Computer Security Handbook, 6th Edition

Computer security touches every part of our daily lives from our computers and connected devices to the wireless signals around us. Breaches have real and immediate financial, privacy, and safety consequences. This handbook has compiled advice from top professionals working in the real world about how to minimize the possibility of computer security breaches in your systems. Written for professionals and college students, it provides comprehensive best guidance about how to minimize hacking, fraud, human error, the effects of natural disasters, and more. This essential and highly-regarded reference maintains timeless lessons and is fully revised and updated with current information on security issues for social networks, cloud computing, virtualization, and more.

Table of Contents

Computer Security Handbook (Volume 1)

Part I: Foundations Of Computer Security
Chapter 1 Brief History And Mission Of Information System Security
Chapter 2 History Of Computer Crime
Chapter 3 Toward A New Framework For Information Security
Chapter 4 Hardware Elements Of Security
Chapter 5 Data Communications And Information Security
Chapter 6 Local Area Network Topologies, Protocols, And Design
Chapter 7 Encryption
Chapter 8 Using A Common Language For Computer Security Incident Information
Chapter 9 Mathematical Models Of Computer Security
Chapter 10 Understanding Studies And Surveys Of Computer Crime
Chapter 11 Fundamentals Of Intellectual Property Law

Part II: Threats And Vulnerabilities
Chapter 12 The Psychology Of Computer Criminals
Chapter 13 The Insider Threat
Chapter 14 Information Warfare
Chapter 15 Penetrating Computer Systems And Networks
Chapter 16 Malicious Code
Chapter 17 Mobile Code
Chapter 18 Denial-Of-Service Attacks
Chapter 19 Social-Engineering And Low-Tech Attacks
Chapter 20 Spam, Phishing, And Trojans: Attacks Meant To Fool
Chapter 21 Web-Based Vulnerabilities
Chapter 22 Physical Threats To The Information Infrastructure

Part III: Prevention: Technical Defenses
Chapter 23 Protecting The Physical Information Infrastructure
Chapter 24 Operating System Security
Chapter 25 Local Area Networks
Chapter 26 Gateway Security Devices
Chapter 27 Intrusion Detection And Intrusion Prevention Devices
Chapter 28 Identification And Authentication
Chapter 29 Biometric Authentication
Chapter 30 E-Commerce And Web Server Safeguards
Chapter 31 Web Monitoring And Content Filtering
Chapter 32 Virtual Private Networks And Secure Remote Access
Chapter 33 802.11 Wireless Lan Security
Chapter 34 Securing Voip
Chapter 35 Securing P2P, Im, Sms, And Collaboration Tools
Chapter 36 Securing Stored Data
Chapter 37 Pki And Certificate Authorities
Chapter 38 Writing Secure Code
Chapter 39 Software Development And Quality Assurance
Chapter 40 Managing Software Patches And Vulnerabilities
Chapter 41 Antivirus Technology
Chapter 42 Protecting Digital Rights: Technical Approaches

Computer Security Handbook (Volume 2)

Part IV: Prevention: Human Factors
Chapter 43 Ethical Decision Making And High Technology
Chapter 44 Security Policy Guidelines
Chapter 45 Employment Practices And Policies
Chapter 46 Vulnerability Assessment
Chapter 47 Operations Security And Production Controls
Chapter 48 Email And Internet Use Policies
Chapter 49 Implementing A Security-Awareness Program
Chapter 50 Using Social Psychology To Implement Security Policies
Chapter 51 Security Standards For Products

Part V: Detecting Security Breaches
Chapter 52 Application Controls
Chapter 53 Monitoring And Control Systems
Chapter 54 Security Audits
Chapter 55 Cyber Investigation

Part VI: Response And Remediation
Chapter 56 Computer Security Incident Response Teams
Chapter 57 Data Backups And Archives
Chapter 58 Business Continuity Planning
Chapter 59 Disaster Recovery
Chapter 60 Insurance Relief
Chapter 61 Working With Law Enforcement

Part VII: Management’S Role In Security
Chapter 62 Quantitative Risk Assessment And Risk Management
Chapter 63 Management Responsibilities And Liabilities
Chapter 64 U.S. Legal And Regulatory Security Issues
Chapter 65 The Role Of The Ciso
Chapter 66 Developing Security Policies
Chapter 67 Developing Classification Policies For Data
Chapter 68 Outsourcing And Security

Part VIII: Public Policy And Other Considerations
Chapter 69 Privacy In Cyberspace: U.S. And European Perspectives
Chapter 70 Anonymity And Identity In Cyberspace
Chapter 71 Healthcare Security And Privacy
Chapter 72 Legal And Policy Issues Of Censorship And Content Filtering
Chapter 73 Expert Witnesses And The Daubert Challenge
Chapter 74 Professional Certification And Training In Information Assurance
Chapter 75 The Future Of Information Assurance