The following Table of Contents (TOC) has been derived from the website by the publisher

The book is divided into 5 parts

1. COMPUTER SECURITY TECHNOLOGY AND PRINCIPLES
2. SOFTWARE SECURITY AND TRUSTED SYSTEMS
3. MANAGEMENT ISSUES
4. CRYPTOGRAPHIC ALGORITHMS
5. NETWORK SECURITY

 

    Chapter 1 Overview
        1.1 Computer Security Concepts
        1.2 Threats, Attacks, and Assets
        1.3 Security Functional Requirements
        1.4 Fundamental Security Design Principles
        1.5 Attack Surfaces and Attack Trees
        1.6 Computer Security Strategy
        1.7 Standards
        1.8 Key Terms, Review Questions, and Problems

PART ONE COMPUTER SECURITY TECHNOLOGY AND PRINCIPLES

    Chapter 2 Cryptographic Tools

[1] chapter 2 show
        2.1 Confidentiality with Symmetric Encryption
        2.2 Message Authentication and Hash Functions
        2.3 Public-Key Encryption
        2.4 Digital Signatures and Key Management
        2.5 Random and Pseudorandom Numbers
        2.6 Practical Application: Encryption of Stored Data
        2.7 Key Terms, Review Questions, and Problems



    Chapter 3 User Authentication



[2] chapter 3 show
        3.1 Digital User Authentication Principles
        3.2 Password-Based Authentication
        3.3 Token-Based Authentication
        3.4 Biometric Authentication
        3.5 Remote User Authentication
        3.6 Security Issues for User Authentication
        3.7 Practical Application: An Iris Biometric System
        3.8 Case Study: Security Problems for ATM Systems
        3.9 Key Terms, Review Questions, and Problems



    Chapter 4 Access Control
        4.1 Access Control Principles
        4.2 Subjects, Objects, and Access Rights
        4.3 Discretionary Access Control
        4.4 Example: UNIX File Access Control
        4.5 Role-Based Access Control
        4.6 Attribute-Based Access Control
        4.7 Identity, Credential, and Access Management
        4.8 Trust Frameworks
        4.9 Case Study: RBAC System for a Bank
        4.10 Key Terms, Review Questions, and Problems
    Chapter 5 Database and Data Center Security
        5.1 The Need for Database Security
        5.2 Database Management Systems
        5.3 Relational Databases
        5.4 SQL Injection Attacks
        5.5 Database Access Control
        5.6 Inference
        5.7 Database Encryption
        5.8 Data Center Security
        5.9 Key Terms, Review Questions, and Problems
    Chapter 6 Malicious Software
        6.1 Types of Malicious Software
        6.2 Advanced Persistent Threat
        6.2 Propagation — Infected Content - Viruses
        6.3 Propagation — Vulnerability Exploit - Worms
        6.4 Propagation — Social Engineering — SPAM E-Mail, Trojans
        6.5 Payload — System Corruption
        6.6 Payload — Attack Agent — Zombie, Bots
        6.7 Payload — Information Theft — Keyloggers, Phishing, Spyware
        6.8 Payload — Stealthing — Backdoors, Rootkits
        6.9 Countermeasures
        6.10 Key Terms, Review Questions, and Problems
    Chapter 7 Denial-of-Service Attacks
        7.1 Denial-of-Service Attacks
        7.2 Flooding Attacks
        7.3 Distributed Denial-of-Service Attacks
        7.4 Application-Based Bandwidth Attacks
        7.5 Reflector and Amplifier Attacks
        7.6 Defenses Against Denial-of-Service Attacks
        7.7 Responding to a Denial-of-Service Attack
        7.8 Key Terms, Review Questions, and Problems
    Chapter 8 Intrusion Detection
        8.1 Intruders
        8.2 Intrusion Detection
        8.3 Analysis Approaches
        8.4 Host-Based Intrusion Detection
        8.5 Network-Based Intrusion Detection
        8.6 Distributed or Hybrid Intrusion Detection
        8.7 Intrusion Detection Exchange Format
        8.8 Honeypots
        8.9 Example System: Snort
        8.10 Key Terms, Review Questions, and Problems
    Chapter 9 Firewalls and Intrusion Prevention Systems
        9.1 The Need for Firewalls
        9.2 Firewall Characteristics and Access Policy
        9.3 Types of Firewalls
        9.4 Firewall Basing
        9.5 Firewall Location and Configurations
        9.6 Intrusion Prevention Systems
        9.7 Example: Unified Threat Management Products
        9.8 Key Terms, Review Questions, and Problems


