book

Elementary Information Security, 2nd Edition

Name: Elementary Information Security, 2nd Edition
Author: Richard E. Smith
ISBN: 9781284055948

by Richard E. Smith

February 2015

Beginner

866 pages

28h 16m

English

Jones & Bartlett Learning

Read now

Unlock full access

Cover
Title Page
Copyright
Contents
Preface
Chapter 1 Security From The Ground Up
1.1 The Security Landscape1.1.1 Making Security Decisions1.1.2 Framework for Risk Management1.2 Assessing Risks1.2.1 The Proprietor’s Risk Management Framework1.2.2 Goals and Assets1.2.3 Security Boundaries1.2.4 Security Architecture1.3 Identifying Risks1.3.1 Threat Agents1.3.2 Potential Attacks1.3.3 Risk Matrix1.4 Prioritizing Risks1.5 Drafting Security Requirements1.5.1 Analyzing Alice’s Risks1.5.2 Monitoring Security Measures1.6 Ethical Issues in Security Analysis1.6.1 Searching for Vulnerabilities1.6.2 Sharing and Publishing Cyber Vulnerabilities1.7 Resources1.7.1 Review Questions1.7.2 Exercises
Chapter 2 Controlling a Computer
2.1 Computers and Programs2.1.1 Input/Output2.1.2 Program Execution2.1.3 Procedures2.2 Programs and Processes2.2.1 Switching Between Processes2.2.2 The Operating System2.3 Buffer Overflows and the Morris Worm2.3.1 The “Finger” Overflow2.3.2 Security Alerts2.3.3 Studying Cyberattacks2.4 Access Control Strategies2.4.1 Puzzles and Patterns2.4.2 Chain of Control: Another Basic Principle2.5 Keeping Processes Separate2.5.1 Sharing a Program2.5.2 Sharing Data2.6 Selecting Security Controls2.7 Security Plan: Process Protection2.8 Resources2.8.1 Review Questions2.8.2 Exercises
Chapter 3 Controlling Files
3.1 The File System3.1.1 File Ownership and Access Rights3.1.2 Directory Access Rights3.2 Executable Files3.2.1 Execution Access Rights3.2.2 Computer Viruses3.2.3 Macro Viruses3.2.4 Modern Malware: A Rogue’s Gallery3.3 Sharing and Protecting Files3.3.1 Security Policies for Sharing and Protection3.4 Security Controls for Files3.4.1 Deny by Default: A Basic Principle3.4.2 Managing Access Rights3.5 File Security Controls3.5.1 File Permission Flags3.5.2 Security Controls to Enforce the Isolation Policy3.5.3 States and State Diagrams3.6 Patching Security Flaws3.7 Resources3.7.1 Review Questions3.7.2 Exercises
Chapter 4 Sharing Files
4.1 Controlled Sharing4.1.1 Basic File Sharing on Windows4.1.2 User Groups4.1.3 Least Privilege and Administrative Users4.2 File Permission Flags4.2.1 Permission Flags and Ambiguities4.2.2 Permission Flag Examples4.3 Access Control Lists and OS X4.4 Microsoft Windows ACLs4.4.1 Denying Access4.4.2 Default File Protection4.4.3 A Different Trojan Horse4.5 Monitoring Cyber System Security4.5.1 Logging Events4.5.2 External Security Requirements4.6 Resources4.6.1 Review Questions4.6.2 Exercises
Chapter 5 Storing Files
5.1 Incident Response and Attack5.1.1 The Aftermath of an Incident5.1.2 Legal Disputes5.2 Digital Evidence5.2.1 Collecting Legal Evidence5.2.2 Digital Evidence Procedures5.3 Storing Data on a Hard Drive5.3.1 Hard Drive Controller5.3.2 Hard Drive Formatting5.4 Common Drive Concepts5.4.1 Error Detection and Correction5.4.2 Drive Partitions5.4.3 Memory Sizes and Address Variables5.5 FAT: An Example File System5.5.1 Boot Blocks5.5.2 Building Files from Clusters5.5.3 FAT Directories5.6 Modern File Systems5.6.1 Unix File System5.6.2 Apple’s HFS Plus5.6.3 Microsoft’s NTFS5.7 Input/Output and File System Software5.7.1 Software Layering5.7.2 A Typical I/O Operation5.7.3 Security and I/O5.8 Resources5.8.1 Review Questions5.8.2 Exercises

