book

The Basics of Information Security, 2nd Edition

by Jason Andress

May 2014

Beginner

240 pages

7h 11m

English

Syngress

Read now

Unlock full access

Book overview and key learning pointsBook audienceHow this book is organizedConclusion
IntroductionWhat is security?Alert!Models for discussing securityMore advancedAlert!AttacksDefense in depthInformation security in the real worldSummaryExercisesReferences
IntroductionIdentificationAuthenticationMore advancedAdditional resourcesAlert!Identification and authentication in the real worldSummaryExercisesReferences
IntroductionAuthorizationAccess controlMore advancedMore advancedAlert!More advancedAlert!Access control methodologiesMore advancedAuthorization and access control in the real worldSummaryExercisesReferences

IntroductionAccountabilityMore advancedAuditingAlert!Accountability and auditing in the real worldMore advancedSummaryExercisesReferences
IntroductionHistoryMore advancedAdditional resourcesModern cryptographic toolsMore advancedProtecting data at rest, in motion, and in useAlert!Cryptography in the real worldSummaryExercisesReferences
IntroductionLaws and regulationsCompliancePrivacySummaryQuestionsReferences
IntroductionAlert!Origins of operations securityAdditional resourcesThe operations security processHaas’ Laws of operations securityMore advancedOperations security in our personal livesAlert!Operations security in the real worldSummaryExercisesReferences
IntroductionHumans: the weak linkSecurity awarenessThe security awareness and training programSummaryExercisesReferences
IntroductionAlert!Additional resourcesPhysical security controlsProtecting peopleProtecting dataMore advancedProtecting equipmentNotePhysical security in the real worldSummaryExercisesReferences
IntroductionProtecting networksProtecting network trafficMobile device securityNetwork security toolsMore advancedAdditional resourcesNetwork security in the real worldSummaryExercisesReferences
IntroductionOperating system hardeningProtecting against malwareAdditional resourcesMore advancedSoftware firewalls and host intrusion detectionOperating system security toolsAlert!Operating system security in the real worldSummaryExercisesReferences
IntroductionThe TJX breachSoftware development vulnerabilitiesAdditional resourcesWeb securityAlert!More advancedDatabase securityAdditional resourcesApplication security toolsMore advancedApplication security in the real worldSummaryExercisesReferences

Content preview from The Basics of Information Security, 2nd Edition

Chapter 10

Network Security

In this chapter, we examine how we might protect our networks from a variety of different angles. We go over secure network design and segmentation, ensuring that we have the proper choke points to enable control of traffic and that we are redundant where redundancy is needed. We look into the implementation of security devices such as firewalls and intrusion detection systems, the protection of our network traffic with virtual private networks (VPNs) and security measures specific to wireless networks when we need to use them, and the use of secure protocols. We also consider a variety of security tools, such as Kismet, Wireshark, Nmap, honeypots, and other similar utilities.