Network Security

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9781401882143 | 1401882145
Cover: Paperback
Copyright: 10/5/2004

Buy Used

Usually Ships in 2-4 Business Days

$168.31
Buy New

Print on Demand: 2-4 Weeks. This item cannot be cancelled or returned.

$225.57

Get the inside edge on the latest advances in the field of computer network security with the help of this new book! Comprehensive in scope, it is an essential guide to all facets of information security ranging from basic network technology to the broad applications of network security used in e-commerce, Internet security, and enterprise systems. Readers will learn about risk and threat analysis, as well as technologies such as access control, authentication, encryption and key distribution. Planning, installing, and operating a secure system is also covered. Highlights include lessons learned from September 11, 2001. Coverage concludes with a look at future trends, including global terror and proactive solutions.

Preface

xiii

Acknowledgments

xix

CHAPTER 1: From Teleprocessing to Client/Server Computing

(26)

Introduction

(1)

1.1 Information: A Vital Asset

(2)

1.2 The Beginning: The 1960's and Early 1970's

(2)

1.3 Enter the Minicomputer: The 1970's and Early 1980's

(4)

Operating Systems

(2)

1.4 The Personal Computer (PC): The 1980's and Early 1990's

(4)

1.5 Client/Server Computing: The 1990's through the Twenty-first Century

(4)

The Client

(1)

The Server

(1)

The Physical Network

(1)

The Logical Connection

(1)

World Wide Web (WWW)

(1)

Intranets and Extranets

(1)

1.6 Computer Systems and Security

(1)

1.7 Where Does All the Money Go?

(9)

CHAPTER 2: Software, Operating Systems, and Applications

(44)

Introduction

(19)

2.1 Early Operating Systems

(4)

2.2 Operating Systems in the Twenty-first Century

(1)

Booting an Operating System

(1)

2.3 UNIX Operating Systems

(3)

POSIX

(2)

2.4 Modern UNIX: An Operating System for All Seasons and All Computers

(2)

2.5 UNIX Security

(2)

UNIX Permissions

(2)

2.6 Windows, Windows, and More Windows

(1)

2.7 Windows Security

(2)

2.8 Windows NT, 244, and XP

(1)

2.9 Windows Domains and Security

(3)

2.10 Midrange and Mainframe Operating Systems

(2)

MVS Operation and Security

(2)

2.11 Application Software

(4)

Database Approaches

(2)

Oracle Database

(1)

2.12 General Considerations in Database Design and Use

(1)

2.13 Remote Data Access

(1)

2.14 Middleware

(1)

DEC Middleware Technique

(1)

IBM Middleware Technique

(1)

2.15 Applications and Web Technology

(1)

2.16 Programming Languages

(4)

Object-Oriented Programming

(1)

Java and Java Applets

(1)

Scripts

(1)

2.17 Application Software: A General Picture

(10)

CHAPTER 3: Computer Networks

(30)

Introduction

(1)

3.1 Network Configurations

(2)

Local Area Networks (LANs)

(1)

Campus Area Networks (CANs)

(1)

Metropolitan Area and Wide Area Networks (MANs and WANs)

(1)

3.2 Network Designations

(8)

Peer-to-Peer Networks

(5)

Server-Based Networks and Security

(2)

3.3 Network Topologies-Connecting the Computers

(4)

Bus Topology

(1)

Star Topology

(1)

Ring Topology

(1)

3.4 The OSI Model

(15)

Data Transfer

(4)

The IETF and Request for Comments (RFCs)

(1)

Layer 7-Application Layer

(1)

Layer 6-Presentation Layer

(1)

Layer 5-Session Layer

(1)

Layer 4-Transport Layer

(1)

Layer 3-Network Layer

(1)

Layer 2-Data-Link Layer

(1)

Layer 1-Physical Layer

(7)

CHAPTER 4: LAN Protocols

101

(48)

Introduction

102

(1)

4.1 Ethernet

103

(4)

Ethernet Standards

103

(1)

The IEEE 802.3 Ethernet Specifications

104

(3)

4.2 Ethernet Bus Topology

107

(6)

10Base2

107

(1)

10BaseS

108

(1)

Bus Network Termination

109

(1)

Bus Network Extension: The Simplified Ethernet 802.3 5-4-3 Rule

109

(1)

Ethernet System Delay

110

(2)

10Base2 and 10Base5 Network Disadvantages

112

(1)

4.3 Twisted Pair Data Grade Cabling

113

(2)

UTP Termination-The 568 Standards

114

(1)

4.4 10BaseT and Fast Ethernet

115

(3)

10BaseT

116

(1)

Fast Ethernet

116

(1)

100BaseTX

116

(1)

100BaseT4

117

(1)

100BaseFX

117

(1)

4.5 Ethernet Multiport Repeaters versus Switches

118

(8)

Multiport Repeaters

118

(2)

Crossover Cables

120

(2)

Ethernet Switches

122

(4)

4.6 Gigabit Ethernet

126

(2)

How Gigabit Ethernet Is Used

126

(1)

10 Gigabit-per-Second Ethernet

127

(1)

4.7 Token Ring

128

(7)

