Computer and Information Security Handbook, Third Edition, provides the most current and complete reference on computer security available in one volume. The book offers deep coverage of an extremely wide range of issues in computer and cybersecurity theory, applications, and best practices, offering the latest insights into established and emerging technologies and advancements.
With new parts devoted to such current topics as Cloud Security, Cyber-Physical Security, and Critical Infrastructure Security, the book now has 100 chapters written by leading experts in their fields, as well as 12 updated appendices and an expanded glossary. It continues its successful format of offering problem-solving techniques that use real-life case studies, checklists, hands-on exercises, question and answers, and summaries.
Chapters new to this edition include such timely topics as Cyber Warfare, Endpoint Security, Ethical Hacking, Internet of Things Security, Nanoscale Networking and Communications Security, Social Engineering, System Forensics, Wireless Sensor Network Security, Verifying User and Host Identity, Detecting System Intrusions, Insider Threats, Security Certification and Standards Implementation, Metadata Forensics, Hard Drive Imaging, Context-Aware Multi-Factor Authentication, Cloud Security, Protecting Virtual Infrastructure, Penetration Testing, and much more.
Online chapters can also be found on the book companion website:
https://www.elsevier.com/books-and-journals/book-companion/9780128038437
1. Part I. Overview of System and Network Security: A Comprehensive Introduction - p. xli 2. Chapter 1. Information Security in the Modern Enterprise - p. 3 3. Chapter 2. Building a Secure Organization - p. 13 4. Chapter 3. A Cryptography Primer - p. 35 5. Chapter 4. Verifying User and Host Identity - p. 59 6. Chapter 5. Detecting System Intrusions - p. 67 7. Chapter 6. Intrusion Detection in Contemporary Environments - p. 109 8. Chapter 7. Preventing System Intrusions - p. 131 9. Chapter 8. Guarding Against Network Intrusions - p. 149 10. Chapter 9. Fault Tolerance and Resilience in Cloud Computing Environments - p. 165 11. Chapter 10. Securing Web Applications, Services, and Servers - p. 183 12. Chapter 11. UNIX and Linux Security - p. 205 13. Chapter 12. Eliminating the Security Weakness of Linux and UNIX Operating Systems - p. 225 14. Chapter 13. Internet Security - p. 239 15. Chapter 14. The Botnet Problem - p. 265 16. Chapter 15. Intranet Security - p. 275 17. Chapter e16. Local Area Network Security - p. e1 18. Chapter 17. Wireless Network Security - p. 301 19. Chapter 18. Wireless Sensor Network Security: The Internet of Things - p. 317 20. Chapter 19. Security for the Internet of Things - p. 339 21. Chapter 20. Cellular Network Security - p. 349 22. Chapter 21. Radio Frequency Identification Security - p. 369 23. Chapter e22. Optical Network Security - p. e21 24. Chapter e23. Optical Wireless Security - p. e29 25. Part II. Managing Information Security - p. e34 26. Chapter 24. Information Security Essentials for Information Technology Managers: Protecting Mission-Critical Systems - p. 393 27. Chapter 25. Security Management Systems - p. 421 28. Chapter 26. Policy-Driven System Management - p. 427 29. Chapter e27. Information Technology Security Management - p. e35 30. Chapter e28. The Enemy (The Intruder's Genesis) - p. e45 31. Chapter 29. Social Engineering Deceptions and Defenses - p. 465 32. Chapter 30. Ethical Hacking - p. 475 33. Chapter 31. What Is Vulnerability Assessment? - p. 