• Extensive learning tools -- including Activities, Review Questions, Hands-On Projects and Case Projects -- reinforce key concepts while giving students valuable practice applying what they have learned.
• Numerous case studies guide students through all aspects of network planning, including interconnectivity issues, physical transmission options, voice and data integration, WAN transport methods and ATM technologies.
• Web application hacking sections are now enhanced with coverage of newer attacks as well as new web application testing methodologies.
• The discussion of smartphone security provides valuable insights and guidance on the current mobile security landscape in a time when smartphone usage and mobile networking continue to grow.
• HANDS-ON ETHICAL HACKING AND NETWORK DEFENSE concludes with a Final Project requiring students to apply key concepts and tools by performing a penetration testing and reporting exercise on a collection of virtual machines.
• Web application hacking sections are now enhanced with coverage of newer attacks as well as new web application testing methodologies.
• Extensively updated for today's cybersecurity landscape, the 4th edition features the latest computer security tools, a discussion of new vulnerabilities and exploits, and coverage of innovative methods to protect modern networks.
• In addition to detailed coverage of network security, wireless technology and their impact on wide area networks, this edition equips readers with a practical grounding in ethical and legal issues relevant to penetration testing.
• Improved module review questions now include in-depth analysis questions that require research and reporting on key security topics.

Module 1. Ethical Hacking Overview.

Module 2. TCP/IP Concepts Review.

Module 3. Network and Computer Attacks.

Module 4. Footprinting and Social Engineering.

Module 5. Port Scanning.

Module 7. Programming for Security Professionals.

Module 8. Desktop and Server OS Vulnerabilities.

Module 9. Embedded Operating Systems: The Hidden Threat.

Module 10. Hacking Web Applications.

Module 11. Hacking Wireless Networks.

Module 12. Cryptography.

Module 13. Network Protection Systems.

Module 14. The Final Project.

Appendix A. Legal Resources.

Appendix B. Resources.

Michael T. Simpson

Michael T. Simpson is president/senior consultant of MTS Consulting, Inc., specializing in network security and network design. Mike’s certifications include CEH, CISSP, Security+, OSSTMM Professional Security Tester (OPST), OSSTMM Professional Security Analyst (OPSA), MCSE, MCDBA, MCSD, MCT, and OCP. He has authored or co-authored eight books and has more than 30 years of industry experience, including 20 years with the Department of Defense (DoD), where he designed and configured computer networks and served as an Oracle database administrator, UNIX administrator, and information systems security officer (ISSO).

Nicholas D. Antill

Nicholas D. Antill is a seasoned information security professional with over 10 years of specialized cybersecurity experience. Nicholas specializes in penetration testing, proactive security controls, and network defense. He holds many industry certifications, including the OSCP, GWAPT, GPEN, GCIH, CISA, CISSP, and GCFE. Nicholas currently manages the ethical hacking program at a large U.S. financial institution. He started his career at a small grocery chain in Pittsburgh, Pennsylvania, where he developed a fascination with network attack and defense techniques. He worked in support of both the U.S. Department of Justice and the U.S. Department of Defense before returning to the private sector.

Robert S. Wilson

Robert S. Wilson is the Cybersecurity Curriculum Coordinator and a cybersecurity instructor for Willis College (Canada’s oldest career college). Rob created Willis College’s Software Development and Cybersecurity Analyst (CSA) programs. Willis College’s CSA program is currently being used by the Canadian military to train cyber operator recruits. Rob has a Computer Science degree from the University of Waterloo, holds numerous certifications from CompTIA, Microsoft, and Cisco, and has over 40 years of experience in the computing field. Rob has expertise in many areas including real-time programming and embedded systems development (having worked for a company that has software on Mars), database development and administration, network and domain administration, penetration testing, and cybersecurity.