book

The Basics of Information Security, 2nd Edition

Name: The Basics of Information Security, 2nd Edition
Author: Jason Andress
ISBN: 9780128008126

by Jason Andress

May 2014

Beginner

240 pages

7h 11m

English

Syngress

Read now

Unlock full access

Cover image
Title page
Table of Contents
Copyright
Dedication
Author Biography
Introduction
Book overview and key learning pointsBook audienceHow this book is organizedConclusion
Chapter 1. What is Information Security?
IntroductionWhat is security?Alert!Models for discussing securityMore advancedAlert!AttacksDefense in depthInformation security in the real worldSummaryExercisesReferences
Chapter 2. Identification and Authentication
IntroductionIdentificationAuthenticationMore advancedAdditional resourcesAlert!Identification and authentication in the real worldSummaryExercisesReferences
Chapter 3. Authorization and Access Control
IntroductionAuthorizationAccess controlMore advancedMore advancedAlert!More advancedAlert!Access control methodologiesMore advancedAuthorization and access control in the real worldSummaryExercisesReferences

Chapter 4. Auditing and Accountability
IntroductionAccountabilityMore advancedAuditingAlert!Accountability and auditing in the real worldMore advancedSummaryExercisesReferences
Chapter 5. Cryptography
IntroductionHistoryMore advancedAdditional resourcesModern cryptographic toolsMore advancedProtecting data at rest, in motion, and in useAlert!Cryptography in the real worldSummaryExercisesReferences
Chapter 6. Laws and Regulations
IntroductionLaws and regulationsCompliancePrivacySummaryQuestionsReferences
Chapter 7. Operations Security
IntroductionAlert!Origins of operations securityAdditional resourcesThe operations security processHaas’ Laws of operations securityMore advancedOperations security in our personal livesAlert!Operations security in the real worldSummaryExercisesReferences
Chapter 8. Human Element Security
IntroductionHumans: the weak linkSecurity awarenessThe security awareness and training programSummaryExercisesReferences
Chapter 9. Physical Security
IntroductionAlert!Additional resourcesPhysical security controlsProtecting peopleProtecting dataMore advancedProtecting equipmentNotePhysical security in the real worldSummaryExercisesReferences
Chapter 10. Network Security
IntroductionProtecting networksProtecting network trafficMobile device securityNetwork security toolsMore advancedAdditional resourcesNetwork security in the real worldSummaryExercisesReferences
Chapter 11. Operating System Security
IntroductionOperating system hardeningProtecting against malwareAdditional resourcesMore advancedSoftware firewalls and host intrusion detectionOperating system security toolsAlert!Operating system security in the real worldSummaryExercisesReferences
Chapter 12. Application Security
IntroductionThe TJX breachSoftware development vulnerabilitiesAdditional resourcesWeb securityAlert!More advancedDatabase securityAdditional resourcesApplication security toolsMore advancedApplication security in the real worldSummaryExercisesReferences
Index

Content preview from The Basics of Information Security, 2nd Edition

Chapter 4

Auditing and Accountability

We discuss the use of auditing and accountability in this chapter. We talk about the need to hold others accountable when we provide access to the resources on which our businesses are based on to personal information of a sensitive nature. We also go over the processes we carry out in order to ensure that our environment is compliant with the laws, regulations, and policies that bind it, referred to as auditing. In addition, we address the tools we use to support auditing, accountability, and monitoring activities, such as logging and monitoring.

Keywords

Accountability; admissibility; assessments; auditing; deterrence; intrusion detection; intrusion prevention; logging; monitoring; nonrepudiation

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Information Security Handbook - Second Edition

Publisher Resources

ISBN: 9780128007440

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

The Basics of Information Security, 2nd Edition

by Jason Andress