Network Defense and Countermeasures

Principles and Practices

AvWilliam Easttom II

Häftad, Engelska, 2024

Del i serien Pearson IT Cybersecurity Curriculum (ITCC)

665 kr

Beställningsvara. Skickas inom 7-10 vardagar. Fri frakt över 249 kr.

Fler format och utgåvor

Häftad

942 kr

Beskrivning

All you need to know about defending networks, in one book

Clearly explains concepts, terminology, challenges, tools, and skills
Covers key security standards and models for business and government
The perfect introduction for all network/computer security professionals and students

Welcome to today's most useful and practical introduction to defending modern networks. Drawing on decades of experience, Chuck Easttom brings together updated coverage of all the concepts, terminology, techniques, and solutions you'll need to be effective.

Easttom thoroughly introduces the core technologies of modern network security, including firewalls, intrusion-detection systems, and VPNs. Next, he shows how encryption can be used to safeguard data as it moves across networks.

You'll learn how to harden operating systems, defend against malware and network attacks, establish robust security policies, and assess network security using industry-leading standards and models. You'll also find thorough coverage of key issues such as physical security, forensics, and cyberterrorism.

Throughout, Easttom blends theory and application, helping you understand both what to do and why. In every chapter, quizzes, exercises, projects, and web resources deepen your understanding and help you use what you've learned—in the classroom and in your career.

LEARN HOW TO

Evaluate key network risks and dangers
Choose the right network security approach for your organization
Anticipate and counter widespread network attacks, including those based on "social engineering"
Successfully deploy and apply firewalls and intrusion detection systems
Secure network communication with virtual private networks
Protect data with cryptographic public/private key systems, digital signatures, and certificates
Defend against malware, including ransomware, Trojan horses, and spyware
Harden operating systems and keep their security up to date
Define and implement security policies that reduce risk
Explore leading security standards and models, including ISO and NIST standards
Prepare for an investigation if your network has been attacked
Understand the growing risks of espionage and cyberterrorism

Produktinformation

Utgivningsdatum:2024-04-04
Mått:182 x 236 x 30 mm
Vikt:955 g
Format:Häftad
Språk:Engelska
Serie:Pearson IT Cybersecurity Curriculum (ITCC)
Antal sidor:624
Upplaga:4
Förlag:Pearson Education
ISBN:9780138200589

Utforska kategorier

Nätverk och kommunikation inom Data och IT

Mer om författaren

Dr. Chuck Easttom is the author of 41 books, including several on computer security, forensics, and cryptography. He is also an inventor with 25 patents and the author of over 70 research papers. He holds a Doctor of Science in cybersecurity, a Ph.D. in nanotechnology, a Ph.D. in computer science, and three master's degrees (one in applied computer science, one in education, and one in systems engineering). He is a senior member of both the IEEE and the ACM. He is also a Distinguished Speaker of the ACM and a Distinguished Visitor of the IEEE. Dr. Easttom is currently an adjunct professor for Georgetown University and for Vanderbilt University.

