Excellent intermediate/advanced security book

I finally picked up this book last year and throughoughly enjoyed it. I keep referring to it because the examples build up to the point of qualified proof of concept. The examples also are different enough from the other ones that are easy to find with Google, so between the two you get a complete view of the vulnerable issue.

The book's title should be obvious enough; this is NOT a book of defenses. However, if you understand these attacks you will be better equiped to deal with them when they happen. This book is no replacement for hands-on training in person with a qualified instructor such as at the SANS Institute, but it is an excellent supplement.

Other Reviews

• A poorly writen book
• Excellent intermediate/advanced security book
• The definitive text on Windows rootkits, applicable in 2005 or 2007
• Belongs on all IT security professionals' bookshelves
• Excellent read