Engineering

The book is logically divided into 5 main categories with each category representing a major skill set required by most security professionals:

1. Coding - The ability to program and script is quickly becoming a mainstream requirement for just about everyone in the security industry. This section covers the basics in coding complemented with a slue of programming tips and tricks in C/C++, Java, Perl and NASL.

2. Sockets - The technology that allows programs and scripts to communicate over a network is sockets. Even though the theory remains the same - communication over TCP and UDP, sockets are implemented differently in nearly ever language.

3. Shellcode - Shellcode, commonly defined as bytecode converted from Assembly, is utilized to execute commands on remote systems via direct memory access.

4. Porting - Due to the differences between operating platforms and language implementations on those platforms, it is a common practice to modify an original body of code to work on a different platforms. This technique is known as porting and is incredible useful in the real world environments since it allows you to not "recreate the wheel."

5. Coding Tools - The culmination of the previous four sections, coding tools brings all of the techniques that you have learned to the forefront. With the background technologies and techniques you will now be able to code quick utilities that will not only make you more productive, they will arm you with an extremely valuable skill that will remain with you as long as you make the proper time and effort dedications.

*Contains never before seen chapters on writing and automating exploits on windows systems with all-new exploits.

*Perform zero-day exploit forensics by reverse engineering malicious code.

*Provides working code and scripts in all of the most common programming languages for readers to use TODAY to defend their networks.

Dave Eberly's 3D Game Engine Design was the first professional guide to the essential concepts and algorithms of real-time 3D engines and quickly became a classic of game development. Dave's new book 3D Game Engine Architecture continues the tradition with a comprehensive look at the software engineering and programming of 3D engines.

This book is a complete guide to the engineering process, starting with a walk-through of the graphics pipeline showing how to construct the core elements of 3D systems, including data structures, the math system, and the object system. Dave explains how to manage data with scene graphs, how to build rendering and camera systems, and how to handle level of detail, terrain, and animation.

Advanced rendering effects such as vertex and pixel shaders are also covered as well as collision detection and physics systems. The book concludes with a discussion of application design, development tools, and coding standards for the source code of the new version of the Wild Magic engine included on the CD-ROM. Wild Magic is a commercial-quality game engine used by many companies and is a unique resource for the game development community.

*CD-ROM with the complete C++ source code for Wild Magic version 3, a commercial-quality game engine for Windows, Linux, and OS X.
*A comprehensive, practical guide to all the steps necessary to build professional-quality real-time simulations with just minimal mathematics required.
*Emphasizes the application of software engineering principles and describes the architecture of large libraries.

XML is bringing together some fairly disparate groups into a new cultural clash: document developers trying to understand what a transaction is, database analysts getting upset because the relational model doesn't fit anymore, and web designers having to deal with schemata and rule based transformations. The key to rising above the confusion is to understand the different semantic structures that lie beneath the standards of XML, and how to model the semantics to achieve the goals of the organization.
A pure architecture of XML doesn't exist yet, and it may never exist as the underlying technologies are so diverse. Still, the key to understanding how to build the new web infrastructure for electronic business lies in understanding the landscape of these new standards.
If your background is in document processing, this book will show how you can use conceptual modeling to model business scenarios consisting of business objects, relationships, processes, and transactions in a document-centric way. Database designers will learn if XML is subject to relational normalization and how this fits in with the hierarchical structure of XML documents. Web designers will discover that XML puts them into a position to automatically generate visually pleasing web pages and rich multimedia shows from otherwise dry product catalogues by using XSLT and other transformation tools. Business architects will see how XML can help them to define applications that can be quickly adapted the ever changing requirements of the market.

This book explores the fundamental concepts, basic theory, and key principles of 802.11 networks with roaming capabilities. Today, we increasingly expect to find public Wide Local Area Network (WLAN) 802.11 access in our airports, public spaces, and hotels, and we want to maintain our connections when we're mobile and using 802.11 WLANs.

However, 802.11 was not originally designed with roaming capabilities and can't, in its "pure" form, support seamless roaming between different hotspots and other 802.11 access points. This book details the theory behind various 802.11 extensions to permit roaming and describes how these extensions can be successfully implemented in 802.11 WLANs. Coverage of User Authentication in 802.11 is reviewed as is roaming between 802.11 and other wireless technologies. Wireless technologies and application programming interfaces are given their due with generous coverage as well.

* Offers a comprehensive treatise on Wi-Fi 802.11 roaming by comparing/contrasting it to cellular roaming theory and techniques
* Emerges as a "one stop" resource for design engineers charged with fulfilling the market need for seamless 802.11 device roaming capabilities
* Builds upon the knowledge base of a professional audience without delving into long discussions of theory long since mastered

With modern communication networks continuing to grow in traffic, size, complexity, and variety, control systems are critical to ensure quality and effectively manage network traffic. Providing a thorough and authoritative introduction, Wireless Ad hoc and Sensor Networks: Protocols, Performance, and Control examines the theory, architectures, and technologies needed to implement quality of service (QoS) in a wide variety of communication networks.