Innehållsförteckning

Preface xxiiiChapter 1: Introduction to Network Security 2Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2The Basics of a Network.. . . . . . . . . . . . . . . . . . . . . . . . . 3Basic Network Utilities.. . . . . . . . . . . . . . . . . . . . . . . . . 11The OSI Model.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15What Does This Mean for Security?. . . . . . . . . . . . . . . . . . . . 16Assessing Likely Threats to the Network. . . . . . . . . . . . . . . . . . 16Classifications of Threats.. . . . . . . . . . . . . . . . . . . . . . . . 20Likely Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24Threat Assessment.. . . . . . . . . . . . . . . . . . . . . . . . . . . 25Understanding Security Terminology.. . . . . . . . . . . . . . . . . . . . 26Choosing a Network Security Approach.. . . . . . . . . . . . . . . . . . 30Network Security and the Law.. . . . . . . . . . . . . . . . . . . . . . 32Using Security Resources. . . . . . . . . . . . . . . . . . . . . . . . 34Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Chapter 2: Types of Attacks 42Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42Understanding Denial of Service Attacks.. . . . . . . . . . . . . . . . . . 43Defending Against Buffer Overflow Attacks.. . . . . . . . . . . . . . . . . 63Defending Against IP Spoofing. . . . . . . . . . . . . . . . . . . . . . 64Defending Against Session Hijacking.. . . . . . . . . . . . . . . . . . . 66Blocking Virus and Trojan Horse Attacks. . . . . . . . . . . . . . . . . . 66Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75Chapter 3: Fundamentals of Firewalls 82Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82What Is a Firewall?. . . . . . . . . . . . . . . . . . . . . . . . . . . 83Implementing Firewalls.. . . . . . . . . . . . . . . . . . . . . . . . . 90Firewall Deployment.. . . . . . . . . . . . . . . . . . . . . . . . . . 95Selecting and Using a Firewall.. . . . . . . . . . . . . . . . . . . . . . 96Using Proxy Servers.. . . . . . . . . . . . . . . . . . . . . . . . . . 97Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99Chapter 4: Firewall Practical Applications 106Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106Using Single Machine Firewalls.. . . . . . . . . . . . . . . . . . . . . 107Windows 10 Firewall.. . . . . . . . . . . . . . . . . . . . . . . . . . 108User Account Control.. . . . . . . . . . . . . . . . . . . . . . . . . 110Linux Firewalls.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 110Using Small Office/Home Office Firewalls.. . . . . . . . . . . . . . . . . 118Using Medium-Sized Network Firewalls.. . . . . . . . . . . . . . . . . . 121Using Enterprise Firewalls. . . . . . . . . . . . . . . . . . . . . . . . 124Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125Chapter 5: Intrusion-Detection Systems 132Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132Understanding IDS Concepts.. . . . . . . . . . . . . . . . . . . . . . 133IDS Components and Processes.. . . . . . . . . . . . . . . . . . . . . 135SIEM.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136Evasion Techniques.. . . . . . . . . . . . . . . . . . . . . . . . . . 137Understanding and Implementing IDSs.. . . . . . . . . . . . . . . . . . 138Understanding and Implementing Honeypots. . . . . . . . . . . . . . . . 141Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146Chapter 6: Encryption Fundamentals 152Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152The History of Encryption.. . . . . . . . . . . . . . . . . . . . . . . . 153Learning About Modern Encryption Methods.. . . . . . . . . . . . . . . . 160Identifying Good Encryption.. . . . . . . . . . . . . . . . . . . . . . . 173Understanding Digital Signatures and Certificates.. . . . . . . . . . . . . . 174MAC and HMAC.. . . . . . . . . . . . . . . . . . . . . . 179Understanding and Using Decryption.. . . . . . . . . . . . . . . . . . . 179Cracking Passwords.. . . . . . . . . . . . . . . . . . . . . . . . . . 180Steganography. . . . . . . . . . . . . . . . . . . . . . . . . . . . 184Steganalysis.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185Quantum Computing and Quantum Cryptography. . . . . . . . . . . . . . 186Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187Endnote.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187Chapter 7: Virtual Private Networks 194Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194Basic VPN Technology.. . . . . . . . . . . . . . . . . . . . . . . . . 195Using VPN Protocols for VPN Encryption.. . . . . . . . . . . . . . . . . 197IPsec.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206SSL/TLS.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207Other VPN Protocols.. . . . . . . . . . . . . . . . . . . . . . . . . . 209Implementing VPN Solutions.. . . . . . . . . . . . . . . . . . . . . . 210Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215Chapter 8: Operating System Hardening 222Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222Configuring Windows Properly.. . . . . . . . . . . . . . . . . . . . . . 223Configuring Linux Properly.. . . . . . . . . . . . . . . . . . . . . . . 244Patching the Operating System.. . . . . . . . . . . . . . . . . . . . . 245Configuring Browsers.. . . . . . . . . . . . . . . . . . . . . . . . . 246Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253Chapter 9: Defending Against Virus Attacks 260Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260Understanding Virus Attacks.. . . . . . . . . . . . . . . . . . . . . . 