Secure Computers and Networks: Analysis, Design, and Implementation

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780849318689 | 0849318688
Cover: Hardcover
Copyright: 12/28/1999

Buy Used

Usually Ships in 2-4 Business Days

$128.63

This updated guide presents expert information on analyzing, designing, and implementing all aspects of computer network security. Based on the authors' earlier work, Computer System and Network Security, this new book addresses important concerns regarding network security. It contains new chapters on World Wide Web security issues, secure electronic commerce, incident response, as well as two new appendices on PGP and UNIX security fundamentals.

Fundamentals of Computer Security

(10)

Objectives of Computer Security

(1)

Issues Involved in Computer Security

(2)

Privacy and Ethics

(1)

Computer Crime

(1)

Projects

(1)

References

(1)

Extended Bibliography

(2)

Risk Assessment and Mitigation

(12)

Assessment Theory

(6)

Information Asset Value (A)

(1)

Vulnerability Evaluation (V)

(1)

Threat Measurement (T)

(3)

Applying the Risk Analysis Equation

(2)

Decision Support and Risk Mitigation

(1)

Summary

(1)

Projects

(1)

References

(1)

Extended Bibliography

(1)

Developing Secure Computer Systems

(12)

External Security Measures

(2)

Structure of a Computer System

(3)

Secure Computer System Issues

(4)

Summary

(1)

Projects

(1)

References

(1)

Extended Bibliography

(1)

Security Models

(18)

Specification and Verification

(1)

Security Models

(11)

Biba

(3)

Bell and LaPadula

(3)

Clark-Wilson

(3)

Goguen-Meseguer

(1)

The Trusted Computer System Evaluation Criteria

(3)

Discretionary Access Requirements

(1)

Mandatory Access Requirements

(1)

Summary

(1)

Projects

(1)

References

(1)

Extended Bibliography

(2)

User Authentication

(20)

Authentication Objectives

(1)

Authentication Methods

(13)

Informational Keys

(2)

Physical keys

(4)

Biometric Keys

(7)

Summary

(1)

Projects

(1)

References

(2)

Extended Bibliography

(3)

Access and Information Flow Controls

(16)

File Passwords

(1)

Capabilities based

(2)

Access Control Lists

(2)

Protection Bits

(1)

Controls for mandatory Access

(2)

Trojan Horses

(1)

Summary

(1)

Projects

(1)

References

(1)

Extended Bibliography

(3)

Auditing and Intrusion Detection

(26)

Audit Trail Features

(3)

Intrusion Detection Systems

(9)

User Profiling

(1)

Intruder Profiling

(1)

Signature Analysis

(1)

Action Based

(1)

IDES

(2)

MIDAS

(2)

Haystack

100

(1)

Network Intrusion Detection

101

(6)

Network Attack Characteristics

102

(1)

NSM

102

(2)

DIDS

104

(1)

NADIR

105

(1)

CSM

106

(1)

Monitoring and the law

107

(1)

Summary

108

(1)

Projects

109

(1)

References

110

(1)

Extended Bibliography

111

(4)

Damage Control and Assessment

115

(22)

Damage Control

116

(5)

Inform the Authorities

116

(1)

Backup System Data

117

(1)

Remove the Intruder

118

(1)

Contain and Monitor the Intruder

119

(1)

Lock Stolen User Accounts

120

(1)

Require Additional Authentication

120

(1)

Damage Assessment

121

(12)

Attack Recovery

122

(5)

Damage Prevention

127

(6)

Summary

133

(1)

Projects

134

(1)

References

134

(1)

Extended Bibliography

135

(2)

Database Security

137

(14)

Database Management System Primer

137

(2)

DBMS Vulnerabilities and Responses

139

(6)

Inference

139

(1)

Aggregation

140

(3)

Data Integrity

143

(1)

Trojan Horses

144

(1)

Summary

145

(1)

Projects

146

(1)

References

146

(2)

Extended Bibliography

148

(3)

Network Security

151

(26)

Network Fundamentals

152

(4)

Network Security Issues

156

(7)

Basic Network Security Objectives and Threats

157

(1)

Security Services

158

(5)

The Trusted Network Interpretation

163

(6)

TNI Security Service

163

(4)

AIS Interconnection Issues

167

(2)

Distributed Systems Security

169

(2)

Modem Access to the Network

171

(1)

Summary

172

(1)

Projects

173

(1)

References

174

(1)

Extended Bibliography

174

(3)

Secure Electronic Commerce

177

(14)