Chapter 6 Authenticating People
6.1 Unlocking a Door6.1.1 Authentication Factors6.1.2 Threat Agents and Risks6.1.3 Database Thefts6.2 Evolution of Password Systems6.2.1 One-Way Hash Functions6.2.2 Sniffing Credentials6.3 Password Guessing6.3.1 Password Search Space6.3.2 Truly Random Password Selection6.3.3 Cracking Speeds6.4 Attacks on Password Bias6.4.1 Biased Choices and Average Attack Space6.4.2 Estimating Language-Based Password Bias6.5 Authentication Tokens6.5.1 Challenge-Response Authentication6.5.2 One-Time Password Tokens6.5.3 Token Vulnerabilities6.6 Biometric Authentication6.6.1 Biometric Accuracy6.6.2 Biometric Vulnerabilities6.7 Authentication Policy6.7.1 Weak and Strong Threats6.7.2 Policies for Weak Threat Environments6.7.3 Policies for Strong and Extreme Threats6.7.4 Password Selection and Handling6.8 Resources6.8.1 Review Questions6.8.2 Exercises
Chapter 7 Encrypting Files
7.1 Protecting the Accessible7.1.1 The Encrypted Diary7.1.2 Encryption Basics7.1.3 Encryption and Information States7.2 Encryption and Cryptanalysis7.2.1 The Vigenère Cipher7.2.2 Electromechanical Encryption7.3 Computer-Based Encryption7.3.1 Exclusive Or: A Crypto Building Block7.3.2 Stream Ciphers: Another Building Block7.3.3 Key Stream Security7.3.4 The One-Time Pad7.4 File Encryption Software7.4.1 Built-In File Encryption7.4.2 Encryption Application Programs7.4.3 Erasing a Plaintext File7.4.4 Choosing a File Encryption Program7.5 Digital Rights Management7.6 Resources7.6.1 Review Questions7.6.2 Exercises
Chapter 8 Secret and Public Keys
8.1 The Key Management Challenge8.1.1 Rekeying8.1.2 Using Text for Encryption Keys8.1.3 Key Strength8.2 The Reused Key Stream Problem8.2.1 Avoiding Reused Keys8.2.2 Key Wrapping: Another Building Block8.2.3 Separation of Duty: A Basic Principle8.2.4 DVD Key Handling8.3 Public-Key Cryptography8.3.1 Sharing a Secret: Diffie-Hellman8.3.2 Diffie-Hellman: The Basics of the Math8.3.3 Elliptic Curve Cryptography8.4 RSA: Rivest-Shamir-Adleman8.4.1 Encapsulating Keys with RSA8.4.2 An Overview of RSA Mathematics8.5 Data Integrity and Digital Signatures8.5.1 Detecting Malicious Changes8.5.2 Detecting a Changed Hash Value8.5.3 Digital Signatures8.6 Publishing Public Keys8.6.1 Public-Key Certificates8.6.2 Chains of Certificates8.6.3 Authenticated Software Updates8.7 Resources8.7.1 Review Questions8.7.2 Exercises
Chapter 9 Encrypting Volumes
9.1 Securing a Volume9.1.1 Risks to Volumes9.1.2 Risks and Policy Trade-Offs9.2 Block Ciphers9.2.1 Evolution of DES and AES9.2.2 The RC4 Story9.2.3 Qualities of Good Encryption Algorithms9.3 Block Cipher Modes9.3.1 Stream Cipher Modes9.3.2 Cipher Feedback Mode9.3.3 Cipher Block Chaining9.4 Encrypting a Volume9.4.1 Volume Encryption in Software9.4.2 Block Modes for Volume Encryption9.4.3 A “Tweakable” Encryption Mode9.4.4 Residual Risks9.5 Encryption in Hardware9.5.1 The Drive Controller9.5.2 Drive Locking and Unlocking9.6 Managing Encryption Keys9.6.1 Key Storage9.6.2 Booting an Encrypted Drive9.6.3 Residual Risks to Keys9.7 Resources9.7.1 Review Questions9.7.2 Exercises
Chapter 10 Connecting Computers
