book

Computer and Information Security Handbook, 2nd Edition

by John R. Vacca

November 2012

Intermediate to advanced

1200 pages

78h 13m

English

Morgan Kaufmann

Read now

Unlock full access

Organization of this BookSupplemental Materials

1 Obstacles to Security2 Computers are Powerful and Complex3 Current Trend is to Share, Not Protect4 Security isn’t about Hardware and Software5 Ten Steps to Building a Secure Organization6 Preparing for the Building of Security Control Assessments7 SummaryChapter Review Questions/ExercisesExercise
1 What is Cryptography? What is Encryption?2 Famous Cryptographic Devices3 Ciphers4 Modern Cryptography5 The Computer Age6 How AES Works7 Selecting Cryptography: the Process8 SummaryChapter Review Questions/ExercisesMultiple ChoiceExercise
1 Introduction2 Monitoring Key Files in the System3 Security Objectives4 0day Attacks5 Good Known State6 Rootkits7 Low Hanging Fruit8 Antivirus Software9 Homegrown Intrusion Detection10 Full-Packet Capture Devices11 Out-of-Band Attack Vectors12 Security Awareness Training13 Data Correlation14 SIEM15 Other Weird Stuff on the System16 Detection17 Network-Based Detection of System Intrusions (DSIs)18 SummaryChapter Review Questions/ExercisesExerciseReferences
1 So, What is an Intrusion?2 Sobering Numbers3 Know Your Enemy: Hackers versus Crackers4 Motives5 The Crackers’ Tools of the Trade6 Bots7 Symptoms of Intrusions8 What Can You Do?9 Security Policies10 Risk Analysis11 Tools of Your Trade12 Controlling User Access13 Intrusion Prevention Capabilities14 SummaryChapter Review Questions/ExercisesExercise
1 Traditional Reconnaissance and Attacks2 Malicious Software3 Defense in Depth4 Preventive Measures5 Intrusion Monitoring and Detection6 Reactive Measures7 Network-Based Intrusion Protection8 SummaryChapter Review Questions/ExercisesExercise
1 Cloud Computing Essentials: Examining the Cloud Layers2 Software as a Service (SaaS): Managing Risks in the Cloud3 Platform as a Service (PaaS): Securing the Platform4 Infrastructure as a Service (IaaS)5 Leveraging Provider-Specific Security Options6 Achieving Security in a Private Cloud7 Meeting Compliance Requirements8 Preparing for Disaster Recovery9 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Introduction2 Cloud Computing Fault Model3 Basic Concepts on Fault Tolerance4 Different Levels of Fault Tolerance in Cloud Computing5 Fault Tolerance against Crash Failures in Cloud Computing6 Fault Tolerance against Byzantine Failures in Cloud Computing7 Fault Tolerance as a Service in Cloud Computing8 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
1 Setting the Stage2 Basic Security for HTTP Applications and Services3 Basic Security for SOAP Services4 Identity Management and Web Services5 Authorization Patterns6 Security Considerations7 Challenges8 SummaryChapter Review Questions/ExercisesExercise
1 Unix and Security2 Basic Unix Security Overview3 Achieving Unix Security4 Protecting User Accounts and Strengthening Authentication5 Limiting Superuser Privileges6 Securing Local and Network File Systems7 Network Configuration8 Improving the Security of Linux and Unix Systems9 Additional Resources10 SummaryChapter Review Questions/ExercisesExercise
1 Introduction to Linux and Unix2 Hardening Linux and Unix3 Proactive Defense for Linux and Unix4 SummaryChapter Review Questions/ExercisesExercise
1 Internet Protocol Architecture2 An Internet Threat Model3 Defending against Attacks on the internet4 Internet Security Checklist5 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Botnet Overview3 Typical Bot Life Cycle4 The Botnet Business Model5 Botnet Defense6 Botmaster Traceback7 Preventing Botnets8 SummaryChapter Review Questions/ExercisesExercise
1 Smartphones and Tablets in the Intranet2 Security Considerations3 Plugging the Gaps: NAC and Access Control4 Measuring Risk: Audits5 Guardian at the Gate: Authentication and Encryption6 Wireless Network Security7 Shielding the Wire: Network Protection8 Weakest Link in Security: User Training9 Documenting the Network: Change Management10 Rehearse the Inevitable: Disaster Recovery11 Controlling Hazards: Physical and Environmental Protection12 Know Your Users: Personnel Security13 Protecting Data Flow: Information and System Integrity14 Security Assessments15 Risk Assessments16 Intranet Security Implementation Process Checklist17 SummaryChapter Review Questions/ExercisesExercise
