Computer and Information Security Handbook (2-Volume Set)

John Vacca is an independent information technology consultant and researcher, professional writer, editor, reviewer, and author based in Pomeroy, Ohio, USA. Since 1982, John has authored, edited, and published more than 85 books, including Smart Cities Policies and Financing: Approaches and Solutions, Elsevier; Cloud Computing Security: Foundations and Challenges, Taylor and Francis/CRC Press; Solving Urban Infrastructure Problems Using Smart City Technologies: Handbook on Planning, Design, Development, and Regulation, Elsevier; Online Terrorist Propaganda, Recruitment, and Radicalization, Taylor and Francis/CRC Press; Nanoscale Networking and Communications Handbook, Taylor and Francis/CRC Press; Handbook of Sensor Networking: Advanced Technologies and Applications, Taylor and Francis/CRC Press; Network and System Security 2/e, Elsevier/Syngress; Cyber Security and IT Infrastructure Protection, Elsevier/Syngress; and Managing Information Security 2/e, Elsevier/Syngress; among many others. John was a Configuration Management Specialist, Computer Specialist, and the Computer Security Official (CSO) for NASA’s space station program (Freedom) and the International Space Station Program from 1988 until his retirement from NASA in 1995. John has also been a security consultant for major motion pictures, including AntiTrust, Collateral, and Identity Theft: The Michelle Brown Story. He received his M.Sc. from Kansas State University and an MBA from Emporia State University and served in the United States Air Force from 1967-1971.

• Part 1: Overview of System and Network Security: A Comprehensive Introduction  1. Information Security in the Modern Enterprise,2. Building a Secure Organization3. A Cryptography Primer4. Verifying User and Host Identity5. Detecting System Intrusions6. Intrusion Detection in Contemporary Environments7. Preventing System Intrusions8. Guarding Against Network Intrusions9. Fault Tolerance and Resilience in Cloud Computing Environments10. Securing Web Applications, Services and Servers11. UNIX and Linux Security12. Eliminating the Security Weakness of Linux and UNIX Operating Systems13. Internet Security14. The Botnet Problem15. Intranet Security16. Local Area Network Security17. Wireless Network Security18. Wireless Sensor Network Security: The Internet of Things19. Security for the Internet of Things20. Cellular Network Security21. Radio Frequency Identification Security22. Optical Network Security23. Optical Wireless SecurityPart 2: Managing Information Security  24. Information Security Essentials for Information Technology Managers: Protecting Mission-Critical Systems25. Security Management Systems26. Policy-Driven System Management27. Information Technology Security Management28. The Enemy (The Intruder’s Genesis)29. Social Engineering Deceptions and Defenses30. Ethical Hacking31. What Is Vulnerability Assessment?32. Security Metrics33. Security Education, Training, and Awareness34. Risk Management35. Insider ThreatsPart 3: Disaster Recovery Security  36. Disaster Recovery37. Disaster Recovery Plans for Small and Medium Business (SMB)Part 4: Security Standards And Policies  38. Security Certification And Standards Implementation39. Security Policies And Plans DevelopmentPart 5: Cyber, Network, and Systems Forensics Security and Assurance  40. Cyber Forensics41. Cyber Forensics And Incidence Response42. Securing e-Discovery43. Network Forensics44. Microsoft Office and Metadata Forensics: A Deeper Dive45. Hard Drive ImagingPart 6: Encryption Technology  46. Data Encryption47. Satellite Encryption48. Public Key Infrastructure49. Password-based Authenticated Key Establishment Protocols50. Context-Aware Multifactor Authentication Survey51. Instant-Messaging SecurityPart 7: Privacy and Access Management  52. Online Privacy53. Privacy-enhancing Technologies54. Personal Privacy Policies55. Detection Of Conflicts In Security Policies56. Supporting User Privacy Preferences in Digital Interactions57. Privacy and Security in Environmental Monitoring Systems: Issues and Solutions58. Virtual Private Networks59. Identity Theft60. VoIP SecurityPart 8: Storage Security  61. SAN Security62. Storage Area Networking Devices Security Part 9: Cloud Security  63. Securing Cloud Computing Systems64. Cloud Security65. Private Cloud Security66. Virtual Private Cloud SecurityPart 10: Virtual Security  67. Protecting Virtual Infrastructure68. SDN and NFV SecurityPart 11: Cyber Physical Security 69. Physical Security Essentials70. BiometricsPart 12: Practical Security  71. Online Identity and User Management Services72. Intrusion Detection and Prevention Systems73. Transmission Control Protocol/Internet Protocol Packet Analysis74. Firewalls75. Penetration Testing76. System Security77. Access Controls78. Endpoint Security79. Assessments and Audits80. Fundamentals of CryptographyPart 13: Critical Infrastructure Security  81. Securing the Infrastructure82. Threat Landscape and Good Practices for the Internet Infrastructure83. Cyber Attacks Against the Grid Infrastructure84. Threat Landscape and Good Practices For The Smart Grid Infrastructure85. Energy Infrastructure Cyber Security86. Homeland Security87. Cyber Warfare88. Cyber Attack ProcessPart 14: Cyber Security for the Smart City And Smart Homes  89. Smart Cities: Cyber Security Concerns90. Community Preparedness Action Groups for Smart City Cyber Security91. Smart City Disaster Preparedness and Resilience92. Disaster Preparedness and Resiliency Policy Considerations for the Smart City93. Cyber Security in Smart Homes94. Threat Landscape and Good Practices for Smart Homes and Converged Media95. Future Trends For Cyber Security for Smart- Cities And HomesPart 15: Cyber Security Of Connected And Automated Vehicles  96. An Overview of Cyber Attacks and Defenses on Intelligent Connected Vehicles97. An Overview Of Cyber Security Issues In Vehicular Ad-hoc Networks (VANETs)98. An Overview: Various Cyber Attacks in VANETPart 16: Advanced Security  99. Security Through Diversity100. Online e-Reputation Management Services101. Content Filtering102. Data Loss Protection103. Satellite Cyber Attack Search and Destroy104. Verifiable Voting Systems105. Advanced Data Encryption106. Use Of Artificial Intelligence (AI) In Cyber SecurityPart 17: Future Cyber Security Trends And Directions  107. New Cyber Security Vulnerabilities And Trends Facing Aerospace And Defense Systems108. How Aerospace And Defense Companies Will Respond To Future Cyber Security Threats109. Understanding the Future Trends of the Aviation Cyber Security Threat Landscape110. Fighting the Rising Trends Of Cyber Attacks on Aviation111. Future Trends For Cyber Security Hardening of Aviation Systems112. Future Trends For Cyber Security in the Gaming Industry113.  Future Trends For Cyber Attacks in the Health Care Industry114.  Future Trends For Cyber Defense Of Offshore Drilling Rigs115. Future Trends In Maritime Cyber SecurityPart 18: Appendices  A. List of Top Information and Network Security Implementation and Deployment Companies B. List of Security Products C. List of Security Standards D. List of Miscellaneous Security Resources E. Frequently Asked Questions F. Case Studies G. Answers to Review Questions/Exercises, Hands-on Projects, Case Projects and Optional Team Case Project by Chapter Appendix H GlossaryIndex