book

Computer and Information Security Handbook, 2nd Edition

Name: Computer and Information Security Handbook, 2nd Edition
Author: John R. Vacca
ISBN: 9780123946126

by John R. Vacca

November 2012

Intermediate to advanced

1200 pages

78h 13m

English

Morgan Kaufmann

Read now

Unlock full access

Cover image
Title page
Table of Contents
Copyright
Dedication
Foreword
Preface
Organization of this BookSupplemental Materials
Acknowledgments
About the Editor
Contributors

Part I: Overview of System and Network Security: A Comprehensive Introduction
Chapter 1. Building a Secure Organization
1 Obstacles to Security2 Computers are Powerful and Complex3 Current Trend is to Share, Not Protect4 Security isn’t about Hardware and Software5 Ten Steps to Building a Secure Organization6 Preparing for the Building of Security Control Assessments7 SummaryChapter Review Questions/ExercisesExercise
Chapter 2. A Cryptography Primer
1 What is Cryptography? What is Encryption?2 Famous Cryptographic Devices3 Ciphers4 Modern Cryptography5 The Computer Age6 How AES Works7 Selecting Cryptography: the Process8 SummaryChapter Review Questions/ExercisesMultiple ChoiceExercise
Chapter 3. Detecting System Intrusions
1 Introduction2 Monitoring Key Files in the System3 Security Objectives4 0day Attacks5 Good Known State6 Rootkits7 Low Hanging Fruit8 Antivirus Software9 Homegrown Intrusion Detection10 Full-Packet Capture Devices11 Out-of-Band Attack Vectors12 Security Awareness Training13 Data Correlation14 SIEM15 Other Weird Stuff on the System16 Detection17 Network-Based Detection of System Intrusions (DSIs)18 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 4. Preventing System Intrusions
1 So, What is an Intrusion?2 Sobering Numbers3 Know Your Enemy: Hackers versus Crackers4 Motives5 The Crackers’ Tools of the Trade6 Bots7 Symptoms of Intrusions8 What Can You Do?9 Security Policies10 Risk Analysis11 Tools of Your Trade12 Controlling User Access13 Intrusion Prevention Capabilities14 SummaryChapter Review Questions/ExercisesExercise
Chapter 5. Guarding Against Network Intrusions
1 Traditional Reconnaissance and Attacks2 Malicious Software3 Defense in Depth4 Preventive Measures5 Intrusion Monitoring and Detection6 Reactive Measures7 Network-Based Intrusion Protection8 SummaryChapter Review Questions/ExercisesExercise
Chapter 6. Securing Cloud Computing Systems
1 Cloud Computing Essentials: Examining the Cloud Layers2 Software as a Service (SaaS): Managing Risks in the Cloud3 Platform as a Service (PaaS): Securing the Platform4 Infrastructure as a Service (IaaS)5 Leveraging Provider-Specific Security Options6 Achieving Security in a Private Cloud7 Meeting Compliance Requirements8 Preparing for Disaster Recovery9 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 7. Fault Tolerance and Resilience in Cloud Computing Environments
1 Introduction2 Cloud Computing Fault Model3 Basic Concepts on Fault Tolerance4 Different Levels of Fault Tolerance in Cloud Computing5 Fault Tolerance against Crash Failures in Cloud Computing6 Fault Tolerance against Byzantine Failures in Cloud Computing7 Fault Tolerance as a Service in Cloud Computing8 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
Chapter 8. Securing Web Applications, Services, and Servers
1 Setting the Stage2 Basic Security for HTTP Applications and Services3 Basic Security for SOAP Services4 Identity Management and Web Services5 Authorization Patterns6 Security Considerations7 Challenges8 SummaryChapter Review Questions/ExercisesExercise
Chapter 9. Unix and Linux Security
1 Unix and Security2 Basic Unix Security Overview3 Achieving Unix Security4 Protecting User Accounts and Strengthening Authentication5 Limiting Superuser Privileges6 Securing Local and Network File Systems7 Network Configuration8 Improving the Security of Linux and Unix Systems9 Additional Resources10 SummaryChapter Review Questions/ExercisesExercise
Chapter 10. Eliminating the Security Weakness of Linux and Unix Operating Systems
1 Introduction to Linux and Unix2 Hardening Linux and Unix3 Proactive Defense for Linux and Unix4 SummaryChapter Review Questions/ExercisesExercise
Chapter 11. Internet Security