1 Identify Network Threats2 Establish Network Access Controls3 Risk Assessment4 Listing Network Resources5 Threats6 Security Policies7 The Incident-Handling Process8 Secure Design Through Network Access Controls9 IDS Defined10 NIDS: Scope and Limitations11 A Practical Illustration of NIDS12 Firewalls13 Dynamic NAT Configuration14 The Perimeter15 Access List Details16 Types of Firewalls17 Packet Filtering: IP Filtering Routers18 Application-Layer Firewalls: Proxy Servers19 Stateful Inspection Firewalls20 NIDS Complements Firewalls21 Monitor and Analyze System Activities22 Signature Analysis23 Statistical Analysis24 Signature Algorithms25 Local Area Network Security Countermeasures Implementation Checklist26 SummaryChapter Review Questions/ExercisesExercise
1 Cellular Networks2 Wireless Ad hoc Networks3 Security Protocols4 WEP5 Secure Routing6 ARAN7 SLSP8 Key Establishment9 ING10 Management Countermeasures11 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Introduction to the Wireless Sensor Network (WSN)2 Threats to Privacy3 Security Measures for WSN4 Secure Routing in WSN5 Routing Classifications in WSN6 WSN Security Framework and Standards7 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Introduction2 Overview of Cellular Networks3 The State of the Art of Cellular Network Security4 Cellular Network Attack Taxonomy5 Cellular Network Vulnerability Analysis6 SummaryChapter Review Questions/ExercisesExerciseReferences
1 RFID Introduction2 RFID Challenges3 RFID Protections4 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Optical Networks2 Securing Optical Networks3 Identifying Vulnerabilities4 Corrective Actions5 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Optical Wireless Systems Overview2 Deployment Architectures3 High Bandwidth4 Low Cost5 Implementation6 Surface Area7 SummaryChapter Review Questions/ExercisesExercise
1 Information Security Essentials for it Managers, Overview2 Protecting Mission-Critical Systems3 Information Security from the Ground Up4 Security Monitoring and Effectiveness5 SummaryChapter Review Questions/ExercisesExercise
1 Security Management System Standards2 Training Requirements3 Principles of Information Security4 Roles and Responsibilities of Personnel5 Security Policies6 Security Controls7 Network Access8 Risk Assessment9 Incident Response10 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Security and Policy-based Management3 Classification and Languages4 Controls for Enforcing Security Policies in Distributed Systems5 Products and Technologies6 Research Projects7 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
1 Information Security Management Standards2 Other Organizations Involved in Standards3 Information Technology Security Aspects4 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Evolution of Identity Management Requirements3 The Requirements Fulfilled by Identity Management Technologies4 Identity Management 1.05 Social Login and User Management6 Identity 2.0 for Mobile Users7 SummaryChapter Review Questions/ExercisesExerciseReferences
1 What is an ‘Intrusion’ Anyway?2 Physical Theft3 Abuse of Privileges (The Insider Threat)4 Unauthorized Access by Outsider5 Malware Infection6 The Role of the ‘0-Day’7 The Rogue’s Gallery: Attackers and Motives8 A Brief Introduction to TCP/IP9 The TCP/IP Data Architecture and Data Encapsulation10 Survey of Intrusion Detection and Prevention Technologies11 Anti-Malware Software12 Network-Based Intrusion Detection Systems13 Network-Based Intrusion Prevention Systems14 Host-Based Intrusion Prevention Systems15 Security Information Management Systems16 Network Session Analysis17 Digital Forensics18 System Integrity Validation19 SummaryChapter Review Questions/ExercisesExerciseReferences
