Basics of Information Security
Subtitle: Understanding the Fundamentals of InfoSec in Theory and Practice
Publisher: Elsevier Science & Technology Books; Syngress
Published: 2014
Language: eng
Number of pages: 240
ISBN-13: 9780128007440
Subjects: Computer security; Computer networks, security measures; Information resources management
Table of contents: title: Author Biography
pagenum: xv; title: Introduction
pagenum: xvii; label: Chapter 1
title: What Is Information Security?
pagenum: 1; title: Introduction
pagenum: 2; title: What Is Security?
pagenum: 3; title: When Are We Secure?
pagenum: 4; title: Alert!
pagenum: 4; title: Models for Discussing Security
pagenum: 5; title: The Confidentiality, Integrity, and Availability Triad
pagenum: 5; title: The Parkerian Hexad
pagenum: 7; title: Alert!
pagenum: 8; title: Attacks
pagenum: 9; title: Types of Attack Payloads
pagenum: 9; title: Threats, Vulnerabilities, and Risk
pagenum: 11; title: Risk Management
pagenum: 12; title: Incident Response
pagenum: 16; title: Defense in Depth
pagenum: 19; title: Layers
pagenum: 20; title: Information Security in the Real World
pagenum: 21; title: Summary
pagenum: 21; title: Exercises
pagenum: 22; title: References
pagenum: 22; label: Chapter 2
title: Identification and Authentication
pagenum: 23; title: Introduction
pagenum: 24; title: Identification
pagenum: 24; title: Who We Claim to Be
pagenum: 24; title: Identity Verification
pagenum: 25; title: Falsifying Identification
pagenum: 25; title: Authentication
pagenum: 26; title: Factors
pagenum: 26; title: Multifactor Authentication
pagenum: 28; title: Mutual Authentication
pagenum: 29; title: Passwords
pagenum: 30; title: Biometrics
pagenum: 31; title: Additional Resources
pagenum: 31; title: Hardware Tokens
pagenum: 34; title: Alert!
pagenum: 35; title: Identification and Authentication in the Real World
pagenum: 36; title: Summary
pagenum: 37; title: Exercises
pagenum: 37; title: References
pagenum: 38; label: Chapter 3
title: Authorization and Access Control
pagenum: 39; title: Introduction
pagenum: 40; title: Authorization
pagenum: 40; title: Principle of Least Privilege
pagenum: 41; title: Access Control
pagenum: 42; title: Access Control Lists
pagenum: 43; title: Alert!
pagenum: 45; title: Capabilities
pagenum: 47; title: Alert!
pagenum: 48; title: Access Control Methodologies
pagenum: 49; title: Access Control Models
pagenum: 49; title: Physical Access Controls
pagenum: 52; title: Authorization and Access Control in the Real World
pagenum: 54; title: Summary
pagenum: 54; title: Exercises
pagenum: 55; title: References
pagenum: 56; label: Chapter 4
title: Auditing and Accountability
pagenum: 57; title: Introduction
pagenum: 57; title: Accountability
pagenum: 58; title: Security Benefits of Accountability
pagenum: 60; title: How We Accomplish Accountability
pagenum: 62; title: Auditing
pagenum: 62; title: What Do We Audit?
pagenum: 63; title: Alert!
pagenum: 63; title: Logging
pagenum: 64; title: Monitoring
pagenum: 65; title: Assessments
pagenum: 65; title: Accountability and Auditing in the Real World
pagenum: 66; title: Summary
pagenum: 67; title: Exercises
pagenum: 68; title: References
pagenum: 68; label: Chapter 5
title: Cryptography
pagenum: 69; title: Introduction
pagenum: 70; title: History
pagenum: 70; title: Caesar Cipher
pagenum: 71; title: Cryptographic Machines
pagenum: 71; title: Additional Resources
pagenum: 75; title: Kerckhoffs' Principle
pagenum: 75; title: Modern Cryptographic Tools
pagenum: 75; title: Symmetric Versus Asymmetric Cryptography
pagenum: 76; title: Hash Functions
pagenum: 79; title: Digital Signatures
pagenum: 80; title: Certificates
pagenum: 80; title: Protecting Data at Rest, in Motion, and in Use
pagenum: 81; title: Protecting Data at Rest
pagenum: 81; title: Alert!