1 Internet Protocol Architecture2 An Internet Threat Model3 Defending against Attacks on the internet4 Internet Security Checklist5 SummaryChapter Review Questions/ExercisesExercise
Chapter 12. The Botnet Problem
1 Introduction2 Botnet Overview3 Typical Bot Life Cycle4 The Botnet Business Model5 Botnet Defense6 Botmaster Traceback7 Preventing Botnets8 SummaryChapter Review Questions/ExercisesExercise
Chapter 13. Intranet Security
1 Smartphones and Tablets in the Intranet2 Security Considerations3 Plugging the Gaps: NAC and Access Control4 Measuring Risk: Audits5 Guardian at the Gate: Authentication and Encryption6 Wireless Network Security7 Shielding the Wire: Network Protection8 Weakest Link in Security: User Training9 Documenting the Network: Change Management10 Rehearse the Inevitable: Disaster Recovery11 Controlling Hazards: Physical and Environmental Protection12 Know Your Users: Personnel Security13 Protecting Data Flow: Information and System Integrity14 Security Assessments15 Risk Assessments16 Intranet Security Implementation Process Checklist17 SummaryChapter Review Questions/ExercisesExercise
Chapter 14. Local Area Network Security
1 Identify Network Threats2 Establish Network Access Controls3 Risk Assessment4 Listing Network Resources5 Threats6 Security Policies7 The Incident-Handling Process8 Secure Design Through Network Access Controls9 IDS Defined10 NIDS: Scope and Limitations11 A Practical Illustration of NIDS12 Firewalls13 Dynamic NAT Configuration14 The Perimeter15 Access List Details16 Types of Firewalls17 Packet Filtering: IP Filtering Routers18 Application-Layer Firewalls: Proxy Servers19 Stateful Inspection Firewalls20 NIDS Complements Firewalls21 Monitor and Analyze System Activities22 Signature Analysis23 Statistical Analysis24 Signature Algorithms25 Local Area Network Security Countermeasures Implementation Checklist26 SummaryChapter Review Questions/ExercisesExercise
Chapter 15. Wireless Network Security
1 Cellular Networks2 Wireless Ad hoc Networks3 Security Protocols4 WEP5 Secure Routing6 ARAN7 SLSP8 Key Establishment9 ING10 Management Countermeasures11 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 16. Wireless Sensor Network Security
1 Introduction to the Wireless Sensor Network (WSN)2 Threats to Privacy3 Security Measures for WSN4 Secure Routing in WSN5 Routing Classifications in WSN6 WSN Security Framework and Standards7 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 17. Cellular Network Security
1 Introduction2 Overview of Cellular Networks3 The State of the Art of Cellular Network Security4 Cellular Network Attack Taxonomy5 Cellular Network Vulnerability Analysis6 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 18. RFID Security
1 RFID Introduction2 RFID Challenges3 RFID Protections4 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 19. Optical Network Security
1 Optical Networks2 Securing Optical Networks3 Identifying Vulnerabilities4 Corrective Actions5 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 20. Optical Wireless Security
1 Optical Wireless Systems Overview2 Deployment Architectures3 High Bandwidth4 Low Cost5 Implementation6 Surface Area7 SummaryChapter Review Questions/ExercisesExercise
Part II: Managing Information Security
Chapter 21. Information Security Essentials for IT Managers: Protecting Mission-Critical Systems
1 Information Security Essentials for it Managers, Overview2 Protecting Mission-Critical Systems3 Information Security from the Ground Up4 Security Monitoring and Effectiveness5 SummaryChapter Review Questions/ExercisesExercise
Chapter 22. Security Management Systems
1 Security Management System Standards2 Training Requirements3 Principles of Information Security4 Roles and Responsibilities of Personnel5 Security Policies6 Security Controls7 Network Access8 Risk Assessment9 Incident Response10 SummaryChapter Review Questions/ExercisesExercise
Chapter 23. Policy-driven System Management
1 Introduction2 Security and Policy-based Management3 Classification and Languages4 Controls for Enforcing Security Policies in Distributed Systems5 Products and Technologies6 Research Projects7 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
Chapter 24. Information Technology Security Management
