博客

  • CIW網絡安全專家中文教材

    CIW網絡安全專家中文教材 網路安全與防火牆篇

    第一章 什麼是安全?

    引 言

    本書第一章內容主要對於安全的發展以及其重要性作了簡明的闡述,並介糾了一些國內外知名的網路安全相關網站,並對於如何建立:有效的安全性原則給出了很好的建議,並讓人家瞭解幾種安全標準。
    本章要點:

    ● 有關安全的定義
    ● 解釋網路安全的必要性
    ● 識別哪些資源需要被保護
    ● 識別常見的幾種安全威脅類刑
    ● 如何建立有效的安全矩陣

    媒體經常報導一些有關網路安全威脅的令人震驚的事件:,針對日前流行的Netscape Navigator和微軟的IE流覽器程式對於複雜精密攻擊(目標是摧毀電子商務伺服器)存在的—些安全問題,因此電腦和網路系統管理員以及使用者都必須應付不斷複雜的安全環境。駭客和 電腦病毒都是普遍的威脅以至於甚至某個具體的日期都與一個特別的安全問題相關。主要 的線上電子商務都被證明是易受攻擊的。例如,e-bay和Amazon.COM都是惡性攻擊的受害者。攻擊事件本身,例如1988年的Robert Moms Internet Worm(蠕蟲)都變得具有傳奇色彩。

    眾所周知的駭客包括kevinMitnick和JohnDraper(此人既是大名鼎鼎的CaptainCrunch) 但是更多不知名的駭客在互聯網上製造著破壞。儘管下面的新聞故事聽上去像是一本偵探小說中的摘錄,但它卻是上實實在在的發生了。一名被Pentagon認為是對美國的安全構成頭號威肋, 比KGB更具致命性的間諜被證明是一名16歲的英國音樂學生駭客(他在他的臥室進行“工作”)美國參議院武器裝備委員會被告之FBI害怕一個東歐的間諜集團已經獲得了美國最高級的機密,包括美國空軍防禦系統彈道導彈設計。這名在校生在互聯網世界上以 “DatastreamCowboy”而著稱,被罰款1915美金,但他解釋說“這些地方比起英國大學計算機來說但容易進入了’現在商界張開雙臂歡迎Internet去從事商業、通訊和合作。

    敏感信息和通訊路線的完整則變成了—個非常重要的話題,對於相關的威脅,例如駭客和病毒,迅 速作出反應以及消除它是每個網路系統管理員工作的一部分, Internet對於任何一個具有網路連接和ISP帳號的人郵是開放的,事實上它本身被沒計成了一個開放的網路。因此它本身並沒有多少內置的能力使資訊安全,從一個安全的角度看, Intemet是天生不安全的。然而,商界和個人現在都想在Intemet上應用一些安全的原則, 在Internet發明人當初沒有意識到的方式下有效的使用它。對於Internet用戶一個新的挑戰是如何在允許經授權的人在使用它的同時保護敏感資訊。

    安全是什麼?

    簡單的說在網路環境裡的安全指的是一種能夠識別和消除不安全因素的能力。安全的一般性定義也必須解決保護公司財產的需要,包括資訊和物理設備(例如電腦本身)。安全的想法也涉及到適宜性和從屬性概念。負責安全的任何一個人都必須決定誰在具體的設備上 進行合適的操作,以及什麼時候。當涉及到公司安全的時候什麼是適宜的在公司與公司之間 是不同的,但是任何一個具有網路的公司都必須具有一個解決適宜性、從屬性和物理安全問題的安全政策。