pagenum: 83; title: Protecting Data in Motion
pagenum: 84; title: Protecting Data in Use
pagenum: 85; title: Cryptography in the Real World
pagenum: 85; title: Summary
pagenum: 86; title: Exercises
pagenum: 87; title: References
pagenum: 87; label: Chapter 6
title: Laws and Regulations
pagenum: 89; title: Introduction
pagenum: 89; title: Laws and Regulations
pagenum: 90; title: US Laws Applicable to Computing
pagenum: 91; title: Laws Outside of the United States
pagenum: 91; title: Compliance
pagenum: 94; title: Regulatory Compliance
pagenum: 94; title: Industry Compliance
pagenum: 95; title: Privacy
pagenum: 95; title: The Concept of Privacy
pagenum: 96; title: Privacy Rights
pagenum: 96; title: Privacy and Business
pagenum: 98; title: Summary
pagenum: 98; title: Questions
pagenum: 99; title: References
pagenum: 99; label: Chapter 7
title: Operations Security
pagenum: 101; title: Introduction
pagenum: 102; title: Alert!
pagenum: 102; title: Origins of Operations Security
pagenum: 102; title: Sun Tzu
pagenum: 103; title: Additional Resources
pagenum: 103; title: George Washington
pagenum: 103; title: Vietnam War
pagenum: 104; title: Business
pagenum: 106; title: Interagency OPSEC Support Staff
pagenum: 106; title: The Operations Security Process
pagenum: 107; title: Identification of Critical Information
pagenum: 107; title: Analysis of Threats
pagenum: 107; title: Analysis of Vulnerabilities
pagenum: 108; title: Assessment of Risks
pagenum: 110; title: Application of Countermeasures
pagenum: 111; title: Haas' Laws of Operations Security
pagenum: 111; title: First Law
pagenum: 112; title: Second Law
pagenum: 112; title: Third Law
pagenum: 113; title: Operations Security in Our Personal Lives
pagenum: 114; title: Alert!
pagenum: 114; title: Operations Security in the Real World
pagenum: 115; title: Summary
pagenum: 116; title: Exercises
pagenum: 117; title: References
pagenum: 117; label: Chapter 8
title: Human Element Security
pagenum: 119; title: Introduction
pagenum: 119; title: Humans: The Weak Link
pagenum: 120; title: Security Awareness
pagenum: 120; title: Protecting Data
pagenum: 121; title: Passwords
pagenum: 121; title: Social Engineering
pagenum: 122; title: Network Usage
pagenum: 125; title: Malware
pagenum: 126; title: Personal Equipment
pagenum: 126; title: Clean Desk
pagenum: 127; title: Policy and Regulatory Knowledge
pagenum: 127; title: The Security Awareness and Training Program
pagenum: 127; title: Effectively Reaching Users
pagenum: 128; title: Summary
pagenum: 128; title: Exercises
pagenum: 129; title: References
pagenum: 129; label: Chapter 9
title: Physical Security
pagenum: 131; title: Introduction
pagenum: 132; title: Alert!
pagenum: 132; title: Additional Resources
pagenum: 133; title: Physical Security Controls
pagenum: 134; title: Deterrent
pagenum: 134; title: Detective
pagenum: 135; title: Preventive
pagenum: 135; title: How We Use Physical Access Controls
pagenum: 136; title: Protecting People
pagenum: 136; title: Physical Concerns for People
pagenum: 136; title: Safety
pagenum: 137; title: Evacuation
pagenum: 138; title: Administrative Controls
pagenum: 139; title: Protecting Data
pagenum: 140; title: Physical Concerns for Data
pagenum: 140; title: Availability
pagenum: 141; title: Residual Data
pagenum: 142; title: Backups
pagenum: 143; title: Protecting Equipment
pagenum: 143; title: Physical Concerns for Equipment
pagenum: 144; title: Note
pagenum: 144; title: Site Selection
pagenum: 145; title: Securing Access
pagenum: 146; title: Environmental Conditions
pagenum: 146; title: Physical Security in the Real World
pagenum: 147; title: Summary
pagenum: 148; title: Exercises
pagenum: 149; title: References
pagenum: 149; label: Chapter 10
title: Network Security
pagenum: 151; title: Introduction
pagenum: 152; title: Protecting Networks
pagenum: 152; title: Security in Network Design
pagenum: 153; title: Firewalls
pagenum: 153; title: Network Intrusion Detection Systems
pagenum: 157; title: Protecting Network Traffic
pagenum: 158; title: The Impact of Intercepted Data
pagenum: 158; title: Virtual Private Networks
pagenum: 159; title: Wireless Network Security
pagenum: 159; title: Secure Protocols
pagenum: 160; title: Mobile Device Security
pagenum: 161; title: What Is a Mobile Device?