483 34. Chapter e32. Security Metrics: An Introduction and Literature Review - p. e57 35. Chapter 33. Security Education, Training, and Awareness - p. 497 36. Chapter 34. Risk Management - p. 507 37. Chapter 35. Insider Threat - p. 529 38. Part III. Disaster Recovery Security - p. 536 39. Chapter 36. Disaster Recovery - p. 539 40. Chapter 37. Disaster Recovery Plans for Small and Medium Businesses (SMBs) - p. 549 41. Part IV. Security Standards and Policies - p. 553 42. Chapter 38. Security Certification and Standards Implementation - p. 557 43. Chapter 39. Security Policies and Plans Development - p. 565 44. Part V. Cyber, Network, and Systems Forensics Security and Assurance - p. 570 45. Chapter 40. Cyber Forensics - p. 573 46. Chapter 41. Cyber Forensics and Incidence Response - p. 603 47. Chapter 42. Securing e-Discovery - p. 629 48. Chapter e43. Network Forensics - p. e71 49. Chapter 44. Microsoft Office and Metadata Forensics: A Deeper Dive - p. 659 50. Chapter 45. Hard Drive Imaging - p. 669 51. Part VI. Encryption Technology - p. 672 52. Chapter e46. Data Encryption - p. e83 53. 1. Need for Cryptography - p. e83 54. 2. Mathematical Prelude to Cryptography - p. e84 55. 3. Classical Cryptography - p. e84 56. 4. Modern Symmetric Ciphers - p. e87 57. 5. Algebraic Structure - p. e89 58. 6. The Internal Functions of Rijndael in Advanced Encryption Standard Implementation - p. e93 59. 7. Use of Modern Block Ciphers - p. e97 60. 8. Public-Key Cryptography - p. e98 61. 9. Cryptanalysis of Rivest–Shamir–Adleman - p. e101 62. 10. Diffie–Hellman Algorithm - p. e102 63. 11. Elliptic Curve Cryptosystems - p. e102 64. 12. Message Integrity and Authentication - p. e104 65. 13. Triple Data Encryption Algorithm Block Cipher - p. e105 66. 14. Summary - p. e106 67. Chapter Review Questions/Exercises - p. e106 68. Exercise - p. e107 69. Chapter 47. Satellite Encryption - p. 677 70. Chapter 48. Public Key Infrastructure - p. 691 71. Chapter e49. Password-Based Authenticated Key Establishment Protocols - p. e109 72. Chapter 50. Context-Aware Multifactor Authentication Survey - p. 715 73. Chapter 51. Instant-Messaging Security - p. 727 74. Part VII. Privacy and Access Management - p. 740 75. Chapter 52. Online Privacy - p. 743 76. Chapter 53. Privacy-Enhancing Technologies - p. 759 77. Chapter e54. Personal Privacy Policies - p. e125 78. Chapter 55. Detection of Conflicts in Security Policies - p. 781 79. Chapter 56. Supporting User Privacy Preferences in Digital Interactions - p. 801 80. Chapter 57. Privacy and Security in Environmental Monitoring Systems: Issues and Solutions - p. 823 81. Chapter 58. Virtual Private Networks - p. 843 82. Chapter e59. Identity Theft - p. e145 83. Chapter 60. VoIP Security - p. 859 84. Part VIII. Storage Security - p. 873 85. Chapter e61. SAN Security - p. e165 86. Chapter 62. Storage Area Networking Security Devices - p. 879 87. Part IX. Cloud Security - p. 894 88. Chapter 63. Securing Cloud Computing Systems - p. 897 89. Chapter 64. Cloud Security - p. 923 90. Chapter 65. Private Cloud Security - p. 931 91. Chapter 66. Virtual Private Cloud Security - p. 937 92. Part X. Virtual Security - p. 942 93. Chapter 67. Protecting Virtual Infrastructure - p. 945 94. Chapter 68. Software-Defined Networking and Network Function Virtualization Security - p. 953 95. Part XI. Cyber Physical Security - p. 961 96. Chapter 69. Physical Security Essentials - p. 965 97. Chapter e70. Biometrics - p. e189 98. Part XII. Practical Security - p. e204 99. Chapter 71. Online Identity and