10.1 The Network Security Problem10.1.1 Basic Network Attacks and Defenses10.1.2 Physical Network Protection10.1.3 Host and Network Integrity10.2 Transmitting Data10.2.1 Message Switching10.2.2 Circuit Switching10.2.3 Packet Switching10.3 Putting Bits on a Wire10.3.1 Wireless Transmission10.3.2 Transmitting Packets10.3.3 Recovering a Lost Packe10.4 Ethernet: A Modern LAN10.4.1 Wiring a Small Network10.4.2 Ethernet Frame Format10.4.3 Finding Host Addresses10.4.4 Handling Collisions10.5 The Protocol Stack10.5.1 Relationships Between Layers10.5.2 The OSI Protocol Model10.6 Network Applications10.6.1 Resource Sharing10.6.2 Data and File Sharing10.7 Resources10.7.1 Review Questions10.7.2 Exercises
Chapter 11 Networks of Networks
11.1 Building Data Networks11.1.1 Point-to-Point Network11.1.2 Star Network11.1.3 Bus Network11.1.4 Tree Network11.1.5 Mesh11.2 Combining Computer Networks11.2.1 Hopping Between Networks11.2.2 Evolution of Internet Security11.2.3 Internet Structure11.3 Talking between Hosts11.3.1 IP Addresses11.3.2 IP Packet Format11.3.3 Address Resolution Protocol11.4 Internet Addresses in Practice11.4.1 Addresses, Scope, and Reachability11.4.2 Private IP Addresses11.5 Network Inspection Tools11.5.1 Wireshark Examples11.5.2 Mapping a LAN with Nmap11.6 Resources11.6.1 Review Questions11.6.2 Exercises
Chapter 12 End-to-End Networking
12.1 “Smart” Versus “Dumb” Networks12.2 Internet Transport Protocols12.2.1 Transmission Control Protocol12.2.2 Attacks on Protocols12.3 Names on the Internet12.3.1 Domain Names in Practice12.3.2 Looking Up Names12.3.3 DNS Protocol12.3.4 Investigating Domain Names12.3.5 Attacking DNS12.4 Internet Gateways and Firewalls12.4.1 Network Address Translation12.4.2 Filtering and Connectivity12.4.3 Software-Based Firewalls12.5 Long-Distance Networking12.5.1 Older Technologies12.5.2 Mature Technologies12.5.3 Evolving Technologies12.6 Resources12.6.1 Review Questions12.6.2 Exercises
Chapter 13 Enterprise Computing
13.1 The Challenge of Community13.1.1 Companies and Information Control13.1.2 Enterprise Risks13.1.3 Social Engineering13.2 Management Processes13.2.1 Security Management Standards13.2.2 Deployment Policy Directives13.2.3 Management Hierarchies and Delegation13.2.4 Managing Information Resources13.2.5 Security Audits13.2.6 Information Security Professionals13.3 Enterprise Issues13.3.1 Personnel Security13.3.2 Physical Security13.3.3 Software Security13.4 Enterprise Network Authentication13.4.1 Direct Authentication13.4.2 Indirect Authentication13.4.3 Off-Line Authentication13.5 Contingency Planning13.5.1 Data Backup and Restoration13.5.2 Handling Serious Incidents13.5.3 Disaster Preparation and Recovery13.6 Resources13.6.1 Review Questions13.6.2 Exercises
Chapter 14 Network Encryption
14.1 Communications Security14.1.1 Crypto by Layers14.1.2 Administrative and Policy Issues14.2 Crypto Keys on a Network14.2.1 Manual Keying: A Building Block14.2.2 Simple Rekeying14.2.3 Secret-Key Building Blocks14.2.4 Public-Key Building Blocks14.2.5 Public-Key Versus Secret-Key Exchanges14.3 Crypto Atop the Protocol Stack14.3.1 Transport Layer Security—SSL and TLS14.3.2 SSL Handshake Protocol14.3.3 SSL Record Transmission14.4 Network Layer Cryptography14.4.1 The Encapsulating Security Payload14.4.2 Implementing a VPN14.4.3 Internet Key Exchange Protocol14.5 Link Encryption on 802.11 Wireless14.5.1 Wireless Packet Protection14.5.2 Security Associations14.6 Cryptographic Security Requirements14.7 Resources14.7.1 Review Questions14.7.2 Exercises
