Online Resources Preface Notation About the Authors Chapter 1 Overview   1.1   Computer Security Concepts   1.2   Threats, Attacks, and Assets   1.3   Security Functional Requirements   1.4   Fundamental Security Design Principles   1.5   Attack Surfaces and Attack Trees   1.6   Computer Security Strategy   1.7   Standards   1.8   Key Terms, Review Questions, and Problems PART ONE  COMPUTER SECURITY TECHNOLOGY AND PRINCIPLESChapter 2 Cryptographic Tools   2.1   Confidentiality with Symmetric Encryption   2.2   Message Authentication and Hash Functions   2.3   Public-Key Encryption   2.4   Digital Signatures and Key Management   2.5   Random and Pseudorandom Numbers   2.6   Practical Application: Encryption of Stored Data   2.7   Key Terms, Review Questions, and Problems Chapter 3 User Authentication   3.1   Digital User Authentication Principles   3.2   Password-Based Authentication   3.3   Token-Based Authentication   3.4   Biometric Authentication   3.5   Remote User Authentication   3.6   Security Issues for User Authentication   3.7   Practical Application: An Iris Biometric System   3.8   Case Study: Security Problems for ATM Systems   3.9   Key Terms, Review Questions, and Problems Chapter 4 Access Control   4.1   Access Control Principles   4.2   Subjects, Objects, and Access Rights   4.3   Discretionary Access Control   4.4   Example: UNIX File Access Control   4.5   Role-Based Access Control   4.6   Attribute-Based Access Control   4.7   Identity, Credential, and Access Management   4.8   Trust Frameworks   4.9   Case Study: RBAC System for a Bank   4.10   Key Terms, Review Questions, and Problems Chapter 5 Database and Data Center Security   5.1   The Need for Database Security   5.2   Database Management Systems   5.3   Relational Databases   5.4   SQL Injection Attacks   5.5   Database Access Control   5.6   Inference   5.7   Database Encryption   5.8   Data Center Security   5.9   Key Terms, Review Questions, and Problems Chapter 6 Malicious Software   6.1   Types of Malicious Software   6.2   Advanced Persistent Threat   6.2   Propagation — Infected Content - Viruses   6.3   Propagation — Vulnerability Exploit - Worms   6.4   Propagation — Social Engineering — SPAM E-Mail, Trojans   6.5   Payload — System Corruption   6.6   Payload — Attack Agent — Zombie, Bots   6.7   Payload — Information Theft — Keyloggers, Phishing, Spyware   6.8   Payload — Stealthing — Backdoors, Rootkits   6.9   Countermeasures   6.10   Key Terms, Review Questions, and Problems Chapter 7 Denial-of-Service Attacks   7.1   Denial-of-Service Attacks   7.2   Flooding Attacks   7.3   Distributed Denial-of-Service Attacks   7.4   Application-Based Bandwidth Attacks   7.5   Reflector and Am

About the Book Current developments and topics in computer and network security Capture the most recent changes in the field while maintaining a broad and comprehensive coverage of the entire field.The content in the book is unified by four basic themes.Principles: Although the scope of this book is broad, there are a number of basic principles that appear repeatedly as themes and that unify this field, for example, authentication and access control. The book highlights these principles and examines their application in specific areas of computer security.Design approaches: The book examines alternative approaches to meeting specific computer security requirements.Standards: Standards have come to assume an increasingly important, indeed dominant, role in this field. An understanding of the current status and future direction of technology requires a comprehensive discussion of the related standards.Real-world examples: A number of chapters include a section that shows the practical application of that chapter’s principles in a real-world environment. Engaging features that enhance learning · Hands-on projects reinforce concepts from the textbook Hacking exercises: Two projects that enable students to gain an understanding of the issues in intrusion detection and prevention.Laboratory exercises: A series of projects that involve programming and experimenting with concepts from the book.Security education (SEED) projects: The SEED projects are a set of hands-on exercises, or labs, covering a wide range of security topics.Research projects: A series of research assignments that instruct the student to research a particular topic on the Internet and write a report.Programming projects: A series of programming projects that cover a broad range of topics and that can be implemented in any suitable language on any platform.Practical security assessments: A set of exercises to examine current infrastructure and practices of an existing organization.Firewall projects: A portable network firewall visualization simulator is provided, together with exercises for teaching the fundamentals of firewalls.Case studies: A set of real-world case studies, including learning objectives, case description, and a series of case discussion questions.Reading/report assignments: A list of papers that can be assigned for reading and writing a report, plus suggested assignment wording.Writing assignments: A list of writing assignments to facilitate learning the material.Webcasts for teaching computer security: A catalog of webcast sites that can be used to enhance the course. An effective way of using this catalog is to select, or allow the student to select, one or a few videos to watch, and then to write a report/analysis of the video. · Case studies and examples provides real-world context to the text material. · Numerous homework problems cover a wide range of difficulty along with numerous review questions. An Instructor's Manual contains solutions to all problems and questions. · Extensive use of figures and tables clarify concepts. · List of key words, recommended reading list, and recommended Web sites at the end of each chapter. · List of acronyms on back endpaper. · Companion website at

Content updates · Data center security discussion in Chapter 5 covers data center security and the TIA-492 specification of reliability tiers. · Malware material in Chapter 6 includes additional material on macro viruses and their structure, as they are now the most common form of virus malware. · Virtualization security material in Chapter 12 has been extended, given the rising use of such systems by organizations and in cloud computing environments. A discussion of virtual firewalls, which may be used to help secure these environments, has also been added. · Cloud security discussion inChapter 13 includes an introduction to cloud computing, key cloud security concepts, an analysis of approaches to cloud security, and an open-source example. · IoT security indiscussion Chapter 13 covers security for the Internet of Things (IoT). The discussion includes an introduction to IoT, an overview of IoT security issues, and an open-source example. · SEIM discussion in Chapter 18 is updated for Security Information and Event Management (SIEM) Systems. · Privacy section covers privacy issues and its management in Chapter 19. The section has been extended with additional discussion of moral and legal approaches, and the privacy issues related to big data. · Authenticated encryption has become an increasingly widespread cryptographic tool in a variety of applications and protocols. Chapter 21 includes a new discussion of authenticated description and describes an important authenticated encryption algorithm known as offset codebook (OCB) mode.