Security Basics: RE: Penetration testing books

[Craig Wright <Craig.Wright () bdo com au>]

I am biased, but:

THE IT REGULATORY AND STANDARDS COMPLIANCE HANDBOOK:
How to Survive Information Systems Audit and Assessments

http://www.elsevier.com/wps/find/bookdescription.cws_home/714704/description


Regards,
Craig Wright GSE-Malware, GSE-Compliance

> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of >p3dRø<
> Sent: Wednesday, 24 December 2008 4:34 AM
> To: security-basics () securityfocus com
> Subject: Re: Penetration testing books
>
>
>
> > Dear Friends,
> >
> > Greetings !! .. Can someone please provide
> > a list of books containing the methodology to test vulnerabilities for
> > both network and web based vulnerabilities ( session replay , session
> > fixation ) etc.
> >
> > thanks in advance
> >
> > regards,
> > Vinox
> Hi Vinox, I\'ve just been reading the \"CEH: Official Certified Ethical
> Hacker
> Review Guide\". It\'s really simple it isn\'t a large book but it\'s
> practical if
> you don\'t have enough money :D to start and continue looking in
> Internet for
> more details and programas to play with ;)
>
> http://www.amazon.com/CEH-Official-Certified-Ethical-
> Hacker/dp/0782144373
>
> You have also \"Network Security Bible\" :
> http://www.amazon.com/Network-Security-Bible-Eric-Cole/dp/0764573977
>
> Greetings!
>
> Pedro Valera L.
> ==============
> http://blog.pucp.edu.pe/pedro
> Registered Linux User #466699