Secured Computing

This book is a study guide for those seeking the Certified Information Systems Security Professional (CISSP) designation.

Preface

viii

Overview of CISSP and the Exam

viii

How to Use This Book

ix

The Study Plan

ix

Test Day Tips

x

Access Control Systems and Methodology

Definitions

2

(1)

Access Control Techniques

3

(2)

Access Control Layers

5

(1)

Types of Access Control

6

(1)

Account, Log and journal Monitoring

7

(2)

Access Control Models

9

(3)

The three Basic Principles of I&A

12

(1)

Passwords

13

(2)

Centralized Remote Authentication Access Controls

15

(1)

Decentralized Remote Authentication Access Controls

16

(1)

Methods of Attacks

17

(1)

Monitoring

18

(5)

Test Your Knowledge

23

(8)

Telecommunications & Network Security

Definitions

31

(1)

ISO/OSI Model

31

(4)

Network Topologies

35

(2)

Protocol Vulnerabilities

37

(7)

WAN Protocols

44

(2)

Identification and Authentication

46

(2)

Data Communications

48

(3)

Web Security Protocols

51

(2)

Network Components

53

(1)

Network Availability

54

(4)

Test Your Knowledge

58

(8)

Security Management Practices

Definitions

66

(1)

Security Management Concepts and Principles

66

(1)

Protection Mechanisms

67

(1)

Change/Control Management

67

(1)

Data Classification Schemes

68

(3)

Employment Policies and Practices

71

(2)

Policies, Standards, Guidelines, and Procedures

73

(2)

Risk Management

75

(4)

Countermeasures

79

(3)

Roles and Responsibilities

82

(1)

Security Awareness

83

(1)

Security Management Planning

84

(2)

Test Your Knowledge

86

(6)

Applications & Systems Development

Definitions

92

(1)

Application Issues

92

(4)

Location Distributed Environment

96

(4)

Data Information Storage

100

(1)

Knowledge Based Systems

101

(1)

Security Control Architecture

102

(3)

System Development Controls

105

(6)

Test Your Knowledge

111

(5)

Cryptography

Definitions

116

(1)

Uses of Cryptography

117

(1)

Cryptographic Concepts, Methodologies, and Practices

118

(4)

Key Management

122

(1)

Ciphers

123

(2)

Cryptographic Algorithms

125

(8)

Public Key Infrastructure

133

(3)

Application and Network Based Protocols

136

(3)

Methods of Attack

139

(2)

Test Your Knowledge

141

(6)

Security Architecture and Models

Definitions

147

(1)

Principles of Common Computer and Network Architecture and Design

147

(3)

Principles of Common Security Models, Architectures, and Evaluation Criteria

150

(4)

NSA/NCSC Rainbow Series

154

(11)

Objects and Subjects

165

Common Flaws in Security Architecture

161

(3)

Test Your Knowledge

164

(5)

Operations Security

Definitions

169

(1)

Administrative Management

170

(1)

Computer Operations Concepts

171

(3)

Test Your Knowledge

174

(6)

Business Continuity Planning and Disaster Recovery

Definitions

180

(1)

Business Continuity Planning

181

(2)

Disaster Recovery Planning

183

(1)

Recovery Planning Development

184

(4)

Test Your Knowledge

188

(8)

Laws, Investigations, and Ethics

Definitions

196

(1)

Types of Laws

196

(2)

U. S. Laws

198

(2)

International Computer Crime Related Laws

200

(1)

BS 17799

201

(1)

Investigations

201

(4)

Types of Computer Crime

205

(1)

Incident Handling/Response

206

(1)

Ethics

207

(1)

ISC2 Code of Ethics

207

(4)

Test Your Knowledge

211

(5)

Physical Security

Definitions

216

(1)

Administrative and Physical Controls

216

(1)

Personal Identification systems

217

(4)

Elements of Physical Security

221

(1)

Facility Requirements

221

(2)

Noise

223

(1)

Fire Access and Controls

223

(1)

Physical Access Controls

224

(1)

Technical Controls

225

(1)

Environment/Life Safety

225

(1)

Test Your Knowledge

226

(7)

Methods of Attacks

Definitions

233

(1)

Virus Types

234

(1)

Other Attacks

235

(1)

Secret key algorithm attacks

236

(3)

Whatis.com Definitions

239

(15)

References

254

(1)

Recommended Study Aids

255

(1)

Glossary

256

(33)

CISSP Practice Exam

289

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Summary

Table of Contents

Supplemental Materials