windows programming techniques and APIs. In addition, the book includes excellent material on Windows 2000 (including future 64-bit versions of the OS) and use of some C++ for sample code.
This book's strength has to be its coverage of essential under-the-hood operating system features, like processes and threads, synchronization objects and memory management techniques, plus the APIs used to work with them. Besides describing important APIs, the book provides programming tricks and tips for many useful advanced coding tasks (such as local thread storage, sparsely mapped memory files, using DLLs, and Windows hooks.)
Effective C++: 50 Ways to Improve Your Programs and Design
by Scott Meyers
One of the most universally recommended texts on C++ programming. The second edition incorporates recent advances to C++ included in the ISO standard, including namespaces and built-in template classes.
The book opens with some hints for porting code from C to C++ and then moves on to the proper use of the new and delete operators in C++ for more robust memory management. It then proceeds to class design, including the proper use of constructors, destructors, and overloaded operator functions for assignment within classes. 
The author also provides suggestions for general class design, including strategies for using different types of inheritance and encapsulation. Following these guidelines can make your C++ classes more robust and easier to maintain.
C: A Reference Manual
by Samuel P. Harbison, Guy L. Steele (Contributor)
Harbison and Steele have now gone through four editions and are beginning to cover language differences which can surprise the experienced C coder moving to C++. As always, the authors do an excellent job of explaining what's standard and what it replaces. No hairy syntax has been omitted, so this volume can make wending one's way through obfuscated code, if not pleasant, at least less miserable. Whether you learned C from Kernighan or some massive tome, you'll want this volume as your day-to-day reference. 
This fourth edition of the bestselling C reference covers two important developments: the ISO C Amendment 1 (1994), which specifies new facilities for writing portable, international programs in C; and a discussion of how to write C programs that are compatible with C++.

book1_abookonc.gif (4452 bytes)

A Book on C : Programming in C
by Al Kelley, Ira Pohl
Now in its fourth edition, A Book on C retains the features that have made it a proven, best-selling tutorial and reference on the ANSI C programming language. This edition builds on the many existing strengths of the text to improve, update, and extend the coverage of C, and now includes information on transitioning to Java and C++ from C. Beginners and professional programmers alike will benefit from the numerous examples and extensive exercises developed to guide readers through each concept. Step-by-step dissections of program code illuminate the correct usage and syntax of C language constructs and reveal the underlying logic of their application. The clarity of exposition and format of the book make it an excellent reference on all aspects of C.
Professional Active Server Pages 3.0
by Alex Homer, et. al.
Professional Active Server Pages 3.0 is the next edition of the number one selling ASP book in the world; Professional Active Server Pages 2.0. This is a next edition covering all the new features that appear as part of Win2000 but it is also a completely new book in terms of content, recycling essentially nothing from the previous edition. Instead all the concepts are taken a step further for a more mature audience and ASP is considered in terms of an N-tier enterprise environment including extensive coverage of components, Index Server, ADO 2.5, XML, CDO, ADSI, and much more.
Programming Windows Services: Implementing Application Servers
by Randy Charles Morin
A comprehensive tutorial in using NT Services for efficient Windows NT/2000 application server implementations The biggest development in Microsoft Windows is the recent introduction of Windows NT/2000 application servers. Randy Morin gives readers what they need to know before implementing NT/2000 servers. His helpful templates let them compare a variety of programming tools such as Visual Basic, C++, and Delphi. He also explains how to develop NT/2000 Services that use sockets, DCOM, CORBA and other distribute-transports to communicate with the outside world. And he shows how to develop professional NT/2000 Services using the Event Log, secure a server using NT/2000 security, and configure a service to work with all of the NT/2000 security platforms. CD-ROM includes complete source code from the book. 
Professional NT Services
by Kevin Miller
This book is my attempt to unify a wide range of material on a poorly documented topic--NT Service development. In the book, I discuss in detail how to design and implement good, scalable NT services (including COM services). I also provide a firm grounding in the security, configuration, and implementation issues for services, some of which can be quite intricate and difficult to decipher. Lastly, and most importantly, I provide several real-world examples based on what I call "usage patterns," or system design opportunities. These usage patterns show not only implementation details, but also illustrate the different ways that services can be effectively utilized in a software architecture. 
more programming books...