    這節課將討論與Internet有關的安全問題,伴隨著現代的、先進的複雜技術例如局域網(LAN)和廣域網路、Internet網Internet、已經VPN。安全的想;去和實際操作已經變得比簡單巡邏網路邊界更加複雜。對於網路來說一個人可以定義安全為一個持續的過程,在這個過 程中管理員將確保資訊僅僅被授權的使用者所共用。 本節課結束時,你將熟悉那些被你公司認為適宜的,用來建立和限制行為的過程和技術。你將集中精神在有關將你公司與互聯網相連接的安全的問題上。Internet連接對於陌生用戶連接到外露的資源上極為容易。你必須確保它們只能訪問那些你想讓他們訪問的內容,這節 課將學習一些控制用戶和駭客訪問,如何對事件:做出反應,以及當有人規避那些控制時如 使損害最小化的方法。

    CIW網絡安全專家中文教材 網頁下載:http://www.itcert.org/thread-3715-1-1.html

  • 《A+ Certification Exam Guide (All-in-One)》

    A+ All in one certification exam guide (CompTIA)  Michael Meyers  3rd+edition (Mcgraw Hill 2001)

    A+ Certification Exam Guide (All-in-One).jpg
     
    The best A+ Certification guide in the field just got better.

    Because, let’s face it; in terms of walking you through the computer from the ground up, there wasn’t anything better out there. Other A+ guides will fling random tables of processors and numbers at you as if you were a dartboard, hoping that maybe a couple of facts will stick; Michael Meyers’s All-In-One A+ Certification Exam Guide starts by showing you the same sets of problems that faced the original designers of the PC. You have just designed a chip that can handle thousands of calculations per second. Now how do you talk to it? How do you get other components to communicate with it? How do you know when it’s listening?

    By the time you finished the previous editions, you knew all of the answers–and better than that, you understood why the hundreds of processor types were so hinky. You had been faced with the same hurdles that the designers had to face, and you’d had the solutions explained to you–all in a delightful, easy-to-digest format. And furthermore, you’d had that same treatment given to every part of the PC, from the monitor all the way down to the motherboard. If you got confused, a wealth of pictures would show you the difference between an RJ-45 and an RJ-11 jack.

    The only problem was that it was a little out of date, but you could forgive it for that. Everything else was so amazingly strong, and the A+ exam itself tends to be a little behind the technology curve anyway–so it was a forgivable sin.
    Sin no more, my friends, and read on–the latest edition of this book isn’t quite cutting edge, but it deals with Windows 2000, 3-D video cards, surround sound speakers, and burnable CDs. You might not find all of these listed on the A+ exam, but there they are nonetheless.

    Which is, come to think of it, another strength of this book: It goes beyond the normal testable topics and really wants you to know what problems you’re likely to face as an actual technician in the real world. Meyers gives lots of hands-on advice, frankly admitting that this topic is still tested but he’s not quite sure why, telling you that power supplies can be repaired (and should be) even if the test says otherwise, and generally giving copious examples from his tech experience to show “what can go wrong.”

    In fact, if a major criticism can be leveled at this book nowadays, it’s that it might go a bit too in-depth at times; Meyers’s zeal to show you everything he knows about computers makes it possible to get lost in the wealth of information and not focus on critically-tested subjects. But keep in mind that if you truly understand even 60 percent of this book, you’ll pass the exam with flying colors–it’s that good.

    The book has ten questions at the end of every chapter that aren’t modeled specifically after the A+ exam, but they are fairly tough questions nonetheless. There’s also a CD that has the standard array of video clips and test questions, but it also has several tech utilities that Meyers himself recommends–a great value.

    In short, this is simply one of the best test-prep books on the market for any exam, and it’s also one of the few books that’s completely honest: It is, when it comes down to it, an all-in-one guide. Buy this and you will pass. Highly recommended. –William Steinmetz

    A+ All in one certification exam guide (CompTIA)  Michael Meyers  3rd+edition (Mcgraw Hill 2001) 下載網頁: http://www.itcert.org/thread-3710-1-1.html

