Computer Security Fundamentals

Dr. Chuck Easttom is the author of 37 books, including several on computer security, forensics, and cryptography. He has also authored scientific papers on digital forensics, cyber warfare, cryptography, and applied mathematics. He is an inventor with 25 computer science patents. He holds a doctor of science degree in cybersecurity (dissertation topic: a study of lattice-based algorithms for post quantum cryptography), a Ph.D. in Computer Science (dissertation topic: "A Systematic Framework for Network Forensics Using Graph Theory"), and a Ph.D. in Nanotechnology (dissertation topic: "The Effects of Complexity on Carbon Nanotube Failures") and three master's degrees (one in applied computer science, one in education, and one in systems engineering). He also holds more than 70 industry certifications (CISSP, CEH, etc.). He is a frequent speaker at cybersecurity, computer science, and engineering conferences. He is a Distinguished Speaker and senior member of the ACM and a senior member of the IEEE. You can find out more about Dr. Easttom and his research at www.ChuckEasttom.com.

• Introduction xxixChapter 1: Introduction to Computer Security 2Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2How Seriously Should You Take Threats to Network Security?. . . . . . . . . . 4Identifying Types of Threats.. . . . . . . . . . . . . . . . . . . . . . . . 7Assessing the Likelihood of an Attack on Your Network.. . . . . . . . . . . . 17Basic Security Terminology. . . . . . . . . . . . . . . . . . . . . . . . 18Concepts and Approaches.. . . . . . . . . . . . . . . . . . . . . . . . 21How Do Legal Issues Impact Network Security?.. . . . . . . . . . . . . . . 24Online Security Resources.. . . . . . . . . . . . . . . . . . . . . . . . 25Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Chapter 2: Networks and the Internet 34Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Network Basics.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 35How the Internet Works. . . . . . . . . . . . . . . . . . . . . . . . . 43History of the Internet.. . . . . . . . . . . . . . . . . . . . . . . . . . 50Basic Network Utilities.. . . . . . . . . . . . . . . . . . . . . . . . . 52Other Network Devices.. . . . . . . . . . . . . . . . . . . . . . . . . 59Advanced Network Communications Topics.. . . . . . . . . . . . . . . . 60Cloud Computing. . . . . . . . . . . . . . . . . . . . . . . . . . . . 61Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65Chapter 3: Cyber Stalking, Fraud, and Abuse 74Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74How Internet Fraud Works.. . . . . . . . . . . . . . . . . . . . . . . . 75Identity Theft.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80Cyber Stalking.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82Protecting Yourself Against Cybercrime.. . . . . . . . . . . . . . . . . . 91Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99Chapter 4: Denial of Service Attacks 106Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106DoS Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107Illustrating an Attack.. . . . . . . . . . . . . . . . . . . . . . . . . . 107Common Tools Used for DoS Attacks.. . . . . . . . . . . . . . . . . . . 109DoS Weaknesses.. . . . . . . . . . . . . . . . . . . . . . . . . . . 112Specific DoS Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . 112Real-World Examples of DoS Attacks.. . . . . . . . . . . . . . . . . . . 120How to Defend Against DoS Attacks.. . . . . . . . . . . . . . . . . . . 121Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123Chapter 5: Malware 130Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130Viruses.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131Trojan Horses.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142The Buffer-Overflow Attack. . . . . . . . . . . . . . . . . . . . . . . 145Spyware.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146Other Forms of Malware.. . . . . . . . . . . . . . . . . . . . . . . . 149Detecting and Eliminating Viruses and Spyware. . . . . . . . . . . . . . . 153Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159Chapter 6: Techniques Used by Hackers 166Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166Basic Terminology.. . . . . . . . . . . . . . . . . . . . . . . . . . . 167The Reconnaissance Phase.. . . . . . . . . . . . . . . . . . . . . . . 167Actual Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 177Malware Creation. . . . . . . . . . . . . . . . . . . . . . . . . . . 184Penetration Testing.. . . . . . . . . . . . . . . . . . . . . . . . . . 187The Dark Web. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194Chapter 7: Industrial Espionage in Cyberspace 200Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200What Is Industrial Espionage?.. . . . . . . . . . . . . . . . . . . . . . 202Information as an Asset. . . . . . . . . . . . . . . . . . . . . . . . . 203Real-World Examples of Industrial Espionage.. . . . . . . . . . . . . . . 205How Does Espionage Occur?. . . . . . . . . . . . . . . . . . . . . . 207Protecting Against Industrial Espionage.. . . . . . . . . . . . . . . . . . 212Trade Secrets.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215The Industrial Espionage Act.. . . . . . . . . . . . . . . . . . . . . . 218Spear Phishing.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 219Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220Chapter 8: Encryption 226Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226Cryptography Basics.. . . . . . . . . . . . . . . . . . . . . . . . . . 227History of Encryption.. . . . . . . . . . . . . . . . . . . . . . . . . . 228Modern Cryptography Methods.. . . . . . . . . . . . . . . . . . . . . 236Public Key (Asymmetric) Encryption.. . . . . . . . . . . . . . . . . . . 