1 The Internet Model2 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Active Reconnaissance3 Enumeration4 Penetration and Gain Access5 Maintain Access6 Defend Network Against Unauthorized Access7 SummaryChapter Review Questions/ExercisesExercise
1 Abstract2 Contents
1 Introduction2 Network Firewalls3 Firewall Security Policies4 A Simple Mathematical Model for Policies, Rules, and Packets5 First-Match Firewall Policy Anomalies6 Policy Optimization7 Firewall Types8 Host and Network Firewalls9 Software and Hardware Firewall Implementations10 Choosing the Correct Firewall11 Firewall Placement and Network Topology12 Firewall Installation and Configuration13 Supporting Outgoing Services Through Firewall Configuration14 Secure External Services Provisioning15 Network Firewalls for Voice and Video Applications16 Firewalls and Important Administrative Service Protocols17 Internal IP Services Protection18 Firewall Remote Access Configuration19 Load Balancing and Firewall Arrays20 Highly Available Firewalls21 Firewall Management22 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 What is Penetration Testing?3 How Does Penetration Testing Differ from an Actual “Hack?”4 Types of Penetration Testing5 Phases of Penetration Testing6 Defining What’s Expected7 The Need for a Methodology8 Penetration Testing Methodologies9 Methodology in Action10 Penetration Testing Risks11 Liability Issues12 Legal Consequences13 “Get Out of Jail Free” Card14 Penetration Testing Consultants15 Required Skill Sets16 Accomplishments17 Hiring a Penetration Tester18 Why Should a Company Hire You?19 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Reporting3 The “it Won’t Happen to US” Factor4 Why Vulnerability Assessment?5 Penetration Testing Versus Vulnerability Assessment6 Vulnerability Assessment Goal7 Mapping the Network8 Selecting the Right Scanners9 Central Scans Versus Local Scans10 Defense in Depth Strategy11 Vulnerability Assessment Tools12 SARA13 SAINT14 MBSA15 Scanner Performance16 Scan Verification17 Scanning Cornerstones18 Network Scanning Countermeasures19 Vulnerability Disclosure Date20 Proactive Security Versus Reactive Security21 Vulnerability Causes22 Diy Vulnerability Assessment23 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Why Security Metrics?3 The Nature of Security Metrics4 Getting Started with Security Metrics5 Metrics in Action—Towards an Intelligent Security Dashboard6 Security Metrics in the Literature7 SummaryChapter Review Questions/ExercisesExerciseReferences
1 What is Cyber Forensics?2 Analysis of Data3 Cyber Forensics in the Court System4 Understanding Internet History5 Temporary Restraining Orders and Labor Disputes6 First Principles7 Hacking a Windows XP Password8 Network Analysis9 Cyber Forensics Applied10 Tracking, Inventory, Location of Files, Paperwork, Backups, and so on11 Testifying as an Expert12 Beginning to End in Court13 SummaryChapter Review Questions/ExercisesExercise
1 Introduction to Cyber Forensics2 Handling Preliminary Investigations3 Controlling an Investigation4 Conducting Disk-Based Analysis5 Investigating Information-Hiding Techniques6 Scrutinizing Email7 Validating Email Header Information8 Tracing Internet Access9 Searching Memory in Real Time10 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Information Management2 Legal and Regulatory Obligation3 SummaryChapter Review Questions/ExercisesExercise
1 Scientific Overview2 The Principles of Network Forensics3 Attack Traceback and Attribution4 Critical Needs Analysis5 Research Directions6 SummaryChapter Review Questions/ExercisesExercise
1 Need for Cryptography2 Mathematical Prelude to Cryptography3 Classical Cryptography4 Modern Symmetric Ciphers5 Algebraic Structure6 The Internal Functions of Rijndael in AES Implementation7 Use of Modern Block Ciphers8 Public-Key Cryptography9 Cryptanalysis of RSA10 Diffie-Hellman Algorithm11 Elliptic Curve Cryptosystems12 Message Integrity and Authentication13 Triple Data Encryption Algorithm (TDEA) Block Cipher14 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Introduction2 The Need for Satellite Encryption3 Implementing Satellite Encryption4 Pirate Decryption of Satellite Transmissions5 Satellite Encryption Policy6 Satellite Encryption Service7 The Future of Satellite Encryption8 SummaryChapter Review Questions/ExercisesExercise