  • ASP.NET Web Developer’s Guide

    ASP.NET Web Developer’s Guide
    ASP.NET Web Developer’s Guide.jpg
    All the essential information needed to take full advantage of Microsoft’s newest Web development platform What is ASP .NET ASP.NET is a revolutionary new programming framework that enables the rapid development of powerful web applications and services. Part of the emerging Microsoft .NET Platform, it provides the easiest and most scalable way to build, deploy and run distributed web applications that can target any browser or device. ASP.NET (formerly referred to as ASP+) is more than the next version of Active Server Pages (ASP); it is a unified Web development platform that provides the services necessary for developers to build enterprise-class Web applications. ASP.net Web Developer’s Guide will teach Web developers to quickly and easily build solutions for the Microsoft .NET platform. Programmers who are expert in asp and other languages will find this book invaluable.

    ASP.NET Web Developer’s Guide  網頁下載:http://www.itcert.org/thread-3709-1-1.html

  • A Guide to the Project Management Body of Knowledge: (Pmbok Guide)

    A Guide to the Project Management Body of Understanding: (Pmbok Guide) Description 中文名:PMP專案管理知識體系指南(第4版)
    pmp Guide.jpg

    The PMBOK9 (r) Guide – Fourth Edition continues the tradition of excellence in project management with a standard that is even simpler to understand and implement, with improved consistency and greater clarification. the standard language has been introduced in the document to aid the reader understand. flowcharts New data clarify the inputs and outputs of every process. Far more attention has been placed on how understanding is embedded in the initiation, planning, implementation, monitoring and control and close the group procedure. Two new methods are presented: Identify stakeholders and gathering requirements. A Guide to the Project Management Body of Knowledge: (Pmbok Guide)

    A Guide to the Project Management Body of Knowledge: (Pmbok Guide) 下載網頁:http://www.itcert.org/thread-3707-1-1.html

  • PMP專案管理知識體系指南(第4版)

    PMP專案管理知識體系指南(第4版)- 簡體中文,英文名:A Guide to the Project Management Body of Knowledge: (Pmbok Guide)
    PMP 3.JPG
    PMP考試的內容將會換到PMI在年底發表的第四版的”專案管理知識體系指南”- PMBOK 2008

    25年來,《專案管理知識體系指南》(PMBOK®指南)已成為專案管理的權威標準和專案經理的必備資料。《PMBOK®指南》(第4版)是一本易懂易用的標準,引領專案管理之卓越。

    1983年,專案管理協會(PMI®)志願者首次對專案管理知識體系進行了提煉。如今,《PMBOK®指南》已被公認為全球專案管理標準,是最具價值和用途最廣的專案管理資料之一。《PMBOK®指南》討論專案管理的基本方法,幫助專案經理取得卓越專案績效。

    目前,有200多萬冊《PMBOK®指南》正在廣泛使用中。自從《PMBOK®指南》(第3版)出版以來,PMI收到了來自全球專案管理社區數以千計的改進建議。PMI審閱了所有建議,並在第4版中採納了許多建議。

    第4版收錄了最新的專案管理知識和經驗,力求連貫、清晰、易讀和易用。對每個過程都增加了資料流程向圖,展示過程輸入的來源和過程輸出的去向。對各過程做了進一步優化,並新增了幾個過程。還增加了一個附錄,列出專案經理管理專案所需使用的關鍵人際技能。

    《PMBOK®指南》(第4版)是專業專案經理們集體智慧的結晶,是適用於各種專案的專案管理基本知識的集合。這本國際公認的標準是專案經理開展專案管理並為組織創造優秀業績的必備工具書。

    新版的更新:

    1.對過程進行了全面精煉與調整,把輸入和輸出盡可能標準化並用國際通行方法加以描述,以實現較大程度的一致性和清晰性。
    2.增加了各過程資料流程向圖達189幅,說明每個過程的輸入與輸出,使過程之間的相互作用更加清晰。
    3.對“變更請求”進行特別澄清與劃分,既保留了各種類型變更請求之間的差別,又使許多過程的輸入和輸出更加簡潔。
    4.解釋了掙值工具和技術(包括公式)的使用,增加了“完工尚需績效指數”的計算,強
    化了專案成本管理。
    5.強調專案干係人識別與管理的重要性,強化干係人需求收集的全面性。
    6.新增建設、管理專案管理團隊與提高人際技能的內容,宣導重視管理專案團隊,以優化專案績效。