261Virus Scanners.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 270Virus Scanning Techniques. . . . . . . . . . . . . . . . . . 272When Antivirus Causes a Problem. . . . . . . . . . . . . . . 274Commercial Antivirus Software.. . . . . . . . . . . . . . . . 274Antivirus Policies and Procedures.. . . . . . . . . . . . . . . . . . . . 283Additional Methods for Defending Your System.. . . . . . . . . . . . . . . 284What to Do If Your System Is Infected by a Virus.. . . . . . . . . . . . . . 285Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288Chapter 10: Defending Against Trojan Horses and Phishing 296Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296Trojan Horses.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297Phishing.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313Chapter 11: Security Policies 318Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318ISO 27002. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 319Important Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . 322Defining User Policies.. . . . . . . . . . . . . . . . . . . . . . . . . 324Defining System Administration Policies.. . . . . . . . . . . . . . . . . . 331Defining Access Control.. . . . . . . . . . . . . . . . . . . . . . . . 336Defining Developmental Policies.. . . . . . . . . . . . . . . . . . . . . 337Disaster Recovery.. . . . . . . . . . . . . . . . . . . . . . . . . . . 338Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339Chapter 12: Assessing System Security 346Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346Risk Assessment Concepts.. . . . . . . . . . . . . . . . . . . . . . . 347Evaluating the Security Risk.. . . . . . . . . . . . . . . . . . . . . . . 348Conducting the Initial Assessment. . . . . . . . . . . . . . . . . . . . 351Probing the Network.. . . . . . . . . . . . . . . . . . . . . . . . . . 357Vulnerabilities.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381McCumber Cube.. . . . . . . . . . . . . . . . . . . . . . . . . . . 384Security Documentation.. . . . . . . . . . . . . . . . . . . . . . . . 385Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388Chapter 13: Security Standards 394Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394COBIT.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394ISO Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 396NIST Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 397U.S. DoD Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . 403Using the Common Criteria.. . . . . . . . . . . . . . . . . . . . . . . 405Using Security Models.. . . . . . . . . . . . . . . . . . . . . . . . . 407U.S. Federal Regulations, Guidelines, and Standards.. . . . . . . . . . . . 410Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 413Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414Chapter 14: Physical Security and Disaster Recovery 422Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422Physical Security.. . . . . . . . . . . . . . . . . . . . . . . . . . . 422Disaster Recovery.. . . . . . . . . . . . . . . . . . . . . . . . . . . 428Ensuring Fault Tolerance.. . . . . . . . . . . . . . . . . . . . . . . . 432Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435Chapter 15: Techniques Used by Attackers 438Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 438Preparing to Hack.. . . . . . . . . . . . . . . . . . . . . . . . . . . 439The Attack Phase. . . . . . . . . . . . . . . . . . . . . . . . . . . 453Session Hijacking. . . . . . . . . . . . . . . . . . . . . . . . . . . 457Wi-Fi Hacking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459Bluetooth Hacking.. . . . . . . . . . . . . . . . . . . . . . . . . . . 459Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462Chapter 16: Introduction to Forensics 466Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466General Forensics Guidelines.. . . . . . . . . . . . . . . . . . . . . . 467FBI Forensics Guidelines. . . . . . . . . . . . . . . . . . . . . . . . 470Imaging a Drive.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 471Finding Evidence on the PC.. . . . . . . . . . . . . . . . . . . . . . . 474Gathering Evidence from a Cell Phone.. . . . . . . . . . . . . . . . . . 485Forensic Tools to Use.. . . . . . . . . . . . . . . . . . . . . . . . . 491AccessData Forensic Toolkit.. . . . . . . . . . . . . . . . . 491EnCase.. . . . . . . . . . . . . . . . . . . . . . . . . . 492The Sleuth Kit. . . . . . . . . . . . . . . . . . . . . . . 492OSForensics. . . . . . . . . . . . . . . . . . . . . . . . 492Forensic Science.. . . . . . . . . . . . . . . . . . . . . . . . . . . 493To Certify or Not to Certify?.. . . . . . . . . . . . . . . . . . . . . . . 493Expert Witnesses.. . . . . . . . . . . . . . . . . . . . . . . . . . . 494Additional Types of Forensics.. . . . . . . . . . . . . . . . . . . . . . 495Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499Endnote.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499Chapter 17: Cyber Warfare and Terrorism 504Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504Defending Against Computer-Based Espionage. . . . . . . . . . . . . . . 505Defending Against Computer-Based Terrorism. . . . . . . . . . . . . . . 508Choosing Defense Strategies.. . . . . . . . . . . . . . . . . . . . . . 514Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524Endnotes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524Appendix A: Answers 530Glossary 542 9780138200589, 9/1/2023