View Review Details


Book:   Network Security Assessment
Subject:   Network Security Assessment Review
Date:   2004-03-06 19:51:34
From:   Chris McNab
Rating:  StarStarStarStarStar


Well it's 3:50am on Sunday morning, and I've been talking to Kyle and my editors about some character assassination attempts by an individual who seems hell-bent on branding me as a terrorist. What is funny to me, are the convictions and motives of this anonymous individual, who is part of the GOBBLES group, and responsible for similar character assassination attempts in the past (leading to Ryan Russell's dismissal from SecurityFocus.com, for example). ORA have provided me with a lot of support over this, and my book will be published.


In response to this individual's allegations, which contain some elements of truth, but a lot of incorrect details, I've put together an article for O'Reilly, titled The Journey From Poacher to Gamekeeper, which fully documents the truth of my career as a teenage hacker (from 1996-1999) and as a security consultant (from 2000 to present), including my membership of various groups, including Rhino9, and Masters of Downloading. This article is available for you to all read from Monday, in black and white, so that you can draw your own conclusions.


My book is not plagarised from the ISS Ethical Hacking PDF, which was co-incidentally written by one of my technical reviewers a number of years ago! Also, I have a number of personal and professional references from individuals in USA and UK government and law enforcement, so I can't see how I could possibly be a terrorist with this endorsement.


Anway, on to the book--It is a technical attack and penetration guide, written in line with UK (CESG CHECK) and USA (NSA IAM) testing standards. I use my experience from both sides of the fence to fully discuss all of the techniques used by blackhat attackers and security consultants alike, allowing readers to correctly fortify and protect their networks from attack into the future.


A number of technical reviewers from professional security consultancy companies, the US military, government, and other areas, have given glowing reviews, and provided me with some excellent insight into areas of improvement for the book. Hopefully, by reading the book itself (which is not distributed until March 19th), you can draw your own conclusions, and post an accurate review in your own words here.