1 Information Security Management Standards2 Other Organizations Involved in Standards3 Information Technology Security Aspects4 SummaryChapter Review Questions/ExercisesExercise
Chapter 25. Online Identity and User Management Services
1 Introduction2 Evolution of Identity Management Requirements3 The Requirements Fulfilled by Identity Management Technologies4 Identity Management 1.05 Social Login and User Management6 Identity 2.0 for Mobile Users7 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 26. Intrusion Prevention and Detection Systems
1 What is an ‘Intrusion’ Anyway?2 Physical Theft3 Abuse of Privileges (The Insider Threat)4 Unauthorized Access by Outsider5 Malware Infection6 The Role of the ‘0-Day’7 The Rogue’s Gallery: Attackers and Motives8 A Brief Introduction to TCP/IP9 The TCP/IP Data Architecture and Data Encapsulation10 Survey of Intrusion Detection and Prevention Technologies11 Anti-Malware Software12 Network-Based Intrusion Detection Systems13 Network-Based Intrusion Prevention Systems14 Host-Based Intrusion Prevention Systems15 Security Information Management Systems16 Network Session Analysis17 Digital Forensics18 System Integrity Validation19 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 27. TCP/IP Packet Analysis
1 The Internet Model2 SummaryChapter Review Questions/ExercisesExercise
Chapter 28. The Enemy (The Intruder’s Genesis)
1 Introduction2 Active Reconnaissance3 Enumeration4 Penetration and Gain Access5 Maintain Access6 Defend Network Against Unauthorized Access7 SummaryChapter Review Questions/ExercisesExercise
Chapter 29. Firewalls
1 Abstract2 Contents
Chapter e29. Firewalls
1 Introduction2 Network Firewalls3 Firewall Security Policies4 A Simple Mathematical Model for Policies, Rules, and Packets5 First-Match Firewall Policy Anomalies6 Policy Optimization7 Firewall Types8 Host and Network Firewalls9 Software and Hardware Firewall Implementations10 Choosing the Correct Firewall11 Firewall Placement and Network Topology12 Firewall Installation and Configuration13 Supporting Outgoing Services Through Firewall Configuration14 Secure External Services Provisioning15 Network Firewalls for Voice and Video Applications16 Firewalls and Important Administrative Service Protocols17 Internal IP Services Protection18 Firewall Remote Access Configuration19 Load Balancing and Firewall Arrays20 Highly Available Firewalls21 Firewall Management22 SummaryChapter Review Questions/ExercisesExercise
Chapter 30. Penetration Testing
1 Introduction2 What is Penetration Testing?3 How Does Penetration Testing Differ from an Actual “Hack?”4 Types of Penetration Testing5 Phases of Penetration Testing6 Defining What’s Expected7 The Need for a Methodology8 Penetration Testing Methodologies9 Methodology in Action10 Penetration Testing Risks11 Liability Issues12 Legal Consequences13 “Get Out of Jail Free” Card14 Penetration Testing Consultants15 Required Skill Sets16 Accomplishments17 Hiring a Penetration Tester18 Why Should a Company Hire You?19 SummaryChapter Review Questions/ExercisesExercise
Chapter 31. What is Vulnerability Assessment?
1 Introduction2 Reporting3 The “it Won’t Happen to US” Factor4 Why Vulnerability Assessment?5 Penetration Testing Versus Vulnerability Assessment6 Vulnerability Assessment Goal7 Mapping the Network8 Selecting the Right Scanners9 Central Scans Versus Local Scans10 Defense in Depth Strategy11 Vulnerability Assessment Tools12 SARA13 SAINT14 MBSA15 Scanner Performance16 Scan Verification17 Scanning Cornerstones18 Network Scanning Countermeasures19 Vulnerability Disclosure Date20 Proactive Security Versus Reactive Security21 Vulnerability Causes22 Diy Vulnerability Assessment23 SummaryChapter Review Questions/ExercisesExercise
Chapter 32. Security Metrics: An Introduction and Literature Review
1 Introduction2 Why Security Metrics?3 The Nature of Security Metrics4 Getting Started with Security Metrics5 Metrics in Action—Towards an Intelligent Security Dashboard6 Security Metrics in the Literature7 SummaryChapter Review Questions/ExercisesExerciseReferences
Part III: Cyber, Network, and Systems Forensics Security and Assurance
Chapter 33. Cyber Forensics
