Computer Security: Art and Science

Part 7. Special Topics

Part 7 explores four topics that play important roles in computer security. They underlie the security of modern systems and networks.

Chapter 22, “Malicious Logic,” discusses programs set up by attackers to perform actions that violate the site's security policy. The programs act with the privileges of an authorized user but execute without that user's knowledge.

Chapter 23, “Vulnerability Analysis,” describes penetration testing. Although important as a standard a posteriori testing technique, penetration testing models the way attackers analyze a system when determining how best to attack it. The insight gained from this mode of thinking is invaluable to defenders. Chapter 23 also discusses models of vulnerabilities to ...