Internet security has to be revolutionary because of innovative new tactics used by malicious hackers and the increasing amount of clever spyware being unknowingly installed on unsuspecting users' computers. There are plenty of books and online guides that describe active Internet attacks, but it would also nice to have a text that describes some of the more indirect attacks that often elude even computer professionals.

Have you ever wondered how your Internet Service Provider (ISP) is so good at blocking spam, or how only one out of 200 spam e-mails sneak through your spam filters? Michal Zalewski, the author of Silence on the Wire, has written an unconventional book that describes the methods that hackers use to compromise a computer system or network.

One of the purposes of this book is to inform readers of the different attacks that people may use to gain unwanted entry to a computer system network. The book is more of a narrative than a reference book, which certainly adds an innovative twist to otherwise boring aspects of network security.

It is apparent that the author paid meticulous attention of the details covered within the text. He made sure to give proper introductions to complex topics covered in the book before throwing a reader straight into the world of nonsensical techno-babble associated with so many network security books. It is also interesting to know the history behind certain topics that are discussed in the book.

Some of the attack scenarios described by Zalewski are arguably the most interesting parts of the book. The first chapter that we would like to mention is called "Ten Heads of the Hydra," and explains how a monitor screen can be read remotely via the electromagnetic radiation it emits. Another interesting section is chapter five, where he describes how the simple flashing lights on a router can actually give away information about the data it is relaying.

Unfortunately, there are some bad things about the book. Because the book mixes in electronics, mathematics, and computer science, it may become a bit too complex and boring for readers that are more interested in simply skimming the text. However, since many diverse topics are covered in the book, the occasional stint of boredom ends quickly enough.

Before purchasing the book, it is recommended to read chapter five, which is available for download online in Abobe PDF format.

Final Thoughts

Silence on the Wire is a well-written book written for anyone even remotely interested in how Internet security actually works. Although it is a well-written book, it does have spots that can quickly get dull for casual readers, which is to be expected with any technical text. The descriptions of indirect attacks that can be waged on computer systems or networks alone are worth the cost, as they will provide hours of enjoyable reading for any self-proclaimed security enthusiast.

I recently had the opportunity to chat with Michal Zalewski, and will post the transcripts in a future edition of Mike's Corner.

Book: Silence on the Wire Author: Michal Zalewski Publisher:  No Starch Press Details: 312 pages, $39.95 MSRP ISBN: 1-59327-046-1

Overall Rating: 9.0/10 (higher is better)

About Michal Zalewski

Michal Zalewski is a security researcher who has worked on topics ranging from hardware and operating design principles to networking. He has published research on many security topics and has worked for the past eight years in the information security field for a number of reputable companies, including two major telecommunications firms.