    本書目錄:

    目 錄
    第 1 部分專案管理框架                 
    第 1 章引論                                 
    1.1 PMBOK®指南的目的                  
    1.2 什麼是項目                   
    1.3 什麼是專案管理                       
    1.4 專案管理、專案集管理和專案組合
    1.4 管理間的關係                 
    1.5 專案管理與運營管理                
    1.6 專案經理的角色                
    1.7 專案管理知識體系           
    1.8 事業環境因素                   
    第2 章專案生命週期與組織             
    2.1 專案生命週期——概述               
    2.2 專案與運營                    
    2.3 項目干係人                   
    2.4 組織對專案管理的影響           
    第2 部分單個專案的專案管理標準           
    第 3 章單個專案的專案管理過程               
    3.1 專案管理過程間的作用              
    3.2 專案管理過程組                      
    3.3 啟動過程組                
    3.4 規劃過程組                    
    3.5 執行過程組                  
    3.6 監控過程組                   
    3.7 收尾過程組                   
    第3 部分專案管理知識領域       
    第 4 章專案整合管理                    
    4.1 制定專案章程                     
    4.2 制定項目管理計畫             
    4.3 指導與管理專案執行        
    4.4 監控專案工作                 
    4.5 實施整體變更控制          
    4.6 結束專案或階段                   
    第5 章專案範圍管理                   
    5.1 收集需求               

    PMI Member Copy – Not for Reproduction or Distribution
    《專案管理知識體系指南(第4 版)》(PMBOK® 指南)

    5.2 定義範圍                  
    5.3 創建工作分解結構                   
    5.4 核實範圍                     
    5.5 控制範圍                   
    第6 章專案時間管理                        
    6.1 定義活動                     
    6.2 排列活動順序                      
    6.3 估算活動資源                       
    6.4 估算活動持續時間                   
    6.5 制定進度計畫                   
    6.6 控制進度                   
    第7 章專案成本管理                       
    7.1 估算成本                    
    7.2 制定預算                   
    7.3 控制成本                   
    第8 章項目品質管制                        
    8.1 規劃品質                   
    8.2 實施品質保證                      
    8.3 實施品質控制                   
    第9 章專案人力資源管理                
    9.1 制定人力資源計畫                
    9.2 組建專案團隊                    
    9.3 建設項目團隊                     
    9.4 管理專案團隊                    
    第10 章專案溝通管理                      
    10.1 識別干係人                    
    10.2 規劃溝通               
    10.3 發佈資訊                  
    10.4 管理干係人期望                  
    10.5 報告績效                  
    第11 章專案風險管理                        
    11.1 規劃風險管理                    
    11.2 識別風險                  
    11.3 實施定性風險分析                 
    11.4 實施定量風險分析               
    11.5 規劃風險應對                   
    11.6 監控風險                   
    第12 章專案採購管理                   
    12.1 規劃採購                 
    12.2 實施採購                  
    12.3 管理採購             
    PMI Member Copy – Not for Reproduction or Distribution
    第四版前言
    12.4 結束採購                  
    參考文獻                                     
    第 4 部分附錄                                 
    附錄A 第4 版所做的修改                     
    附錄 B PMI 專案管理知識體系指南的演變          
    附錄 C PMBOK®指南第4 版的撰稿人和審閱人       
    附錄D 應用領域擴展                         
    附錄E 專案管理資料的其他來源                   
    附錄F 專案管理知識領域概述                     
    附錄G 人際關係技能                       
    第 5 部分術語表                            
    術語表 1(中文排序)                        
    術語表 2(英文排序)