Token Ring Topology

128

(1)

Connecting to the Ring

129

(2)

Token Passing

131

(2)

Ring Beaconing

133

(1)

The Future of Token Ring

134

(1)

4.8 Frame Relay

135

(2)

Frame Relay Transmission

135

(1)

Frame Structure

136

(1)

4.9 Asynchronous Transfer Mode (ATM)

137

(12)

Cell Structure

138

(11)

CHAPTER 5: TCP/IP and the Internet

149

(28)

Introduction

150

(1)

5.1 TCP/IP Standards and Administration

151

(2)

Internet Engineering Task Force (IETF) and Request for Comments

151

(1)

Internet Corporation for Assigned Names and Numbers (ICANN)

152

(1)

5.2 Internet Protocol Version 4 (IPv4)

153

(3)

IPv4 Address Formats

153

(1)

IPv4 Address Details

154

(1)

Types of IPv4 Addressing

154

(2)

5.3 How IP Addresses Are Used on the Internet

156

(4)

How a Device Obtains IP Address Information

157

(1)

Domain Names

158

(2)

5.4 Routing

160

(6)

How Routers Route Packets

161

(1)

Packet Internet Groper (PING)

162

(1)

Trace Route

163

(1)

Classless Interdomain Routing (CIDR)

164

(1)

Ports and Sockets

165

(1)

5.5 Transmission Control Protocol (TCP and User/UNIX Datagram Protocol (UDP)

166

(2)

Transmission Control Protocol (TCP)

166

(2)

User Datagram Protocol (UDP)

168

(1)

5.6 IP Version 6 versus IP Version 4

168

(9)

Internet Protocol Version 6 (IPv6)

169

(8)

CHAPTER 6: Risk Analysis and Threat

177

(30)

Introduction

178

(1)

6.1 General Considerations for Risk Analysis

178

(1)

6.2 Risk Analysis Process

179

(9)

The Basics of Project Management

179

(1)

Applying the Project Management Approach to Risk Analysis

180

(4)

Analyzing and Prioritizing Risk

184

(3)

The Weighted Matrix Approach

187

(1)

6.3 Understanding Computer Crime

188

(6)

Types of Computer Crime

188

(2)

Unauthorized Use of Computer Resources

190

(1)

Fraud and Other Predictable Acts

190

(1)

Sabotage, Vandalism and Terrorism

190

(4)

6.4 Tools of the Attacker

194

(2)

Password Guessing

194

(1)

External Programs

194

(1)

Malicious Programs

194

(2)

6.5 Special Areas of Concern

196

(1)

Internal versus External Risk

196

(1)

Internet, Intranet, and Extranet

197

(1)

6.6 Disaster Recovery

197

(3)

6.7 Presenting Plans for Approval

200

(7)

CHAPTER 7: Access Control and Authentication

207

(22)

Introduction

208

(1)

7.1 Who Goes There?...The Password

208

(2)

Levels of User ID

209

(1)

7.2 Selecting Good Passwords

210

(3)

Secure but Easy to Remember

212

(1)

Forcing Good Passwords

213

(1)

Password Generation Software

213

(1)

7.3 More than Just Passwords

213

(6)

Challenge Authentication Protocol (CHAP)

215

(4)

7.4 Access Control Lists

219

(2)

Application-Based Access Tables

220

(1)

7.5 Strong Authentication

221

(2)

Dynamic Passwords

221

(1)

Event-Driven Systems

221

(1)

Time-Synchronized Tokens

222

(1)

Digital Signatures

222

(1)

Certificates of Authentication

223

(1)

7.6 Biometrics Identification

223

(6)

CHAPTER 8: The Technology of Security

229

(32)

Introduction

230

(1)

8.1 Locks and Keys

231

(2)

From Lock and Key to Magnetic Strip Card

231

(1)

Physical Equipment Security

232

(1)

8.2 Security Methods and Services

233

(9)

Security Services, Methods, and Algorithms

233

(1)

Encryption

234

(2)

The Problem with Single-Key Systems

236

(1)

Public-Key Encryption

236

(3)

Hashing and Hash Totals

239

(1)

Digital Signature

239

(1)

Single-Key Session Encryption and Public-Key Protection

240

(2)

8.3 Hardware and Software Security Services

242

(2)

Using the Hackers' Tools to Trap Them

243

(1)

Same Service Implemented Differently in Hardware and Software

244

(1)

8.4 Smart Cards and Tokens

244

(6)

The Technology of Smart Cards

244

(1)

Time-Synchronized Smart Cards

245

(2)

Challenge Response Card

247

(1)

The Future of Smart Cards

248

(1)

Biometrics Access Control Devices

248

(2)

8.5 Security and the ISO/OSI Model

250

(1)

8.6 Public-Key Infrastructure (PKI)

251

(3)

8.7 IP Security (IPsec)

254

(7)

CHAPTER 9: Security at the Lower Levels

261

(26)

Introduction

262

(1)

9.1 Security at the Physical Level

263

(2)

LANs and Security

264

(1)

9.2 Security at the Data-Link Level

265

(4)

Local Area Network Techniques-Bridging

265

(2)

Virtual Private Network (VPN)