Certificate Authorities

176

(4)

Smart Cards

180

(1)

Interesting Applications of Electronic Commerce

181

(3)

Home Banking

182

(1)

Stock Brokerages

182

(1)

Gambling

183

(1)

The Shopping Mall

183

(1)

Other Applications

184

(1)

Digital Cash

184

(1)

Trusting the Web

185

(2)

Summary

187

(1)

Projects

187

(1)

References

188

(1)

Extended Bibliography

188

(3)

World Wide Web (WWW) Security

191

(16)

Browser Security

192

(5)

User Certification

192

(1)

193

(2)

User Privacy

195

(2)

Scripts

197

(4)

ActiveX

197

(1)

Java and Javascript

198

(3)

CGI

201

(1)

Protocols

201

(3)

HTTP

201

(1)

SHTTP

202

(2)

SSL

204

(1)

Summary

204

(1)

Projects

204

(1)

References

205

(1)

Extended Bibliography

205

(2)

Firewalls

207

(18)

Simple Damage Limiting Approaches

207

(1)

Network Firewalls

208

(8)

Packet Filtering Gateways

210

(4)

Circuit Level Gateways

214

(1)

Application Level Gateways

215

(1)

Firewall Costs and Effectiveness

216

(2)

Sample Security Packages

218

(2)

Summary

220

(1)

Projects

221

(1)

References

221

(1)

Extended Bibliography

222

(3)

Cryptography

225

(38)

Substitution Ciphers

226

(7)

Caesar Cipher

226

(1)

Rot13

227

(1)

Substitution Cipher Variations

227

(2)

Vigenere Ciphers

229

(3)

One Time Pads

232

(1)

Transposition Ciphers

233

(1)

Encrypting Digital Communication

234

(17)

DES

235

(4)

IDEA

239

(2)

Key Escrow and Key Recovery

241

(3)

Public Key Cryptography

244

(5)

Digital Signatures

249

(2)

PGP-pretty Good Privacy

251

(1)

Public Key Infrastructure

252

(1)

Steganography

253

(3)

Summary

256

(1)

Projects

256

(2)

References

258

(1)

Extended Bibliography

259

(4)

Malicious Code

263

(28)

Viruses

263

(13)

Infection

264

(1)

Theory behind Viruses

265

(4)

Prevention, Detection, and Removal

269

(3)

Special Viruses

272

(4)

Worms

276

(7)

Infection

277

(1)

Theory of Worms

277

(4)

Prevention and Removal

281

(2)

Trojan Horses

283

(4)

Receiving Trojan Horses

283

(1)

Theory of Trojan Horses

284

(2)

Prevention, Detection, and Removal

286

(1)

Summary

287

(1)

Projects

288

(1)

References

288

(1)

Extended Bibliography

289

(2)

Security Standards

291

(20)

The History of Security Standards

292

(1)

The Trusted Computer System Evaluation Criteria

293

(3)

The Information Technology Security Evaluation Criteria

296

(1)

The Canadian Trusted Computer Product Evaluation Criteria

297

(2)

The Federal Criteria

299

(2)

The Common Criteria

301

(4)

British Standard 7799

305

(3)

Summary

308

(1)

Projects

308

(1)

References

309

(1)

Extended Bibliography

309

(2)

Case Studies

311

(18)

The Hanover Hackers

311

(3)

An Evening with Berferd

314

(4)

The Internet Worm

318

(2)

Adventures on the World Wide Web

320

(4)

Summary

324

(1)

Projects

325

(1)

References

325

(1)

Extended Bibliography

326

(3)

APPENDIX A: INFORMATION WARFARE

329

(16)

A.1 Levels of Information Warfare

331

(4)

A.2 Weapons of Information Warfare

335

(2)

A.3 Perception Management

337

(2)

A.4 Summary

339

(1)

A.5 Projects

340

(1)

A.6 References

340

(2)

A.7 Extended Bibliography

342

(3)

APPENDIX B: UNIX SECURITY

345

(16)

B.1 History

345

(1)

B.2 System Boot

346

(1)

B.3 Audit Features

347

(2)

B.4 Passwords and Accounts

349

(2)

B.5 The UNIX File System

351

(4)

B.6 Startup Files

355

(1)

B.7 UNIX and Network Security

355

(3)

B.8 Sources of Help

358

(1)

B.9 References

359

(2)

Index

361

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Secure Computers and Networks: Analysis, Design, and Implementation

Summary

Table of Contents

Supplemental Materials