    PMP專案管理知識體系指南(第4版) 下載網頁:http://www.itcert.org/thread-3706-1-1.html

  • 《PMP Exam Prep》(第五版 Rita Mulcahy)

    PMP Exam Prep (第五版 Rita Mulcahy) 全英文書籍
     PMP Exam Prep.jpg

    Rita Mulcahy, PMP, is an internationally recognized expert in project management and a sought-after project management speaker, trainer and author. She has six projectmanagement books and products to her credit, and was a Contributor and Reviewer to the PMBOK” Guide, Bird Edition. Rita has taught thousands of project managers from around the world and helped about 80,000 people prepare for the PMP exam. She is the winner of the 2004 Professional Development Product of the Year award from the Project Management Institute for her book, Risk Management Tricks of the Trade” for Project Managers and its companion, SIRK-Kit” Risk Analysis Kit.

    Rita’s speaking engagements draw record crowds. People have stated: “Rita makes you think! The most informative presentation I have ever seen.” In fact, Rita has spoken at PMI’sannual project management symposium to standing room only crowds and has been asked to present encore presentations at the symposium for an unheard of four years!
    She has over 15 years and U.S. $2.5 billion of hands-on project experience on hundreds of IS, IT, new product, high-tech, service, engineering, construction and manufacturing projects.

    She has served as an acting PMI Chapter President and Vice President for more than seven years and has taught project management courses for four major universities.

    Rita is the founder of RMC Project Management, an international project management speaking, training and consulting firm, and a Global Registered Education Provider with PMI. RMC specializes in real-world project management training; in interpreting the PMBOK” Guide for real-world use and helping companies use the latest project management tools and techniques to complete projects faster, with less expense, better results and fewer resources. RMC provides training in basic and advanced project management for team members, project managers, project management offices and senior management. Since its founding in 1991, RMC has provided many quality courses and products to prepare you for the exam. Courses offered include:

    PMP Certification Training

    • Project Management Tricks of the Trade”
    • 9 Tricks of the Trade” for Risk Management
    • 9 Tricks of the Trade” for Determining and Managing Project Requirements
    • What Makes a Project Manager Successful?
    • Why Projects Fail and How to Prevent Failure
    • Tricks for Avoiding Common Project Problems
    • Avoiding Common Stumbling Blocks in Risk Management
    • Project Management for Teams, Senior Management, Sales and Functional Managers
    • Executive Briefing on Project Management
    • Setting Up and Managing the Project Office

    All PMI PMBOK” Guide Subjects

    Table of Contents:
    Chapter 1: The PMP Exam
    Chapter 2: Project Management Framework
    Chapter 3: Project Management Processes
    Chapter 4: Integration Management
    Chapter 5: Scope Managenlent
    Chapter 6: Time Management
    Chapter 7: Cost Management
    Chapter 8: Quality Management
    Chapter 9: Human Resource Management
    Chapter 10: Communications Management
    Chapter 11 : Risk Management
    Chapter 12: Procurement Management
    Chapter 13: Professio~ial and Social Responsibility

    《PMP Exam Prep》(第五版 Rita Mulcahy)  下載網頁:http://www.itcert.org/thread-3700-1-1.html

  • PMP專案管理認證指南

    無論你是累積多年實務經驗想證明技能與知識的現職專案經理,或是想強化履歷內容的專案管理領域新手,專案管理協會(PMI)的PMP認證讓你有機會實現夢想。 最暢銷的PMP: Project Management Professional Study Guide新版涵蓋2005年專案管理知識體系(PMBOK)及PMP更新的考試內容。

    作者Kim Heldman以清楚又易讀的方式安排內容,帶領你有邏輯順序地歷經各個流程群組,讓你對整體與各個部分都能充分瞭解。關鍵主題 實施專案評選方法;定義範疇;記載專案風險、假設、限制;識別與執行利害關係人分析;發展專案章程;獲得專案章程核准。