267

(2)

9.3 Point-to-Point Protocol (PPP)

269

(3)

9.4 Point-to-Point Tunneling Protocol (PPTP)

272

(2)

Layer 2 Tunneling Protocol (L2TP)

274

(1)

9.5 Secure Authenticated Connection

274

(2)

9.6 Security through the Internet

276

(11)

IPsec

276

(4)

The Values and Concerns with IPsec

280

(7)

CHAPTER 10: Upper-Level Security Services

287

(40)

Introduction

289

(1)

10.1 Ways to Attack TCP/IP-Based Systems and UNIX Services

290

(4)

10.2 Internet and Intranet Basics

294

(14)

Proxy Servers

298

(1)

Firewalls

299

(8)

Port Blocking

307

(1)

10.3 Viruses, Worms, and Trojan Horses

308

(2)

10.4 E-Mail Threats and Solutions

310

(4)

Dealing with MIME Problems

310

(1)

Types of E-Mail Viruses

311

(2)

E-Mail and Encryption

313

(1)

Microsoft Outlook and Viruses

313

(1)

10.5 Active Content Issues with Web Pages

314

(1)

10.6 Database Concerns

315

(2)

10.7 Denial of Service

317

(10)

CHAPTER 11: Security Services in Business and Government

327

(34)

Introduction

329

(2)

11.1 Security Needs and Risks in E-Commerce

331

(1)

11.2 Secure HTTP

332

(3)

11.3 Secure Web Services

335

(1)

11.4 Secure Socket Layer (SSL)

335

(3)

Speeding Up SSL

337

(1)

11.5 Secure Electronic Transaction (SET)

338

(3)

Payment Processing

340

(1)

11.6 Private Communications Technology (PCT)

341

(1)

11.7 Java Crypto Tools

342

(1)

11.8 Wireless Systems

343

(3)

Cellular Telephone Systems and Security

343

(1)

Internet Access and Cell Phones

344

(2)

11.9 Building Communities in E-Commerce

346

(1)

11.10 Enterprise-Level Systems

347

(3)

Information Repositories

348

(1)

Document Management Systems

348

(1)

Back-End Services

349

(1)

Information Resource Management

350

(1)

Quality Software and Version Control

350

(1)

11.11 Creating and Using Enterprise-Wide Plans

350

(11)

CHAPTER 12: The Planning, Design, and Installation of Secure Systems

361

(30)

12.1 Planning for Security

362

(7)

Development Life Cycles

364

(2)

Rapid Application Development (RAD)

366

(1)

Prototypes and Pilots

367

(1)

Parallel Processes

368

(1)

12.2 Special Concerns and Issues

369

(3)

Islands of Mechanization

369

(1)

Defining Boundaries

369

(1)

User Involvement

370

(1)

Initial Planning and Exploration

371

(1)

12.3 System Definitions

372

(3)

User Views

372

(1)

Contractors, Contract Negotiations, and Contractor Management

373

(1)

Technical Views

374

(1)

12.4 Design Aspects

375

(4)

The Design Process

375

(1)

Security Issues

376

(2)

Audit and Audit Rules

378

(1)

Back-up and Recovery

379

(1)

12.5 Testing and Installation

379

(2)

Testing

379

(1)

Installation

380

(1)

Phased Implementation

380

(1)

12.6 Insurance

381

(10)

Policies

382

(1)

Sharing

382

(9)

CHAPTER 13: Operating a Successful and Secure System

391

(28)

Introduction

393

(1)

13.1 Support

393

(5)

People Aspects

393

(1)

Software Support

394

(3)

VOIP and VPN Support

397

(1)

Additional Support for E-Commerce

397

(1)

13.2 Help Desk

398

(1)

Understanding and Using User Skills

398

(1)

Help-Desk Support

399

(1)

13.3 Performance Issues

399

(3)

TCP/IP Performance Issues

400

(1)

Encryption Performance

401

(1)

Monitoring

401

(1)

13.4 Monitoring Tools and Methods

402

(3)

Simple Network Management Protocol (SNMP)

403

(2)

13.5 Troubleshooting and Maintenance

405

(2)

Protocol Analyzers

406

(1)

13.6 Controlling Security

407

(4)

Monitoring Security

408

(1)

Intrusion Detection

408

(2)

Usage of Logs and Incursion Logs

410

(1)

13.7 Third-Party Security Services

411

(8)

CHAPTER 14: The Future

419

(28)

Introduction

420

(1)

14.1 Where Are We Now?

421

(7)

Who Is the Threat?

423

(2)

Internal and External Users

425

(1)

The Terrorist

426

(1)

What Is Everyone After?

427

(1)

14.2 Predicting New Threats

428

(1)

14.3 Defining New Protections

429

(1)

Technical IT Protections

430

(1)

14.4 Technology Trends

430

(6)

Hardware and Software

431

(2)

Global Networks and Internet II

433

(3)

14.5 Staying Up-to-Date

436

(3)

14.6 Facing the Future

439

(8)

Success Factors

440

(7)

Glossary

447

(28)

Index

475

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Network Security

Summary

Author Biography

Table of Contents

Supplemental Materials