Monday, January 07, 2008

Review of Virtual Honeypots Posted

Amazon.com just posted my five star review of Virtual Honeypots by Niels Provos and Thorsten Holz. From the review:

It's fairly difficult to find good books on digital defense. Breaking and entering seems to be more exciting than protecting victims. Thankfully, Niels Provos and Thorsten Holz show that defense can be interesting and innovative too. Their book Virtual Honeypots is your ticket for deploying defensive resources that will provide greater digital situational awareness.

2 comments:

Marcin said...

Umm, TCP does not contain a sequence number in every packet??

Richard Bejtlich said...

Hi Marcin,

TCP does provide sequence numbers BUT they count bytes of application data, NOT the TCP segment itself. Data is numbered, not segments or IP packets.