1 What is Cyber Forensics?2 Analysis of Data3 Cyber Forensics in the Court System4 Understanding Internet History5 Temporary Restraining Orders and Labor Disputes6 First Principles7 Hacking a Windows XP Password8 Network Analysis9 Cyber Forensics Applied10 Tracking, Inventory, Location of Files, Paperwork, Backups, and so on11 Testifying as an Expert12 Beginning to End in Court13 SummaryChapter Review Questions/ExercisesExercise
Chapter 34. Cyber Forensics and Incident Response
1 Introduction to Cyber Forensics2 Handling Preliminary Investigations3 Controlling an Investigation4 Conducting Disk-Based Analysis5 Investigating Information-Hiding Techniques6 Scrutinizing Email7 Validating Email Header Information8 Tracing Internet Access9 Searching Memory in Real Time10 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 35. Securing e-Discovery
1 Information Management2 Legal and Regulatory Obligation3 SummaryChapter Review Questions/ExercisesExercise
Chapter 36. Network Forensics
1 Scientific Overview2 The Principles of Network Forensics3 Attack Traceback and Attribution4 Critical Needs Analysis5 Research Directions6 SummaryChapter Review Questions/ExercisesExercise
Part IV: Encryption Technology
Chapter 37. Data Encryption
1 Need for Cryptography2 Mathematical Prelude to Cryptography3 Classical Cryptography4 Modern Symmetric Ciphers5 Algebraic Structure6 The Internal Functions of Rijndael in AES Implementation7 Use of Modern Block Ciphers8 Public-Key Cryptography9 Cryptanalysis of RSA10 Diffie-Hellman Algorithm11 Elliptic Curve Cryptosystems12 Message Integrity and Authentication13 Triple Data Encryption Algorithm (TDEA) Block Cipher14 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 38. Satellite Encryption
1 Introduction2 The Need for Satellite Encryption3 Implementing Satellite Encryption4 Pirate Decryption of Satellite Transmissions5 Satellite Encryption Policy6 Satellite Encryption Service7 The Future of Satellite Encryption8 SummaryChapter Review Questions/ExercisesExercise
Chapter 39. Public Key Infrastructure
1 Abstract2 Contents
Chapter 39. Public Key Infrastructure
1 Cryptographic Background2 Overview of PKI3 The X.509 Model4 X.509 Implementation Architectures5 X.509 Certificate Validation6 X.509 Certificate Revocation7 Server-Based Certificate Validity Protocol8 X.509 Bridge Certification Systems9 X.509 Certificate Format10 PKI Policy Description11 PKI Standards Organizations12 PGP Certificate Formats13 PGP PKI Implementations14 W3C15 Is PKI Secure?16 Alternative PKI Architectures17 Modified X.509 Architectures18 Alternative Key Management Models19 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 40. Password-based Authenticated Key Establishment Protocols
1 Introduction to Key Exchange2 Password-Authenticated Key Exchange3 Concrete Protocols4 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 41. Instant-Messaging Security
1 Why Should I Care about Instant Messaging?2 What is Instant Messaging?3 The Evolution of Networking Technologies4 Game Theory and Instant Messaging5 The Nature of the Threat6 Common IM Applications7 Defensive Strategies8 Instant-Messaging Security Maturity and Solutions9 Processes10 SummaryChapter Review Questions/ExercisesExercise
Part V: Privacy and Access Management
Chapter 42. Privacy on the Internet
1 Privacy in the Digital Society2 The Economics of Privacy3 Privacy-Enhancing Technologies4 Network Anonymity5 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 43. Privacy-Enhancing Technologies
1 The Concept of Privacy2 Legal Privacy Principles3 Classification of PETs4 Traditional Privacy Goals of PETs5 Privacy Metrics6 Data Minimization Technologies7 Transparency-Enhancing Tools8 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 44. Personal Privacy Policies
1 Introduction2 Content of Personal Privacy Policies3 Semiautomated Derivation of Personal Privacy Policies4 Specifying Well-Formed Personal Privacy Policies5 Preventing Unexpected Negative Outcomes6 The Privacy Management Model7 Discussion and Related Work8 SummaryChapter Review Questions/ExercisesExercise
Chapter 45. Detection of Conflicts in Security Policies
1 Introduction2 Conflicts in Security Policies3 Conflicts in Executable Security Policies4 Conflicts in Network Security Policies5 Query-Based Conflict Detection6 Semantic Web Technology for Conflict Detection7 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