User Management Services - p. 985 100. Chapter 72. Intrusion Prevention and Detection Systems - p. 1011 101. Chapter e73. Transmission Control Protocol/Internet Protocol Packet Analysis - p. e205 102. Chapter e74. Firewalls - p. e219 103. Chapter 75. Penetration Testing - p. 1031 104. Chapter e76. System Security - p. e239 105. Chapter 77. Access Controls - p. 1041 106. Chapter 78. Endpoint Security - p. 1049 107. Chapter e79. Assessments and Audits - p. e247 108. Chapter 80. Fundamentals of Cryptography - p. 1059 109. Part XIII. Critical Infrastructure Security - p. 1066 110. Chapter 81. Securing the Infrastructure - p. 1069 111. Chapter e82. Homeland Security - p. e255 112. Chapter 83. Cyber Warfare - p. 1085 113. Chapter 84. Cyber-Attack Process - p. 1105 114. Part XIV. Advanced Security - p. 1116 115. Chapter 85. Security Through Diversity - p. 1119 116. Chapter 86. e-Reputation and Online Reputation Management Survey - p. 1131 117. Chapter e87. Content Filtering - p. e271 118. Chapter 88. Data Loss Protection - p. 1155 119. Chapter 89. Satellite Cyber Attack Search and Destroy - p. 1173 120. Chapter e90. Verifiable Voting Systems - p. e293 121. Chapter 91. Advanced Data Encryption - p. 1185 122. Part XV. Appendices - p. 1237 123. Appendix eA. Configuring Authentication Service On Microsoft Windows 10 - p. e319 124. Appendix eB. Security Management and Resiliency - p. e323 125. Appendix eC. List of Top Information and Network Security Implementation and Deployment Companies - p. e325 126. Appendix eD. List of Security Products - p. e329 127. Appendix eE. List of Security Standards - p. e343 128. Appendix eF. List of Miscellaneous Security Resources - p. e345 129. Appendix eG. Ensuring Built-in, Frequency-Hopping Spread-Spectrum, Wireless Network Security - p. e355 130. Appendix eH. Configuring Wireless Security Remote Access - p. e357 131. Appendix eI. Frequently Asked Questions - p. e363 132. Appendix eJ. Case Studies - p. e365 133. Appendix eK. Answers to Review Questions/Exercises, Hands-on Projects, Case Projects and Optional Team Case Project by Chapter - p. e381 134. Appendix eL. Glossary - p. e471 135. Index - p. 1197
Computer and Information Security Handbook, Third Edition, provides the most current and complete reference on computer security available in one volume. The book offers deep coverage of an extremely wide range of issues in computer and cybersecurity theory, applications, and best practices, offering the latest insights into established and emerging technologies and advancements.
With new parts devoted to such current topics as Cloud Security, Cyber-Physical Security, and Critical Infrastructure Security, the book now has 100 chapters written by leading experts in their fields, as well as 12 updated appendices and an expanded glossary. It continues its successful format of offering problem-solving techniques that use real-life case studies, checklists, hands-on exercises, question and answers, and summaries.
Chapters new to this edition include such timely topics as Cyber Warfare, Endpoint Security, Ethical Hacking, Internet of Things Security, Nanoscale Networking and Communications Security, Social Engineering, System Forensics, Wireless Sensor Network Security, Verifying User and Host Identity, Detecting System Intrusions, Insider Threats, Security Certification and Standards Implementation, Metadata Forensics, Hard Drive Imaging, Context-Aware Multi-Factor Authentication, Cloud Security, Protecting Virtual Infrastructure, Penetration Testing, and much more.
