Security in Computing

The New State-of-the-Art in Information Security: Now Covers the Economics of Cyber Security and the Intersection of Privacy and Information Security

For years, IT and security professionals and students have turned to Security in Computing as the definitive guide to information about computer security attacks and countermeasures. In their new fourth edition, Charles P. Pfleeger and Shari Lawrence Pfleeger have thoroughly updated their classic guide to reflect today's newest technologies, standards, and trends.

The authors first introduce the core concepts and vocabulary of computer security, including attacks and controls. Next, the authors systematically identify and assess threats now facing programs, operating systems, database systems, and networks. For each threat, they offer best-practice responses.

Security in Computing, Fourth Edition, goes beyond technology, covering crucial management issues faced in protecting infrastructure and information. This edition contains an all-new chapter on the economics of cybersecurity, explaining ways to make a business case for security investments. Another new chapter addresses privacy--from data mining and identity theft, to RFID and e-voting.

New coverage also includes

• Programming mistakes that compromise security: man-in-the-middle, timing, and privilege escalation attacks
• Web application threats and vulnerabilities
• Networks of compromised systems: bots, botnets, and drones
• Rootkits--including the notorious Sony XCP
• Wi-Fi network security challenges, standards, and techniques
• New malicious code attacks, including false interfaces and keystroke loggers
• Improving code quality: software engineering, testing, and liability approaches
• Biometric authentication: capabilities and limitations
• Using the Advanced Encryption System (AES) more effectively
• Balancing dissemination with piracy control in music and other digital content
• Countering new cryptanalytic attacks against RSA, DES, and SHA
• Responding to the emergence of organized attacker groups pursuing profit

(Pearson)

Bli först med att recensera och betygsätt boken Security in Computing - du kan vinna 200 kr varje månad i tävlingen "Månadens recension".

Charles P. Pfleeger is an independent information security consultant and principal of the Pfleeger Consulting Group. He specializes in threat/vulnerability analysis, system design review, certification preparation, expert witness testimony, and training.Shari Lawrence Pfleeger, a senior information scientist at the RAND Corporation, has written ten books on software engineering, measurement, and quality, including Software Engineering: Theory and Practice, Third Edition (Prentice Hall, 2006). She was named one of the world's top software engineering researchers by the Journal of Systems and Software.

(Pearson)

Foreword     xix
Preface     xxv Chapter 1: Is There a Security Problem in Computing?     1

  1.1    What Does "Secure" Mean?     1
  1.2    Attacks     5
  1.3    The Meaning of Computer Security     9
  1.4    Computer Criminals     21
  1.5    Methods of Defense     23
  1.6    What's Next     30
  1.7    Summary     32
  1.8    Terms and Concepts     32
  1.9    Where the Field Is Headed     33
1.10    To Learn More     34
1.11     Exercises     34

Chapter 2: Elementary Cryptography     37

  2.1    Terminology and Background     38
  2.2    Substitution Ciphers     44
  2.3    Transpositions (Permutations)     55
  2.4    Making "Good" Encryption Algorithms     59
  2.5    The Data Encryption Standard     68
  2.6    The AES Encryption Algorithm     72
  2.7    Public Key Encryption     75
  2.8    The Uses of Encryption     79
  2.9    Summary of Encryption     91
2.10    Terms and Concepts     92
2.11    Where the Field Is Headed     93
2.12    To Learn More     94
2.13    Exercises     94

Chapter 3     Program Security     98

  3.1    Secure Programs     99
  3.2    Nonmalicious Program Errors     103
  3.3    Viruses and Other Malicious Code     111
  3.4    Targeted Malicious Code     141
  3.5&n...

(Pearson)