Chapter 46. Supporting User Privacy Preferences in Digital Interactions
1 Introduction2 Basic Concepts and Desiderata3 Cost-Sensitive Trust Negotiation4 Point-Based Trust Management5 Logical-Based Minimal Credential Disclosure6 Privacy Preferences in Credential-Based Interactions7 Fine-Grained Disclosure of Sensitive Access Policies8 Open Issues9 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
Chapter 47. Privacy and Security in Environmental Monitoring Systems: Issues and Solutions
1 Introduction2 System Architectures3 Environmental Data4 Security and Privacy Issues in Environmental Monitoring5 Countermeasures6 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
Chapter 48. Virtual Private Networks
1 History2 Who is in Charge?3 VPN Types4 Authentication Methods5 Symmetric Encryption6 Asymmetric Cryptography7 Edge Devices8 Passwords9 Hackers and Crackers10 Mobile VPN11 VPN Deployments12 SummaryChapter Review Questions/ExercisesExerciseResources
Chapter 49. Identity Theft
1 Abstract2 Contents
Chapter e49. Identity Theft
1 Experimental Design2 Results and Analysis3 Implications for CrimewareSummaryChapter Review Questions/ExercisesExercise
Chapter 50. VoIP Security
1 Introduction2 Overview of Threats3 Security in VoIP4 Future Trends5 SummaryChapter Review Questions/ExercisesExercise
Part VI: Storage Security
Chapter 51. SAN Security
1 Abstract2 Contents
Chapter e51. SAN Security
1 Organizational Structure2 Access Control Lists (ACl) and policies3 Physical Access4 Change Management5 Password Policies6 Defense in Depth7 Vendor Security Review8 Data Classification9 Security Management10 Auditing11 Security Maintenance12 Host Access: Partitioning13 Data Protection: Replicas14 Encryption in Storage15 Application of Encryption16 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 52. Storage Area Networking Security Devices
1 What is a San?2 San Deployment Justifications3 The Critical Reasons for San Security4 San Architecture and Components5 San General Threats and Issues6 SummaryChapter Review Questions/ExercisesExercise
Chapter 53. Risk Management
1 The Concept of Risk2 Expressing and Measuring Risk3 The Risk Management Methodology4 Risk Management Laws and Regulations5 Risk Management Standards6 SummaryChapter Review Questions/ExercisesExercise
Part VII: Physical Security
Chapter 54. Physical Security Essentials
1 Overview2 Physical Security Threats3 Physical Security Prevention and Mitigation Measures4 Recovery from Physical Security Breaches5 Threat Assessment, Planning, and Plan Implementation6 Example: A Corporate Physical Security Policy7 Integration of Physical and Logical Security8 Physical Security Checklist9 SummaryChapter Review Questions/ExercisesExercise
Chapter 55. Disaster Recovery
1 Introduction2 Measuring Risk and Avoiding Disaster3 The Business Impact Assessment (BIA)4 SummaryChapter Review Questions/ExercisesExercise
Chapter 56. Biometrics
1 Relevant Standards2 Biometric System Architecture3 Using Biometric Systems4 Security Considerations5 SummaryChapter Review Questions/ExercisesExercise
Chapter 57. Homeland Security
1 Abstract2 Contents
Chapter e57. Homeland Security
1 Statutory Authorities2 Homeland Security Presidential Directives3 Organizational Actions4 SummaryChapter Review Questions/ExercisesExercise
Chapter 58. Cyber Warfare
1 Cyber Warfare Model2 Cyber Warfare Defined3 CW: Myth or Reality?4 Cyber Warfare: Making CW Possible5 Legal Aspects of CW6 Holistic View of Cyber Warfare7 SummaryChapter Review Questions/ExercisesExercise
Part VIII: Practical Security
Chapter 59. System Security
1 Foundations of Security2 Basic Countermeasures3 SummaryChapter Review Questions/ExercisesExercise
Chapter 60. Securing the Infrastructure
1 Communication Security Goals2 Attacks and Countermeasures3 SummaryChapter Review Questions/ExercisesExercise
Chapter 61. Access Controls
1 Infrastructure Weaknesses: DAC, MAC, and RBAC2 Strengthening the Infrastructure: Authentication Systems3 SummaryChapter Review Questions/ExercisesExercise
Chapter 62. Assessments and Audits
