Sponsored links


Valid XHTML 1.0!
Valid CSS!
Product: Book - Hardcover
Title: The C++ Programming Language (Special 3rd Edition)
Publisher: Addison-Wesley Professional
Authors: Bjarne Stroustrup
Rating: 5/5
Customer opinion - 5 stars out of 5
Don't believe the naysayers


This is, by far, the best book on the C++ programming language. As many reviewers have pointed out, the book is not intended as a tutorial or a "Teach Yourself" guide to the language. To someone with a good understanding of the language, the book is a masterpiece. Stroustrup covers every aspect of C++ in detail. This is precisely why the book is so valuable. There are many good books on learning C++ but this is the only, completely reliable and thorough book on the subject. The book can be read from cover to cover (if one perseveres) or used as a reference and therefore would be valuable to anyone who takes C++ seriously. A beginner would have to work hard to understand the book but, with a little effort, would be a far better programmer for it. If you really want to understand C++, buy this book!



Product: Book - Paperback
Title: Incident Response and Computer Forensics, Second Edition
Publisher: McGraw-Hill Osborne Media
Authors: Chris Prosise, Kevin Mandia, Matt Pepe
Rating: 5/5
Customer opinion - 5 stars out of 5
Very useful, comprehensive and fun to read


This is my review for the Second Edition.
Incident Response is back with a vengeance! I should disclose that I was very impressed with the first edition, for many reasons. Most of the points I liked about it are still valid and new ones abound.
Same as the before, the book is a great combination of a high level policy and methodology material with hands-on, "hex dumps and disk images" stuff. The focus is on tools and technology as well as the process of response and forensics.
The authors cover incident response process in great detail: from policy to secure and auditable host configuration, system logging, network monitoring, and acquiring the evidence on multiple platforms. In fact, I liked the balanced platform coverage of both UNIX/Linux and Windows. The book also contains a lot of neat background material on TCP/IP and file systems, making the book useful for less security-savvy.
The useful distinction between the first response and investigation is outlined: the reader will know what to do when confronted with a freshly hacked box and will also learn how to approach a hard disk extracted from a dishonest employee workstation. So, both cursory and in-depth response are covered.
I also enjoyed network-based evidence chapters on monitoring and traffic analysis (using tcpdump, ethereal, tcpflow, tcptrace). Overall, Data Analysis chapter was the most fun for me. Also enlightening were evidence collection and preservation methods. To navigate the maze of what is allowed and what is not - get the book.
Another awesome chapter was the one on reversing and hostile binary analysis. While not comprehensive, it seem to summarize the "busy man's reversing tips", applicable in real daily security practice.
The main advantage of the book is, in my opinion, its comprehensive nature. It is both a practical HOWTO guide, a reference and nice awareness material on "what is out there". The book emanates the fact that it is written by people who actually did all the things described in it. It might sound strange, but I also appreciated the lack of a "legal material" chapter. Legal advice should be heard from a lawyer and not from a security book (and its is usually extremely boring anyway...)
Anton Chuvakin, Ph.D., GCIA, GCIH is a Senior Security Analyst with a major information security company. His areas of infosec expertise include intrusion detection, UNIX security, forensics, honeypots, etc. In his spare time, he maintains his security portal info-secure.org



Product: Book - Paperback
Title: PHP and MySQL Web Development (3rd Edition) (Developer's Library)
Publisher: Sams
Authors: Luke Welling, Laura Thomson
Rating: 5/5
Customer opinion - 5 stars out of 5
PHP5 Libraries begin with this book


Welling and Thomson hit the nail on the head with this book. The only place to go from this book is into the black and yellow php5 references written by Gilmore and Darie. Start here and grow. The code is clear. The sample code is correct. Yhe included CD includes everything you'll need as a nivice and more.

1 star for code.
1 star for clarity.
1 star for editorial acumen.
1 star for relevance.
1 star for overall performance.

Excellent reference, a cornerstone in every php library.



Product: Book - Paperback
Title: Database Design for Mere Mortals: A Hands-On Guide to Relational Database Design, Second Edition
Publisher: Addison-Wesley Professional
Authors: Michael J. Hernandez
Rating: 5/5
Customer opinion - 5 stars out of 5
a turning point in my career


If a computer book can be life-changing, this one would be. I had been working with databases for some time, but had no formal training. Often, I didn't understand the terms flying around, although I understood the concepts. This book defined all those database terms from normalization to join tables. It revolutionized the way I design databases.
I particularly liked the focus on designing on paper first, because this provides a great requirements document and the basis for a user manual! Hernandez teaches you how to talk to the stakeholders and determine what the database needs to represent. He has a method for transforming a user interview into table and field names.
The book is well-laid out with lots of examples, a typeset that's easy on the eyes, and extremely clear prose.
I can't imagine where I would be today if I hadn't bought this book a year ago. My employers paid much less for this book than any class I have taken, and yet this has had the largest impact on the way I develop. Database applications I created after reading the book have gotten lots of good feedback from users.