Chapter 15 Internet Services and Email
15.1 Internet Services15.2 Internet Email15.2.1 Email Protocol Standards15.2.2 Tracking an Email15.2.3 Forging an Email Message15.3 Email Security Problems15.3.1 Spam15.3.2 Phishing15.3.3 Email Viruses and Hoaxes15.4 Enterprise Firewalls15.4.1 Controlling Internet Traffic15.4.2 Traffic-Filtering Mechanisms15.4.3 Implementing Firewall Rules15.5 Enterprise Point of Presence15.5.1 POP Topology15.5.2 Attacking an Enterprise Site15.5.3 The Challenge of Real-Time Media15.6 Resources15.6.1 Review Questions15.6.2 Exercises
Chapter 16 The World Wide Web
16.1 Hypertext Fundamentals16.1.1 Addressing Web Pages16.1.2 Retrieving a Static Web Page16.2 Basic Web Security16.2.1 Static Website Security16.2.2 Server Authentication16.2.3 Server Masquerades16.3 Dynamic Websites16.3.1 Scripts on the Web16.3.2 States and HTTP16.4 Content Management Systems16.4.1 Database Management Systems16.4.2 Password Checking: A CMS Example16.4.3 Command Injection Attacks16.5 Ensuring Web Security Properties16.5.1 Web Availability16.5.2 Web Privacy16.6 Resources16.6.1 Review Questions16.6.2 Exercises
Chapter 17 Governments and Secrecy
17.1 Secrecy in Government17.1.1 The Challenge of Secrecy17.1.2 Cybersecurity and Operations17.2 Classifications and Clearances17.2.1 Security Labeling17.2.2 Security Clearances17.2.3 Classification Levels in Practice17.2.4 Compartments and Other Special Controls17.3 National Policy Issues17.3.1 Facets of National System Security17.3.2 Security Planning17.4 Communications Security17.4.1 Cryptographic Technology17.4.2 Crypto Security Procedures17.4.3 Transmission Security17.5 Data Protection17.5.1 Protected Wiring17.5.2 TEMPEST17.6 Trustworthy Systems17.6.1 Integrity of Operations17.6.2 Multilevel Security17.6.3 Computer Modes of Operation17.7 Resources17.7.1 Review Questions17.7.2 Exercises
Appendix A: Acronyms
Appendix B: Alternative Security Terms and Concepts
Index

Content preview from Elementary Information Security, 2nd Edition

STORING FILES

CHAPTER

ABOUT THIS CHAPTER

In this chapter, we begin by addressing the aftermath of a security incident and follow this to the problem of file storage. Specifically, we examine the following:

• Incident response and recovering from an attack

• Fundamentals of evidence collection and preservation

• Basics of hard drives and other large-capacity devices

• Hard drive formatting

• File storage on hard drives, flash drives, and other devices

• Features of major file systems used in operating systems and for removable storage

5.1 Incident Response and Attack

After the Trojan horse incident in Section 4.4.3, Bob decided to store working files on small, removable USB flash drives. At first he used the first drives he ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Elementary Information Security, 3rd Edition

Publisher Resources

ISBN: 9781284055931

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Elementary Information Security, 2nd Edition

by Richard E. Smith

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.