245PGP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250Legitimate Versus Fraudulent Encryption Methods.. . . . . . . . . . . . . 251Digital Signatures. . . . . . . . . . . . . . . . . . . . . . . . . . . 252Hashing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253MAC and HMAC.. . . . . . . . . . . . . . . . . . . . . . . . . . . 254Steganography. . . . . . . . . . . . . . . . . . . . . . . . . . . . 255Cryptanalysis.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257Cryptography Used on the Internet.. . . . . . . . . . . . . . . . . . . . 259Quantum Computing Cryptography. . . . . . . . . . . . . . . . . . . . 259Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261Chapter 9: Computer Security Technology 268Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268Virus Scanners.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 269Firewalls.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272Antispyware.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278IDSs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279Digital Certificates.. . . . . . . . . . . . . . . . . . . . . . . . . . . 292SSL/TLS.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293Virtual Private Networks.. . . . . . . . . . . . . . . . . . . . . . . . 296Wi-Fi Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299Chapter 10: Security Policies 304Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304What Is a Policy?.. . . . . . . . . . . . . . . . . . . . . . . . . . . 305Important Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . 305Defining User Policies.. . . . . . . . . . . . . . . . . . . . . . . . . 308Defining System Administration Policies.. . . . . . . . . . . . . . . . . . 316Security Breaches.. . . . . . . . . . . . . . . . . . . . . . . . . . . 319Defining Access Control.. . . . . . . . . . . . . . . . . . . . . . . . 321Development Policies.. . . . . . . . . . . . . . . . . . . . . . . . . 322Standards, Guidelines, and Procedures.. . . . . . . . . . . . . . . . . . 323Disaster Recovery.. . . . . . . . . . . . . . . . . . . . . . . . . . . 324Zero Trust.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327Important Laws.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 328Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330Chapter 11: Network Scanning and Vulnerability Scanning 336Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336Basics of Assessing a System.. . . . . . . . . . . . . . . . . . . . . . 337Securing Computer Systems.. . . . . . . . . . . . . . . . . . . . . . 346Scanning Your Network. . . . . . . . . . . . . . . . . . . . . . . . . 352Testing and Scanning Standards.. . . . . . . . . . . . . . . . . . . . . 363Getting Professional Help.. . . . . . . . . . . . . . . . . . . . . . . . 366Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369Chapter 12: Cyber Terrorism and Information Warfare 378Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378Actual Cases of Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 379Weapons of Cyber Warfare.. . . . . . . . . . . . . . . . . . . . . . . 382Economic Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . 384Military Operations Attacks. . . . . . . . . . . . . . . . . . . . . . . 386General Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 387Supervisory Control and Data Acquisitions (SCADA).. . . . . . . . . . . . . 387Information Warfare.. . . . . . . . . . . . . . . . . . . . . . . . . . 388Actual Cases of Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 391Future Trends.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 395Defense Against Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 399Terrorist Recruiting and Communication.. . . . . . . . . . . . . . . . . . 399TOR and the Dark Web.. . . . . . . . . . . . . . . . . . . . . . . . . 400Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402Chapter 13: Cyber Detective 408Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 408General Searches. . . . . . . . . . . . . . . . . . . . . . . . . . . 410Company Searches.. . . . . . . . . . . . . . . . . . . . . . . . . . 413Court Records and Criminal Checks.. . . . . . . . . . . . . . . . . . . 413Usenet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417Google.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418Maltego. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421Chapter 14: Introduction to Forensics 426Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426General Guidelines. . . . . . . . . . . . . . . . . . . . . . . . . . . 427Finding Evidence on a PC. . . . . . . . . . . . . . . . . . . . . . . . 440Finding Evidence in System Logs.. . . . . . . . . . . . . . . . . . . . 441Getting Back Deleted Files.. . . . . . . . . . . . . . . . . . . . . . . 442Operating System Utilities. . . . . . . . . . . . . . . . . . . . . . . . 445The Windows Registry. . . . . . . . . . . . . . . . . . . . . . . . . 447Mobile Forensics: Cell Phone Concepts.. . . . . . . . . . . . . . . . . . 452The Need for Forensic Certification.. . . . . . . . . . . . . . . . . . . . 457Expert Witnesses.. . . . . . . . . . . . . . . . . . . . . . . . . . . 458Additional Types of Forensics.. . . . . . . . . . . . . . . . . . . . . . 459Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463Chapter 15: Cybersecurity Engineering 466Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466Defining Cybersecurity Engineering.. . . . . . . . . . . . . . . . . . . . 467Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475SecML. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480Modeling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491Glossary 494Appendix A: Resources 500Appendix B: Answers to the Multiple Choice Questions 502  9780137984787, TOC, 12/6/2022