Online chapters can also be found on the book companion website:
https://www.elsevier.com/books-and-journals/book-companion/9780128038437
1. Part I. Overview of System and Network Security: A Comprehensive Introduction - p. xli 2. Chapter 1. Information Security in the Modern Enterprise - p. 3 3. Chapter 2. Building a Secure Organization - p. 13 4. Chapter 3. A Cryptography Primer - p. 35 5. Chapter 4. Verifying User and Host Identity - p. 59 6. Chapter 5. Detecting System Intrusions - p. 67 7. Chapter 6. Intrusion Detection in Contemporary Environments - p. 109 8. Chapter 7. Preventing System Intrusions - p. 131 9. Chapter 8. Guarding Against Network Intrusions - p. 149 10. Chapter 9. Fault Tolerance and Resilience in Cloud Computing Environments - p. 165 11. Chapter 10. Securing Web Applications, Services, and Servers - p. 183 12. Chapter 11. UNIX and Linux Security - p. 205 13. Chapter 12. Eliminating the Security Weakness of Linux and UNIX Operating Systems - p. 225 14. Chapter 13. Internet Security - p. 239 15. Chapter 14. The Botnet Problem - p. 265 16. Chapter 15. Intranet Security - p. 275 17. Chapter e16. Local Area Network Security - p. e1 18. Chapter 17. Wireless Network Security - p. 301 19. Chapter 18. Wireless Sensor Network Security: The Internet of Things - p. 317 20. Chapter 19. Security for the Internet of Things - p. 339 21. Chapter 20. Cellular Network Security - p. 349 22. Chapter 21. Radio Frequency Identification Security - p. 369 23. Chapter e22. Optical Network Security - p. e21 24. Chapter e23. Optical Wireless Security - p. e29 25. Part II. Managing Information Security - p. e34 26. Chapter 24. Information Security Essentials for Information Technology Managers: Protecting Mission-Critical Systems - p. 393 27. Chapter 25. Security Management Systems - p. 421 28. Chapter 26. Policy-Driven System Management - p. 427 29. Chapter e27. Information Technology Security Management - p. e35 30. Chapter e28. The Enemy (The Intruder's Genesis) - p. e45 31. Chapter 29. Social Engineering Deceptions and Defenses - p. 465 32. Chapter 30. Ethical Hacking - p. 475 33. Chapter 31. What Is Vulnerability Assessment? - p. 483 34. Chapter e32. Security Metrics: An Introduction and Literature Review - p. e57 35. Chapter 33. Security Education, Training, and Awareness - p. 497 36. Chapter 34. Risk Management - p. 507 37. Chapter 35. Insider Threat - p. 529 38. Part III. Disaster Recovery Security - p. 536 39. Chapter 36. Disaster Recovery - p. 539 40. Chapter 37. Disaster Recovery Plans for Small and Medium Businesses (SMBs) - p. 549 41. Part IV. Security Standards and Policies - p. 553 42. Chapter 38. Security Certification and Standards Implementation - p. 557 43. Chapter 39. Security Policies and Plans Development - p. 565 44. Part V. Cyber, Network, and Systems Forensics Security and Assurance - p. 570 45. Chapter 40. Cyber Forensics - p. 573 46. Chapter 41. Cyber Forensics and Incidence Response - p. 603 47. Chapter 42. Securing e-Discovery - p. 629 48. Chapter e43. Network Forensics - p. e71 49. Chapter 44. Microsoft Office and Metadata Forensics: A Deeper Dive - p. 659 50. Chapter 45. Hard Drive Imaging - p. 669 51. Part VI. Encryption Technology - p. 672 52. Chapter e46. Data Encryption - p. e83 53. 1. Need for Cryptography - p. e83 54. 2. Mathematical Prelude to Cryptography - p. e84 55. 3. Classical Cryptography - p. e84 56. 4. Modern Symmetric Ciphers - p. e87 57. 5. Algebraic Structure - p. e89 58. 6. The Internal Functions of Rijndael in Advanced Encryption Standard Implementation - p. e93 59. 7. Use of Modern Block Ciphers - p. e97 60. 8. Public-Key Cryptography - p. e98 61. 9. Cryptanalysis of Rivest–Shamir–Adleman - p. e101 62. 10. Diffie–Hellman Algorithm - p. e102 63. 11. Elliptic Curve Cryptosystems - p. e102 64. 12. Message Integrity and Authentication - p. e104 65. 13. Triple Data Encryption Algorithm Block Cipher - p. e105 66. 