PART TWO SOFTWARE SECURITY AND TRUSTED SYSTEMS

    Chapter 10 Buffer Overflow
        10.1 Stack Overflows
        10.2 Defending Against Buffer Overflows
        10.3 Other Forms of Overflow Attacks
        10.4 Key Terms, Review Questions, and Problems
    Chapter 11 Software Security
        11.1 Software Security Issues
        11.2 Handling Program Input
        11.3 Writing Safe Program Code
        11.4 Interacting with the Operating System and Other Programs
        11.5 Handling Program Input
        11.6 Key Terms, Review Questions, and Problems
    Chapter 12 Operating System Security
        12.1 Introduction to Operating System Security
        12.3 System Security Planning
        12.3 Operating Systems Hardening
        12.4 Application Security
        12.5 Security Maintenance
        12.6 Linux/UNIX Security
        12.7 Windows Security
        12.8 Virtualization Security
        12.9 Key Terms, Review Questions, and Problems
    Chapter 13 Cloud and IoT Security
        13.1 Cloud Computing
        13.2 Cloud Security Concepts
        13.3 Cloud Security Approaches
        13.4 The Internet of Things
        13.5 IoT Security
        13.6 Key Terms, Review Questions, and Problems

PART THREE MANAGEMENT ISSUES

    Chapter 14 IT Security Management and Risk Assessment
        14.1 IT Security Management
        14.2 Organizational Context and Security Policy
        14.3 Security Risk Assessment
        14.4 Detailed Security Risk Analysis
        14.5 Case Study: Silver Star Mines
        14.6 Recommended Reading
        14.7 Key Terms, Review Questions, and Problems
    Chapter 15 IT Security Controls, Plans and Procedures
        15.1 IT Security Management Implementation
        15.2 Security Controls or Safeguards
        15.3 IT Security Plan
        15.4 Implementation of Controls
        15.5 Monitoring Risks
        15.6 Case Study: Silver Star Mines
        15.7 Key Terms, Review Questions, and Problems
    Chapter 16 Physical and Infrastructure Security
        16.1 Overview
        16.2 Physical Security Threats
        16.3 Physical Security Prevention and Mitigation Measures
        16.4 Recovery from Physical Security Breaches
        16.5 Example: A Corporate Physical Security Policy
        16.6 Integration of Physical and Logical Security
        16.7 Key Terms, Review Questions, and Problems
    Chapter 17 Human Resources Security
        17.1 Security Awareness, Training, and Education
        17.2 Employment Practices and Policies
        17.3 E-Mail and Internet Use Policies
        17.4 Computer Security Incident Response Teams
        17.5 Key Terms, Review Questions, and Problems
    Chapter 18 Security Auditing
        18.1 Security Auditing Architecture
        18.2 The Security Audit Trail
        18.3 Implementing the Logging Function
        18.4 Audit Trail Analysis
        18.5 Security Information and Event Management
        18.6 Key Terms, Review Questions, and Problems
    Chapter 19 Legal and Ethical Aspects
        19.1 Cybercrime and Computer Crime
        19.2 Intellectual Property
        19.3 Privacy
        19.4 Ethical Issues
        19.5 Key Terms, Review Questions, and Problems
        Appendix 19A: Information Privacy Standard of Good Practice

PART FOUR CRYPTOGRAPHIC ALGORITHMS

    Chapter 20 Symmetric Encryption and Message Confidentiality
        20.1 Symmetric Encryption and Message Confidentiality
        20.2 Data Encryption Standard
        20.3 Advanced Encryption Standard
        20.4 Stream Ciphers and RC4
        20.5 Cipher Block Modes of Operation
        20.6 Key Distribution
        20.8 Key Terms, Review Questions, and Problems
    Chapter 21 Public-Key Cryptography and Message Authentication
        21.1 Secure Hash Functions
        21.2 HMAC
        21.3 Authenticated Encryption
        21.4 The RSA Public-Key Encryption Algorithm
        21.5Diffie-Hellman and Other Asymmetric Algorithms
        21.6 Key Terms, Review Questions, and Problems

PART FIVE NETWORK SECURITY

    Chapter 22 Internet Security Protocols and Standards
        22.1 Secure Email and S/MIME
        22.2 DomainKeys Identified Mail
        22.3 Secure Sockets Layer (SSL) and Transport Layer Security (TLS)
        22.4 HTTPS
        22.5 IPv4 and IPv6 Security
        22.6 Key Terms, Review Questions, and Problems
    Chapter 23 Internet Authentication Applications
        23.1 Kerberos
        23.2 X.509
        23.3 Public-Key Infrastructure
        23.4 Federated Identity Management
        23.5 Key Terms, Review Questions, and Problems
    Chapter 24 Wireless Network Security
        24.1 Wireless Security Overview
        24.2 Mobile Device Security
        24.3 IEEE 802.11 Wireless LAN Overview
        24.4 IEEE 802.11i Wireless LAN Security
        24.5 Key Terms, Review Questions, and Problems