1 Abstract2 Contents
1 Cryptographic Background2 Overview of PKI3 The X.509 Model4 X.509 Implementation Architectures5 X.509 Certificate Validation6 X.509 Certificate Revocation7 Server-Based Certificate Validity Protocol8 X.509 Bridge Certification Systems9 X.509 Certificate Format10 PKI Policy Description11 PKI Standards Organizations12 PGP Certificate Formats13 PGP PKI Implementations14 W3C15 Is PKI Secure?16 Alternative PKI Architectures17 Modified X.509 Architectures18 Alternative Key Management Models19 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Introduction to Key Exchange2 Password-Authenticated Key Exchange3 Concrete Protocols4 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Why Should I Care about Instant Messaging?2 What is Instant Messaging?3 The Evolution of Networking Technologies4 Game Theory and Instant Messaging5 The Nature of the Threat6 Common IM Applications7 Defensive Strategies8 Instant-Messaging Security Maturity and Solutions9 Processes10 SummaryChapter Review Questions/ExercisesExercise
1 Privacy in the Digital Society2 The Economics of Privacy3 Privacy-Enhancing Technologies4 Network Anonymity5 SummaryChapter Review Questions/ExercisesExerciseReferences
1 The Concept of Privacy2 Legal Privacy Principles3 Classification of PETs4 Traditional Privacy Goals of PETs5 Privacy Metrics6 Data Minimization Technologies7 Transparency-Enhancing Tools8 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Introduction2 Content of Personal Privacy Policies3 Semiautomated Derivation of Personal Privacy Policies4 Specifying Well-Formed Personal Privacy Policies5 Preventing Unexpected Negative Outcomes6 The Privacy Management Model7 Discussion and Related Work8 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Conflicts in Security Policies3 Conflicts in Executable Security Policies4 Conflicts in Network Security Policies5 Query-Based Conflict Detection6 Semantic Web Technology for Conflict Detection7 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
1 Introduction2 Basic Concepts and Desiderata3 Cost-Sensitive Trust Negotiation4 Point-Based Trust Management5 Logical-Based Minimal Credential Disclosure6 Privacy Preferences in Credential-Based Interactions7 Fine-Grained Disclosure of Sensitive Access Policies8 Open Issues9 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
1 Introduction2 System Architectures3 Environmental Data4 Security and Privacy Issues in Environmental Monitoring5 Countermeasures6 SummaryChapter Review Questions/ExercisesExerciseAcknowledgmentsReferences
1 History2 Who is in Charge?3 VPN Types4 Authentication Methods5 Symmetric Encryption6 Asymmetric Cryptography7 Edge Devices8 Passwords9 Hackers and Crackers10 Mobile VPN11 VPN Deployments12 SummaryChapter Review Questions/ExercisesExerciseResources
1 Abstract2 Contents
1 Experimental Design2 Results and Analysis3 Implications for CrimewareSummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Overview of Threats3 Security in VoIP4 Future Trends5 SummaryChapter Review Questions/ExercisesExercise
1 Abstract2 Contents
1 Organizational Structure2 Access Control Lists (ACl) and policies3 Physical Access4 Change Management5 Password Policies6 Defense in Depth7 Vendor Security Review8 Data Classification9 Security Management10 Auditing11 Security Maintenance12 Host Access: Partitioning13 Data Protection: Replicas14 Encryption in Storage15 Application of Encryption16 SummaryChapter Review Questions/ExercisesExerciseReferences
1 What is a San?2 San Deployment Justifications3 The Critical Reasons for San Security4 San Architecture and Components5 San General Threats and Issues6 SummaryChapter Review Questions/ExercisesExercise
1 The Concept of Risk2 Expressing and Measuring Risk3 The Risk Management Methodology4 Risk Management Laws and Regulations5 Risk Management Standards6 SummaryChapter Review Questions/ExercisesExercise