    定義與記錄要求、限制與假設;識別專案團隊及定義角色與責任;產生WBS;發展變更管理計畫;識別出風險與定義風險策略;獲得計畫核准;舉行開工會議。 執行專案計畫所定義的任務、保證建立共識與設定期待、實施專案資源採購、管理資源分配、實施品質管理計畫、實施經核准的變更以及行動與應急方案、改善團隊績效。

    衡量專案績效、驗證與管理專案變更、保證專案可交付成果符合品質標準、監督所有風險。 獲得專案最後接受;獲得財務、法律與行政結案;釋出專案資源;識別、記載、與溝通習得教訓;產生與分發最後專案報告;歸檔與保留專案記錄;衡量顧客滿意度。 保證個人誠信、對專案管理知識基礎做出貢獻、強化個人專業勝任度、促進利害關係人之間的互動。

    隨書光碟附有

    1.測驗軟體,包括各章複習題及兩個PMP與兩個CAPM附贈考試。
    2.電子式重點速記卡,用數百張可在PC、Pocket PC或Palm手持裝置上執行的重點速記卡,以加強你的瞭解。
    3.全書英文內容的PDF檔作者簡介Kim HeldmanPMP專案管理師,在IT專案管理領域已經有超過15年的經驗。
    她是科羅拉多州自然資源部的資訊長,也是PMI丹佛分會的會員。

    PMP專案管理認證指南 下載網頁:http://www.itcert.org/thread-3699-1-1.html

  • PMP Project Management Professional Study Guide

    PMP專案管理 學習指南 英文名:PMP Project Management Professional Study Guide
    作者:Kim Heldman

    000e4f63_medium.jpg
    Whether you’re a current project manager seeking to validate the skills and knowledge acquired through years of practical experience or a newcomer to the PM field looking to strengthen your resume, the PMP certification from the Project Management Institute (PMI) provides you with the means to do so. This new edition of the best-selling PMP: Project Management Professional Study Guide covers the 2005 updates to both the Project Management Body of Knowledge (PMBOK) and the PMP exam. Author Kim Heldman presents the material in a clear and accessible manner, taking you through the process groups in their logical order so you understand the parts and the whole equally well.

    Project Initiation. Determining project goals, determining deliverables, determining process outputs, documenting constraints, documenting assumptions, defining strategies, producing formal documentation.

    Project Planning. Refining a project, creating a WBS, developing a resource management plan, determining resource requirements, defining budgets, refining time and costs estimates, establishing project controls, obtaining plan approval.
    Project Execution. Committing and implementing resources, managing and communicating progress, implementing quality assurance procedures.

    Project Control. Measuring performance, refining control links, taking corrective action, evaluating effectiveness of corrective action, ensuring plan compliance, reassessing control plans, responding to risk event triggers, monitor project activity.
    Project Closing. Obtaining acceptance of deliverables, documenting lessons learned, facilitating closure, preserving product records and tools, releasing resources.

    Professional Responsibility. Ensuring integrity, contributing to knowledge base, balancing stakeholder interests, respecting differences.

    Table of Contents:
    Chapter 1: What Is a Project?
    Chapter 2: Creating The Project Charter and Preliminary Scope Statement
    Chapter 3: Creating the Scope Statement
    Chapter 4: Creating the WBS and Communicating the Plan
    Chapter 5: Risk Planning
    Chapter 6: Resource Planning
    Chapter 7: Creating the Project Schedule and Budget
    Chapter 8: Developing the Project Team
    Chapter 9: Measuring and Controlling Project Performance
    Chapter 10: Monitoring and Controlling Change
    Chapter 11: Monitoring and Closing Out the Project
    Chapter 12: Professional Responsibility

    PMP.Project Management Professional Study Guide 下載地址:http://www.itcert.org/thread-3698-1-1.html