Security Intelligence: A Practitioner's Guide to Solving Enterprise Security Challenges

Index

A

AAA (Authentication, Authorization, and Accounting), 176

Abstract Syntax Tree (ASTs), Zozzle applying to content analysis, 140–142

access control

policy decisions and, 70

web access policies, 164–167

access logging

filtering access logs, 257

policies, 167–170

access points (APs), network security and, 314

ACEs (access control entries), 260

ACLs (access control lists), 260

actions, compared with properties, 181

ad arbitration, 308

ad fraud, 308

ad networks, malvertising attacks, 113–114

advanced persistent threats. See APTs (advanced persistent threats)

Advanced RISC Machines (ARM), solutions to mobile security, 311

Aho-Corasick algorithm

extracting matching terms, 208–211

Prefix Trees compared with, 212–214

AIC (application intelligence and control), firewall deficiencies and, 6

allow policy, vs. deny-all policy, 165

AND operations

bitmap searches and, 276

connecting policy conditions and properties, 163

Android apps. See also Google Android

application signing transparency, 307

library integrity and SSL verification challenges, 307

Android gadgets, 3–4

Android OS

mobile device market, 299

NFC (Near Field Communication) in mobile devices, 306–307

solutions to mobile security, 309–310

use of WebView class, 305–306

antivirus solutions

access logging policies, 169–170

cloud-based, 309

components of content analysis system, 138

embedded devices and, 4

end-point solutions, 121–122

implementing security policies, 90–91

mobile devices and, 304–305

safe content retrieval policies, ...