1 Overview2 Physical Security Threats3 Physical Security Prevention and Mitigation Measures4 Recovery from Physical Security Breaches5 Threat Assessment, Planning, and Plan Implementation6 Example: A Corporate Physical Security Policy7 Integration of Physical and Logical Security8 Physical Security Checklist9 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 Measuring Risk and Avoiding Disaster3 The Business Impact Assessment (BIA)4 SummaryChapter Review Questions/ExercisesExercise
1 Relevant Standards2 Biometric System Architecture3 Using Biometric Systems4 Security Considerations5 SummaryChapter Review Questions/ExercisesExercise
1 Abstract2 Contents
1 Statutory Authorities2 Homeland Security Presidential Directives3 Organizational Actions4 SummaryChapter Review Questions/ExercisesExercise
1 Cyber Warfare Model2 Cyber Warfare Defined3 CW: Myth or Reality?4 Cyber Warfare: Making CW Possible5 Legal Aspects of CW6 Holistic View of Cyber Warfare7 SummaryChapter Review Questions/ExercisesExercise
1 Foundations of Security2 Basic Countermeasures3 SummaryChapter Review Questions/ExercisesExercise
1 Communication Security Goals2 Attacks and Countermeasures3 SummaryChapter Review Questions/ExercisesExercise
1 Infrastructure Weaknesses: DAC, MAC, and RBAC2 Strengthening the Infrastructure: Authentication Systems3 SummaryChapter Review Questions/ExercisesExercise
1 Assessing Vulnerabilities and Risk: Penetration Testing and Vulnerability Assessments2 Risk Management: Quantitative Risk Measurements3 SummaryChapter Review Questions/ExercisesExercise
1 Assuring Privacy with Encryption2 SummaryChapter Review Questions/ExercisesExercise
1 Ubiquity2 Example Attacks Against Uniformity3 Attacking Ubiquity with Antivirus Tools4 The Threat of Worms5 Automated Network Defense6 Diversity and the Browser7 Sandboxing and Virtualization8 DNS Example of Diversity Through Security9 Recovery from Disaster is Survival10 SummaryChapter Review Questions/ExercisesExercise
1 Introduction2 The Human Notion of Reputation3 Reputation Applied to the Computing World4 State of the Art of Attack—Resistant Reputation Computation5 Overview of Current Online Reputation Service6 SummaryChapter Review Questions/ExercisesExerciseBibliography
1 Abstract2 Contents
1 Defining the Problem2 Why Content Filtering is Important3 Content Categorization Technologies4 Perimeter Hardware and Software Solutions5 Categories6 Legal Issues7 Circumventing Content Filtering8 Additional Items to Consider: Overblocking and Underblocking9 Related Products10 SummaryChapter Review Questions/ExercisesExercise
1 Precursors of DLP2 What is DLP?3 Where to Begin?4 Data is Like Water5 You Don’t Know What You Don’t Know6 How Do DLP Applications Work?7 Eat Your Vegetables8 IT’s a Family Affair, not Just it Security’s Problem9 Vendors, Vendors Everywhere! Who do you Believe?10 SummaryChapter Review Questions/ExercisesExercise
1 Hacks, Interference, and Jamming2 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Introduction2 Security Requirements3 Verifiable Voting Schemes4 Building Blocks5 Survey of Noteworthy Schemes6 Threats to Verifiable Voting Systems7 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Mathematical Concepts Reviewed2 The RSA Cryptosystem3 SummaryChapter Review Questions/ExercisesExerciseReferences
1 Configuring Windows 7 Authentication (Web Server (IIS 7))2 Configuring Authentication in IIS 7References
1 List of San Implementation and Deployment Companies2 San Security Implementation and Deployment Companies:3 Internet Security Implementation and Deployment Companies:
1 Security Software2 Realtime Protection
1 Conferences2 Consumer Information3 Directories4 Help and Tutorials5 Mailing Lists6 News and Media7 Organizations8 Products and Tools9 Research10 Content Filtering Links11 Other Logging Resources12 Additional Miscellaneous Security Resources
1 Accomplishment2 Background3 Additional Information
Adding the Access Points as Radius Clients to IASAdding Access Points to the First IAS ServerScripting the Addition of Access Points to IAS Server (Alternative Procedure)Configuring the Wireless Access PointsEnabling Secure Wlan Authentication on Access PointsAdditional Settings to Secure Wireless Access PointsReplicating Radius Client Configuration to Other IAS Servers