1 Assessing Vulnerabilities and Risk: Penetration Testing and Vulnerability Assessments2 Risk Management: Quantitative Risk Measurements3 SummaryChapter Review Questions/ExercisesExercise
Chapter 63. Fundamentals of Cryptography
1 Assuring Privacy with Encryption2 SummaryChapter Review Questions/ExercisesExercise
Part IX: Advanced Security
Chapter 64. Security Through Diversity
1 Ubiquity2 Example Attacks Against Uniformity3 Attacking Ubiquity with Antivirus Tools4 The Threat of Worms5 Automated Network Defense6 Diversity and the Browser7 Sandboxing and Virtualization8 DNS Example of Diversity Through Security9 Recovery from Disaster is Survival10 SummaryChapter Review Questions/ExercisesExercise
Chapter 65. Online e-Reputation Management Services
1 Introduction2 The Human Notion of Reputation3 Reputation Applied to the Computing World4 State of the Art of Attack—Resistant Reputation Computation5 Overview of Current Online Reputation Service6 SummaryChapter Review Questions/ExercisesExerciseBibliography
Chapter 66. Content Filtering
1 Abstract2 Contents
Chapter e66. Content Filtering
1 Defining the Problem2 Why Content Filtering is Important3 Content Categorization Technologies4 Perimeter Hardware and Software Solutions5 Categories6 Legal Issues7 Circumventing Content Filtering8 Additional Items to Consider: Overblocking and Underblocking9 Related Products10 SummaryChapter Review Questions/ExercisesExercise
Chapter 67. Data Loss Protection
1 Precursors of DLP2 What is DLP?3 Where to Begin?4 Data is Like Water5 You Don’t Know What You Don’t Know6 How Do DLP Applications Work?7 Eat Your Vegetables8 IT’s a Family Affair, not Just it Security’s Problem9 Vendors, Vendors Everywhere! Who do you Believe?10 SummaryChapter Review Questions/ExercisesExercise
Chapter 68. Satellite Cyber Attack Search and Destroy
1 Hacks, Interference, and Jamming2 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 69. Verifiable Voting Systems
1 Introduction2 Security Requirements3 Verifiable Voting Schemes4 Building Blocks5 Survey of Noteworthy Schemes6 Threats to Verifiable Voting Systems7 SummaryChapter Review Questions/ExercisesExerciseReferences
Chapter 70. Advanced Data Encryption
1 Mathematical Concepts Reviewed2 The RSA Cryptosystem3 SummaryChapter Review Questions/ExercisesExerciseReferences
Part X: Appendices
Appendix eA. Configuring Authentication Service on Microsoft Windows 7
1 Configuring Windows 7 Authentication (Web Server (IIS 7))2 Configuring Authentication in IIS 7References
Appendix eB. Security Management and Resiliency
Appendix eC. List of Top Information and Network Security Implementation and Deployment Companies
1 List of San Implementation and Deployment Companies2 San Security Implementation and Deployment Companies:3 Internet Security Implementation and Deployment Companies:
Appendix eD. List of Security Products
1 Security Software2 Realtime Protection
Appendix eE. List of Security Standards
Appendix eF. List of Miscellaneous Security Resources
1 Conferences2 Consumer Information3 Directories4 Help and Tutorials5 Mailing Lists6 News and Media7 Organizations8 Products and Tools9 Research10 Content Filtering Links11 Other Logging Resources12 Additional Miscellaneous Security Resources
Appendix eG. Ensuring Built-in Frequency Hopping Spread Spectrum Wireless Network Security
1 Accomplishment2 Background3 Additional Information
Appendix eH. Configuring Wireless Internet Security Remote Access
Adding the Access Points as Radius Clients to IASAdding Access Points to the First IAS ServerScripting the Addition of Access Points to IAS Server (Alternative Procedure)Configuring the Wireless Access PointsEnabling Secure Wlan Authentication on Access PointsAdditional Settings to Secure Wireless Access PointsReplicating Radius Client Configuration to Other IAS Servers
Appendix eI. Frequently Asked Questions
Appendix eJ. Case Studies
1 Case Study 1: SSL VPN Solution Planning And Implementation2 Challenges3 Solution4 Case Study 2: Cyber Attacks on Critical Infrastructures—A Risk to the Nation5 Challenges6 Solution7 Case Study 3: Department of Homeland Security Battle Insider Threats and Maintain National Cyber Security8 Challenges9 Solution10 Case Study 4: Cyber Security Development Lifecycle11 Challenges12 Solution13 Case Study 5: Cyber Security and Beyond ……14 Challenges
