This book introduces major technologies that are employed in today’s cybersecurity landscape and the fundamental principles and philosophies behind them. By grasping these core concepts, professionals in every organization are better equipped to know what kind of technology they need, ask the right questions of vendors, and better interface with their CISO and security organization. The book is largely directed at beginners, including non-technical professionals such as policy makers, compliance teams, and business executives.

What You Will Learn

• Authentication technologies, including secure password storage and how hackers “crack” password lists
• Access control technology, such as BLP, BIBA, and more recent models such as RBAC and ABAC
• Core cryptography technology, including AES encryption and public key signatures
• Classical host security technologies that protect against malware (viruses, trojans, ransomware)
• Classical network security technologies, such as border security (gateways, firewalls, proxies), network IDS and IPS, and modern deception systems
• Web security technologies, including cookies, state, and session defenses, and threats that try to subvert them
• Email and social media security threats such as spam, phishing, social media, and other email threats