Based on years of research and practical experience, this book examines the technical concepts underlying the design, implementation, research, and invention of both wired and wireless networks. The author builds a strong understanding of general concepts and common principles while also exploring issues that are specific to wired, cellular, wireless ad hoc, and sensor networks. Beginning with an overview of networks and QoS control, he systematically explores timely areas such as Lyapunov analysis, congestion control of high-speed networks, admission control based on hybrid system theory, distributed power control of various network types, link state routing using QoS parameters, and predictive congestion control. The book also provides a framework for implementing QoS control using mote hardware.

Providing a deeply detailed yet conveniently practical guide to QoS implementation, Wireless Ad hoc and Sensor Networks: Protocols, Performance, and Control is the perfect introduction for anyone new to the field as well as an ideal reference guide for seasoned network practitioners.

Developers face problems created by others every day - when asked to maintain someone else's code, or when forced to use a third-party library without documentation. They might come across exactly the feature they need to implement but can't get hold of the source code. They might spend frustrating hours trying different solutions that don't work. Instead, the techniques in this book will teach developers to decompile, patch, and reverse-engineer applications, to better understand their implementation, and to work more efficiently with applications developed by others.

Covert Java offers a unique approach to solving common Java problems, from combating obfuscation in code, to patching core classes to change the intended function of an application. Each chapter focuses on a technique that solves a specific problem - outlining the problem, demonstrating the solution, then suggesting additional ideas for developers to test out the technique. Many chapters include anecdotal examples of the technique in action, and finish with summaries to ensure developers understand the most crucial points of the chapter.

Applied Software Engineering with Apache Jakarta Commons is a software engineering based guide to the Apache Jakarta Commons components (e.g., Betwixt, Digester, Discovery, Collections), other Apache projects such as Ant, the Axis Web Service toolkit, and the popular JUnit framework. The book emphasis focuses on solutions to complex problems using a simple task-driven approach. In this task-driven approach, the idea is to define a generic problem, for example Java class instantiation, and then provide solutions in multiple contexts, such as Collections-based factories, the Discovery package, or even the Launcher package. The book includes a companion CD-ROM with samples and source code.

Key Features
* Utilizes Apache Jakarta and Open Source technologies to create commercial-quality business applications
* The solutions are based on components from the Jakarta Commons toolkits and provide realistic, proven, robust solutions already used by other applications
* Source code is available using a liberal license, meaning that components can be tweaked and integrated into other projects
* Components are self contained and can be integrated into other Java projects such as J2EE without major integration problems

On the CD
* Projects and Source Code
* Complete files and source code for the examples and projects contained in the book

For broadband communications, it was frequency division multiplexing. For optical communications, it was wavelength division multiplexing. Then, for all types of networks it was code division. Breakthroughs in transmission speed were made possible by these developments, heralding next-generation networks of increasing capability in each case. The basic idea is the same: more channels equals higher throughput. For wireless communications, it is space-time coding using multiple-input-multiple-output (MIMO) technology.

Providing a complete treatment of MIMO under a single cover, MIMO System Technology for Wireless Communications assembles coverage on all aspects of MIMO technology along with up-to-date information on key related issues. Contributors from leading academic and industrial institutions around the world share their expertise and lend the book a global perspective. They lead you gradually from basic to more advanced concepts, from propagation modeling and performance analysis to space-time codes, various systems, implementation options and limitations, practical system development considerations, field trials, and network planning issues. Linking theoretical analysis to practical issues, the book does not limit itself to any specific standardization or research/industrial initiatives.

MIMO is the catalyst for the next revolution in wireless systems, and MIMO System Technology for Wireless Communications lays a thorough and complete foundation on which to build the next and future generations of wireless networks.

Software testing is indispensable and is one of the most discussed topics in software development today. Many companies address this issue by assigning a dedicated software testing phase towards the end of their development cycle. However, quality cannot be tested into a buggy application. Early and continuous unit testing has been shown to be crucial for high quality software and low defect rates. Yet current books on testing ignore the developer's point of view and give little guidance on how to bring the overwhelming amount of testing theory into practice. Unit Testing in Java represents a practical introduction to unit testing for software developers. It introduces the basic test-first approach and then discusses a large number of special issues and problem cases. The book instructs developers through each step and motivates them to explore further.

*Shows how the discovery and avoidance of software errors is a demanding and creative activity in its own right and can build confidence early in a project.
*Demonstrates how automated tests can detect the unwanted effects of small changes in code within the entire system.
*Discusses how testing works with persistency, concurrency, distribution, and web applications.
*Includes a discussion of testing with C++ and Smalltalk.

Current IT developments like component-based development and Web services have emerged as effective ways of building complex enterprise-scale information systems and providing enterprise application integration. To aid this process, platforms such as .NET and WebSphere have become standards in web-based systems development. However, there are still a lot of issues that need to be addressed before service-oriented software engineering (SOSE) becomes a prominent and widely accepted paradigm for enterprise information systems development and integration. Service-Oriented Software System Engineering: Challenges and Practices provides a comprehensive view of SOSE through a number of different perspectives. Some of those perspectives include: service-based concepts, modeling and documentation, service discovery and composition, service-oriented architecture, model-driven development of service-oriented applications, service security and service-orientation in mobile settings. It provides readers with an in-depth knowledge of the main challenges and practices in the exciting, new world of service-oriented software engineering. Addressing both technical and organizational aspects of this new field, this book offers a balance making it valuable to a variety of readers, including IT architects, developers, managers, and analysts.