14. Summary - p. e106 67. Chapter Review Questions/Exercises - p. e106 68. Exercise - p. e107 69. Chapter 47. Satellite Encryption - p. 677 70. Chapter 48. Public Key Infrastructure - p. 691 71. Chapter e49. Password-Based Authenticated Key Establishment Protocols - p. e109 72. Chapter 50. Context-Aware Multifactor Authentication Survey - p. 715 73. Chapter 51. Instant-Messaging Security - p. 727 74. Part VII. Privacy and Access Management - p. 740 75. Chapter 52. Online Privacy - p. 743 76. Chapter 53. Privacy-Enhancing Technologies - p. 759 77. Chapter e54. Personal Privacy Policies - p. e125 78. Chapter 55. Detection of Conflicts in Security Policies - p. 781 79. Chapter 56. Supporting User Privacy Preferences in Digital Interactions - p. 801 80. Chapter 57. Privacy and Security in Environmental Monitoring Systems: Issues and Solutions - p. 823 81. Chapter 58. Virtual Private Networks - p. 843 82. Chapter e59. Identity Theft - p. e145 83. Chapter 60. VoIP Security - p. 859 84. Part VIII. Storage Security - p. 873 85. Chapter e61. SAN Security - p. e165 86. Chapter 62. Storage Area Networking Security Devices - p. 879 87. Part IX. Cloud Security - p. 894 88. Chapter 63. Securing Cloud Computing Systems - p. 897 89. Chapter 64. Cloud Security - p. 923 90. Chapter 65. Private Cloud Security - p. 931 91. Chapter 66. Virtual Private Cloud Security - p. 937 92. Part X. Virtual Security - p. 942 93. Chapter 67. Protecting Virtual Infrastructure - p. 945 94. Chapter 68. Software-Defined Networking and Network Function Virtualization Security - p. 953 95. Part XI. Cyber Physical Security - p. 961 96. Chapter 69. Physical Security Essentials - p. 965 97. Chapter e70. Biometrics - p. e189 98. Part XII. Practical Security - p. e204 99. Chapter 71. Online Identity and User Management Services - p. 985 100. Chapter 72. Intrusion Prevention and Detection Systems - p. 1011 101. Chapter e73. Transmission Control Protocol/Internet Protocol Packet Analysis - p. e205 102. Chapter e74. Firewalls - p. e219 103. Chapter 75. Penetration Testing - p. 1031 104. Chapter e76. System Security - p. e239 105. Chapter 77. Access Controls - p. 1041 106. Chapter 78. Endpoint Security - p. 1049 107. Chapter e79. Assessments and Audits - p. e247 108. Chapter 80. Fundamentals of Cryptography - p. 1059 109. Part XIII. Critical Infrastructure Security - p. 1066 110. Chapter 81. Securing the Infrastructure - p. 1069 111. Chapter e82. Homeland Security - p. e255 112. Chapter 83. Cyber Warfare - p. 1085 113. Chapter 84. Cyber-Attack Process - p. 1105 114. Part XIV. Advanced Security - p. 1116 115. Chapter 85. Security Through Diversity - p. 1119 116. Chapter 86. e-Reputation and Online Reputation Management Survey - p. 1131 117. Chapter e87. Content Filtering - p. e271 118. Chapter 88. Data Loss Protection - p. 1155 119. Chapter 89. Satellite Cyber Attack Search and Destroy - p. 1173 120. Chapter e90. Verifiable Voting Systems - p. e293 121. Chapter 91. Advanced Data Encryption - p. 1185 122. Part XV. Appendices - p. 1237 123. Appendix eA. Configuring Authentication Service On Microsoft Windows 10 - p. e319 124. Appendix eB. Security Management and Resiliency - p. e323 125. Appendix eC. List of Top Information and Network Security Implementation and Deployment Companies - p. e325 126. Appendix eD. List of Security Products - p. e329 127. Appendix eE. List of Security Standards - p. e343 128. Appendix eF. List of Miscellaneous Security Resources - p. e345 129. Appendix eG. Ensuring Built-in, Frequency-Hopping Spread-Spectrum, Wireless Network Security - p. e355 130. Appendix eH. Configuring Wireless Security Remote Access - p. e357 131. Appendix eI. Frequently Asked Questions - p. e363 132. Appendix eJ. Case Studies - p. e365 133. Appendix eK. Answers to Review Questions/Exercises, Hands-on Projects, Case Projects and Optional Team Case Project by Chapter - p. e381 134. Appendix eL. Glossary - p. e471 135. Index - p. 1197