pagenum: 161; title: Mobile Device Management
pagenum: 162; title: Bring Your Own Device
pagenum: 162; title: Network Security Tools
pagenum: 163; title: Wireless
pagenum: 164; title: Port Scanners
pagenum: 164; title: Packet Sniffers
pagenum: 165; title: Alert!
pagenum: 165; title: Honeypots
pagenum: 165; title: Additional Resources
pagenum: 167; title: Firewall Tools
pagenum: 167; title: Network Security in the Real World
pagenum: 167; title: Summary
pagenum: 168; title: Exercises
pagenum: 168; title: References
pagenum: 169; label: Chapter 11
title: Operating System Security
pagenum: 171; title: Introduction
pagenum: 172; title: Operating System Hardening
pagenum: 172; title: Remove All Unnecessary Software
pagenum: 173; title: Remove All Unessential Services
pagenum: 174; title: Alter Default Accounts
pagenum: 175; title: Apply the Principle of Least Privilege
pagenum: 176; title: Perform Updates
pagenum: 177; title: Turn On Logging and Auditing
pagenum: 178; title: Protecting Against Malware
pagenum: 178; title: Additional Resources
pagenum: 179; title: Anti-malware Tools
pagenum: 179; title: Executable Space Protection
pagenum: 180; title: Software Firewalls and Host Intrusion Detection
pagenum: 180; title: Software Firewalls
pagenum: 181; title: Host Intrusion Detection
pagenum: 181; title: Operating System Security Tools
pagenum: 181; title: Scanners
pagenum: 182; title: Alert!
pagenum: 183; title: Vulnerability Assessment Tools
pagenum: 183; title: Exploit Frameworks
pagenum: 183; title: Operating System Security in the Real World
pagenum: 185; title: Summary
pagenum: 185; title: Exercises
pagenum: 186; title: References
pagenum: 186; label: Chapter 12
title: Application Security
pagenum: 189; title: Introduction
pagenum: 190; title: The TJX Breach
pagenum: 190; title: Software Development Vulnerabilities
pagenum: 191; title: Additional Resources
pagenum: 191; title: Buffer Overflows
pagenum: 192; title: Race Conditions
pagenum: 192; title: Input Validation Attacks
pagenum: 193; title: Authentication Attacks
pagenum: 193; title: Authorization Attacks
pagenum: 194; title: Cryptographic Attacks
pagenum: 194; title: Web Security
pagenum: 195; title: Client-side Attacks
pagenum: 195; title: Alert!
pagenum: 196; title: Server-side Attacks
pagenum: 197; title: Database Security
pagenum: 198; title: Protocol Issues
pagenum: 199; title: Unauthenticated Access
pagenum: 200; title: Arbitrary Code Execution
pagenum: 200; title: Privilege Escalation
pagenum: 200; title: Additional Resources
pagenum: 201; title: Application Security Tools
pagenum: 202; title: Sniffers
pagenum: 202; title: Web Application Analysis Tools
pagenum: 202; title: Alert!
pagenum: 203; title: Fuzzers
pagenum: 204; title: Application Security in the Real World
pagenum: 206; title: Summary
pagenum: 207; title: Exercises
pagenum: 208; title: References
pagenum: 208; title: Index
pagenum: 209