Hardware

Click to order

Title, Author & Review

PCI & PCI-X Hardware and Software (Architecture and Design)
by Ed Solari
The major goal of this book is to document in one location both the hardware and software architectures of the PCI and PCI-X buses. This book is based on the PCI local bus specification Rev. 2.2 and 3.0, PCI-to-PCI Bridge Architecture Specification Rev. 1.1, PCI BIOS Specification Rev. 2.1, PCI-X addendum 1.0a, and additional information not incorporated in any of them (and only available in this book). This enables you to quickly access ALL the information necessary to ensure the proper design of PCI and PCI-X based systems, components, or add-in cards.
   
   

Hacking, etc.

Click to order

Title, Author & Review

Hacking Exposed: Network Security Secrets and Solutions
by Stuart McClure, Joel Scambray, George Kurtz
Dr. Mudge of the L0pht security research group, sez:
"Understanding how to mount and create attacks is the only way you can protect against existing and, more importantly, future attacks. The information contained herein arms those on the defensive (security admin, network architects, software developers, etc) with this knowledge. It is refreshing to see this sort of material finally being made available to the general public."
Hacking Exposed Windows 2000 (Hacking Exposed)
by Joel Scambray, Stuart McClure
From the best-selling co-authors of the world-renowned book, Hacking Exposed, comes Hacking Windows 2000 Exposed. You'll learn, step-by-step, how to defend against the latest attacks by understanding how intruders enter and pilfer compromised networks and weaknesses in password encryption, domain control, Web and IIS 5 communications, LM/NTLM protocols, Active Directory, NetBIOS services, and much more.
Securing Windows NT/2000 Servers for the Internet
by Stefan Norberg, Deborah Russell
A concise guide that pares down installation and configuration instructions into a series of checklists aimed at Windows administrators. Topics include:
  • Introduction--Windows NT/2000 security threats, OS architecture, and typical perimeter networks.
  • How to build a Windows NT bastion host.
  • Configuring Windows and network services, encrypting the password database, setting system policy, performing TCP/IP configuration, configuring administrative tools, and setting permissions.
  • Secure remote administration--SSH, OpenSSH, TCP Wrappers, the Virtual Network Console, and the new Windows 2000 Terminal Services.
  • Windows NT/2000 backup, recovery, auditing, and monitoring--event logs, the audit policy, time synchronization with NTP (Network Time Protocol), remote logging, integrity checking, and intrusion detection.
book2_security.gif (13005 bytes) Windows NT Security; Programming Easy-to-Use Security Options
by Nik Okuntseff
Explains NT security from the ground up and provides a friendlier interface to Windows NT security than the more than 75 functions now found in the NT API. With some nicely designed C++ classes, you will be able to extract security information from objects easily and protect objects with a minimum of code. This is a code-oriented book written for those with a basic knowledge of the Windows NT operating system who also know what processes and thread are, what the Registry is, and what a Windows NT service is. Many code examples throughout the book, especially the class library, assume the use of Microsoft Foundation Classes. This book is primarily about access control in Window NT.
book3_ids.gif (9630 bytes) Network Intrusion Detection : An Analysis Handbook
by Stephen Northcult
Get answers and solutions from someone who has been in the trenches with Network Intrusion Detection: An Analyst's Handbook. Author Stephen Northcutt, original developer of the Shadow Iintrusion detection system and former Director of the United States Navy's Information System Security Office at the Naval Security Warfare Center, lends his expertise to intrusion detection specialists, security analysts, and consultants responsible for setting up and maintaining an effective defense against network security attacks.
more hacking books...



Amazon.com is pleased to have Bokler Software Corp. in the family of Amazon.com associates. We've agreed to ship books and provide customer service for orders we receive through special links on www.bokler.com. Amazon.com associates list selected books in an editorial context that helps you choose the right books. We encourage you to visit Bokler's Bookstore often to see what new books they've selected for you. Thank you for shopping with an Amazon.com associate.

Sincerely,
Jeff Bezos
President
Amazon.com

P.S. We guarantee you the same high level of customer service you would receive at Amazon.com. If you have a question about an order you've placed, please don't hesitate to contact us.