Appendix eK. Answers To Review Questions/Exercises, Hands-On Projects, Case Projects And Optional Team Case Project By Chapter
Chapter 1: Building A Secure OrganizationChapter 2: A Cryptography PrimerChapter 3: Detecting System IntrusionsChapter 4: Preventing System IntrusionsChapter 5: Guarding Against Network IntrusionsChapter 6: Securing Cloud Computing SystemsChapter 7: Fault Tolerance and Resilience in Cloud Computing EnvironmentsChapter 8: Securing Web Applications, Services and ServersChapter 9: UNIX and Linux SecurityChapter 10: Eliminating the Security Weakness of Linux and UNIX Operating SystemsChapter 11: Internet SecurityChapter 12: The Botnet ProblemChapter 13: Intranet SecurityChapter 14: Local Area Network SecurityChapter 15: Wireless Network SecurityChapter 16: Wireless Sensor Network SecurityChapter 17: Cellular Network SecurityChapter 18: RFID SecurityChapter 19: Optical Network SecurityChapter 20: Optical Wireless SecurityChapter 21: Information Security Essentials for IT Managers: Protecting Mission-Critical SystemsChapter 22: Security Management SystemsChapter 23: Policy-Driven System ManagementChapter 24: Information Technology Security ManagementChapter 25: Online Identity and User Management ServicesChapter 26: Intrusion Detection And Prevention SystemsChapter 27: TCP/IP Packet AnalysisChapter 28: The Enemy (The Intruder’s Genesis)Chapter 29: FirewallsChapter 30: Penetration TestingChapter 31: Building A Secure OrganizationChapter 32: Security Metrics: An Introduction and Literature ReviewChapter 33: Cyber ForensicsChapter 34: Cyber Forensics And Incident ResponseChapter 35: Secure E-Discovery
Chapter 36: Network Forensics
Chapter 37: Data EncryptionChapter 38: Satellite EncryptionChapter 39: Public Key InfrastructureChapter 40: Password-based Authenticated Key Establishment ProtocolsChapter 41: Instant-Messaging SecurityChapter 42: Privacy On The InternetChapter 43: Physical Security EssentialsChapter 44: Personal Privacy PoliciesChapter 45: Detection Of Conflicts In Security PoliciesChapter 46: Supporting User Privacy Preferences in Digital InteractionsChapter 47: Physical Security EssentialsChapter 48: Virtual Private NetworksChapter 49: Identity TheftChapter 50: Physical Security EssentialsChapter 51: SAN SecurityChapter 52: Storage Area Networking Security DevicesChapter 53: Risk ManagementChapter 54: Physical Security EssentialsChapter 55: Disaster RecoveryChapter 56: BiometricsChapter 57: Homeland SecurityChapter 58: Cyber WarefareChapter 59: Systems SecurityChapter 60: Securing The InfrastructureChapter 61: Access ControlsChapter 62: Assessments And AuditsChapter 63: Fundamentals Of CryptographyChapter 64: Security Through DiversityChapter 65: Online e-Reputation Management ServicesChapter 66: Content FilteringChapter 67: Data Loss ProtectionChapter 68: Satellite Cyber Attack Search And DestroyChapter 69: Verifiable Voting SystemsChapter 70: Advanced Data Encryption
Appendix eL. Glossary
Index

Content preview from Computer and Information Security Handbook, 2nd Edition

Chapter 3

Detecting System Intrusions

Almantas Kakareka, CISSP, GSNA, GSEC, CEH, Demyo, Inc.

1 Introduction

First things first: Detecting system intrusion is not the same as Intrusion Detection System/Intrusion Prevention System (IDS/IPS). We want to detect system intrusion once attackers pass all defensive technologies in the company (such as IDS/IPS mentioned above), full-packet capture devices with analysts behind them, firewalls, physical security guards, and all other preventive technologies and techniques. Many preventative technologies are using blacklisting [1] most of the time, and thus that’s why they fail. Blacklisting is allowing everything by default and forbidding something that is considered to be malicious. So, for the attacker, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Computer and Information Security Handbook, 3rd Edition

Publisher Resources

ISBN: 9780123943972

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Computer and Information Security Handbook, 2nd Edition

by John R. Vacca

Detecting System Intrusions

1 Introduction

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.