1 Case Study 1: SSL VPN Solution Planning And Implementation2 Challenges3 Solution4 Case Study 2: Cyber Attacks on Critical Infrastructures—A Risk to the Nation5 Challenges6 Solution7 Case Study 3: Department of Homeland Security Battle Insider Threats and Maintain National Cyber Security8 Challenges9 Solution10 Case Study 4: Cyber Security Development Lifecycle11 Challenges12 Solution13 Case Study 5: Cyber Security and Beyond ……14 Challenges
Chapter 1: Building A Secure OrganizationChapter 2: A Cryptography PrimerChapter 3: Detecting System IntrusionsChapter 4: Preventing System IntrusionsChapter 5: Guarding Against Network IntrusionsChapter 6: Securing Cloud Computing SystemsChapter 7: Fault Tolerance and Resilience in Cloud Computing EnvironmentsChapter 8: Securing Web Applications, Services and ServersChapter 9: UNIX and Linux SecurityChapter 10: Eliminating the Security Weakness of Linux and UNIX Operating SystemsChapter 11: Internet SecurityChapter 12: The Botnet ProblemChapter 13: Intranet SecurityChapter 14: Local Area Network SecurityChapter 15: Wireless Network SecurityChapter 16: Wireless Sensor Network SecurityChapter 17: Cellular Network SecurityChapter 18: RFID SecurityChapter 19: Optical Network SecurityChapter 20: Optical Wireless SecurityChapter 21: Information Security Essentials for IT Managers: Protecting Mission-Critical SystemsChapter 22: Security Management SystemsChapter 23: Policy-Driven System ManagementChapter 24: Information Technology Security ManagementChapter 25: Online Identity and User Management ServicesChapter 26: Intrusion Detection And Prevention SystemsChapter 27: TCP/IP Packet AnalysisChapter 28: The Enemy (The Intruder’s Genesis)Chapter 29: FirewallsChapter 30: Penetration TestingChapter 31: Building A Secure OrganizationChapter 32: Security Metrics: An Introduction and Literature ReviewChapter 33: Cyber ForensicsChapter 34: Cyber Forensics And Incident ResponseChapter 35: Secure E-Discovery
Chapter 37: Data EncryptionChapter 38: Satellite EncryptionChapter 39: Public Key InfrastructureChapter 40: Password-based Authenticated Key Establishment ProtocolsChapter 41: Instant-Messaging SecurityChapter 42: Privacy On The InternetChapter 43: Physical Security EssentialsChapter 44: Personal Privacy PoliciesChapter 45: Detection Of Conflicts In Security PoliciesChapter 46: Supporting User Privacy Preferences in Digital InteractionsChapter 47: Physical Security EssentialsChapter 48: Virtual Private NetworksChapter 49: Identity TheftChapter 50: Physical Security EssentialsChapter 51: SAN SecurityChapter 52: Storage Area Networking Security DevicesChapter 53: Risk ManagementChapter 54: Physical Security EssentialsChapter 55: Disaster RecoveryChapter 56: BiometricsChapter 57: Homeland SecurityChapter 58: Cyber WarefareChapter 59: Systems SecurityChapter 60: Securing The InfrastructureChapter 61: Access ControlsChapter 62: Assessments And AuditsChapter 63: Fundamentals Of CryptographyChapter 64: Security Through DiversityChapter 65: Online e-Reputation Management ServicesChapter 66: Content FilteringChapter 67: Data Loss ProtectionChapter 68: Satellite Cyber Attack Search And DestroyChapter 69: Verifiable Voting SystemsChapter 70: Advanced Data Encryption

Content preview from Computer and Information Security Handbook, 2nd Edition

Chapter 58

Cyber Warfare

Anna Granova, Pretoria Society of Advocates

Marco Slaviero, SensePost Pty Ltd

The times we live in are called the Information Age for very good reasons: Today information is probably worth much more than any other commodity. Globalization, the other important phenomenon of the times we live in, has taken the value of information to new heights. On one hand, citizens of a country may now feel entitled to know exactly what is happening in other countries around the globe. On the other, the same people can use the Internet to mobilize forces to overthrow the government in their own country.¹ To this end, the capabilities of the Internet have been put to use and people have become accustomed to receiving information ...