13 of 15 people found the following review helpful:
4.0 out of 5 stars
Good material with a small caveat..., Sep 11 2004
By Thomas Duff "Duffbert" - Published on Amazon.com
This review is from: High-Tech Crimes Revealed: Cyberwar Stories from the Digital Front (Paperback)
I recently finished the book High-Tech Crimes Revealed - Cyberwar Stories From The Digital Front by Steve Branigan (Addison-Wesley). It's a pretty good book, but with a few shortcomings...
Chapter list: An Attack on the Telephone Network; An Attack on an ISP; If He Had Just Paid the Rent; Inside a Hacker Sting Operation...; Identity Theft; Let's Ask the Hackers; Why Do Hackers Hack?; Setting the Stage; High-Tech Crime; What Not to Do; How to Run a High-Tech Case; What Have We Learned; Appendix; Bibliography; Index
There are two types of writing in this book. Up through Inside A Hacker Sting Operation, the focus is on real-life cases that the author was part of. You learn details about how cyber-crime is conducted, uncovered, and prosecuted. The benefit here is that you see the warts and failings of the process instead of the glorified versions as told by security experts. After that chapter, there is less emphasis on stories and more focus on subjects, such as why these things occur and how to conduct an investigation. There are still references to real-life events, but that's less of an emphasis. Branigan's writing is humorous and lightly satirical, and makes for an enjoyable read.
The shortcoming was something I couldn't quite put my finger on until I read the preface. Steve started this book in 1999 and thought he'd be done in early 2002. September 11th threw him off, and he didn't get started again until nearly a year later. So in effect, you have a book on cyber-crime published in 2004 that was largely written between 1999 and 2001. While there are references to events in the recent past, many of the significant stories and examples are vintage 2002 or earlier. In my opinion, it's the only significant flaw in what is otherwise an interesting read.
4 of 4 people found the following review helpful:
5.0 out of 5 stars
Great book for management, Feb 2 2005
By Eric Kent - Published on Amazon.com
This review is from: High-Tech Crimes Revealed: Cyberwar Stories from the Digital Front (Paperback)
High-Tech Crimes Revealed is a great book for management.
The stories are real, written in non-technical language.
Makes for very interesting reading.
5 of 6 people found the following review helpful:
4.0 out of 5 stars
The law enforcement side of the cybercrime equation, Sep 23 2004
By Richard Bejtlich "TaoSecurity" - Published on Amazon.com
This review is from: High-Tech Crimes Revealed: Cyberwar Stories from the Digital Front (Paperback)
Prior to 'High-Tech Crimes Revealed' (HTCR) I read and reviewed 'Stealing the Network: How to Own a Continent' (HTOAC). While HTOAC is fictional and written almost exclusively from the point of view of the 'hacker,' HTCR is mostly true and written from the law enforcement perspective. On the strength of the cases described in the first half of the book, I recommend HTCR as an introduction to the mindset needed to pursue and prosecute cyber criminals.
Author Steve Branigan brings a unique perspective to his book. In 1986-7 Branigan was a patrolman in the Seaside Heights Police Department, but three years later he investigated telecom incidents for Bell Communications Research. Later work at Lucent and Bell Labs prepared him for co-founding Lumeta in 2000. His experience with telecom security differentiates the book from those who spend more time on Internet-centric crimes.
I found the first half of the book more helpful than the second half, particularly when legal and criminal concepts are introduced in the context of security investigations. Ch 1 offers insight into drafting search warrants when pursuing a rogue insider. Ch 2 explains subpoenas and executing search warrants. Ch 3 discusses options at trial, like plea bargains. Ch 4 outlines an undercover sting and the role of confidential informants. Ch 5 talks about identity theft and ch 6 describes the author's role in interviewing two 'hackers.'
The first half of the book uses true stories to make its points, but the second shifts more to opinions with short stories added for interest. I skimmed these later chapters as they seemed more appropriate for those without security and forensic experience.
A few excerpts from the book are quote worthy. On p 106 Branigan notes that during a sting operation, the cops disabled exploit tools hosted on a cop-supervised bulletin board to avoid 'facilitating the transmission of hacking tools.' Consider that when you find a 'broken exploit.' A footnote on p 111 says 'NetStumbler is freeware. Why people write these things nobody knows.' NetStumbler isn't just for wardriving by those with malicious intent; sys admins also use it to discover rogue access points.
I agree with Thomas Duff's assessment regarding the shelf life of Branigan's stories. Many cases, like ch 1's SS7 intrusion, were cool despite being almost 10 years old. In other places Branigan really dated himself. For example, p 118 states 'the main set of backdoor programs for UNIX are collectively known as rootkit, and those for Windows-based systems are Back Orifice and Netbus.' That was mostly correct in 2000, but very dated by 2004. I also question the 'session takeover' techniques mentioned on p 175; far too little detail is offered to make me accept this 'magic' capability.
Overall I recommend reading HTCR. Branigan literally has a front-row seat on several fascinating security incidents. Few people have accompanied police when seizing evidence or performed hands-on analysis of live systems as related by HTCR. Readers with an interest in telco security will particularly enjoy Branigan's tales, and I appreciated his use of FreeBSD as a forensic platform.