Information Security: The Complete Reference, Second Edition
2nd Edition
Published on 16. September 2012
Book
Paperback/Softback
896 pages
978-0-07-178435-1 (ISBN)
Description
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.
Develop and implement an effective end-to-end security programToday's complex world of mobile platforms, cloud computing, and ubiquitous data access puts new security demands on every IT professional. Information Security: The Complete Reference, Second Edition (previously titled Network Security: The Complete Reference) is the only comprehensive book that offers vendor-neutral details on all aspects of information protection, with an eye toward the evolving threat landscape. Thoroughly revised and expanded to cover all aspects of modern information security-from concepts to details-this edition provides a one-stop reference equally applicable to the beginner and the seasoned professional.
Find out how to build a holistic security program based on proven methodology, risk analysis, compliance, and business needs. You'll learn how to successfully protect data, networks, computers, and applications. In-depth chapters cover data protection, encryption, information rights management, network security, intrusion detection and prevention, Unix and Windows security, virtual and cloud security, secure application development, disaster recovery, forensics, and real-world attacks and countermeasures. Included is an extensive security glossary, as well as standards-based references. This is a great resource for professionals and students alike.
Understand security concepts and building blocks
Identify vulnerabilities and mitigate risk
Optimize authentication and authorization
Use IRM and encryption to protect unstructured data
Defend storage devices, databases, and software
Protect network routers, switches, and firewalls
Secure VPN, wireless, VoIP, and PBX infrastructure
Design intrusion detection and prevention systems
Develop secure Windows, Java, and mobile applications
Perform incident response and forensic analysis
Develop and implement an effective end-to-end security programToday's complex world of mobile platforms, cloud computing, and ubiquitous data access puts new security demands on every IT professional. Information Security: The Complete Reference, Second Edition (previously titled Network Security: The Complete Reference) is the only comprehensive book that offers vendor-neutral details on all aspects of information protection, with an eye toward the evolving threat landscape. Thoroughly revised and expanded to cover all aspects of modern information security-from concepts to details-this edition provides a one-stop reference equally applicable to the beginner and the seasoned professional.
Find out how to build a holistic security program based on proven methodology, risk analysis, compliance, and business needs. You'll learn how to successfully protect data, networks, computers, and applications. In-depth chapters cover data protection, encryption, information rights management, network security, intrusion detection and prevention, Unix and Windows security, virtual and cloud security, secure application development, disaster recovery, forensics, and real-world attacks and countermeasures. Included is an extensive security glossary, as well as standards-based references. This is a great resource for professionals and students alike.
Understand security concepts and building blocks
Identify vulnerabilities and mitigate risk
Optimize authentication and authorization
Use IRM and encryption to protect unstructured data
Defend storage devices, databases, and software
Protect network routers, switches, and firewalls
Secure VPN, wireless, VoIP, and PBX infrastructure
Design intrusion detection and prevention systems
Develop secure Windows, Java, and mobile applications
Perform incident response and forensic analysis
More details
Series
Edition
2nd edition
Language
English
Place of publication
New York
United States
Publishing group
McGraw-Hill Education - Europe
Target group
Professional and scholarly
Illustrations
215 Illustrations
Dimensions
Height: 231 mm
Width: 185 mm
Thickness: 46 mm
Weight
1422 gr
ISBN-13
978-0-07-178435-1 (9780071784351)
Schweitzer Classification
Person
Mark Rhodes-Ousley, CISSP, CISM, MCSE and Information Security Architect, has been a practicing security professional for more than 8 years, beginning with the first Internet firewall installation for the County of Santa Clara. Specializing in information security, Mark has advised, designed, and installed security technologies and policies for dozens of companies including Fortune 500 companies such as Clorox, The Gap, Sun Microsystems, Hitachi Data Systems, Watkins-Johnson, Napster and Internex. Mark was a co-author of the first edition of this work, titled Network Security: The Complete Reference.
Content
Part 1: Network Security Foundations
1 Overview
2 Risk Analysis and Defense Models
3 Security Policies
4 Security Organization Part 2: Access Control
5 Security Management
6 Physical Security
7 Operational Security
8 Authentication and Authorization Controls
9 Data Security
Part 3: Network Security
10 Network Design Considerations
11 Network Device Security
12 Firewalls
13 Virtual Private Networks
14 Wireless Network Security
15 Intrusion Detection Systems
16 Integrity and Availability
17 Network Role-Based Security
18 Voice-Over-IP (VOIP) Security
Part 4: System Security
19 Operating System Security Models
20 Unix Security
21 Linux Security
22 Windows Security
Part 5: Application Security
23 Principles of Application Security
24 Controlling Application Behavior
25 Writing Secure Software
26 J2EE Security
27 Windows .NET Security
28 Database Security
Part 6: Planning and Response
29 Disaster Recovery and Business Continuity
30 Attacks and Countermeasures
31 Incident Response and Forensic Analysis
32 Legal, Regulatory, and Standards Compliance
1 Overview
2 Risk Analysis and Defense Models
3 Security Policies
4 Security Organization Part 2: Access Control
5 Security Management
6 Physical Security
7 Operational Security
8 Authentication and Authorization Controls
9 Data Security
Part 3: Network Security
10 Network Design Considerations
11 Network Device Security
12 Firewalls
13 Virtual Private Networks
14 Wireless Network Security
15 Intrusion Detection Systems
16 Integrity and Availability
17 Network Role-Based Security
18 Voice-Over-IP (VOIP) Security
Part 4: System Security
19 Operating System Security Models
20 Unix Security
21 Linux Security
22 Windows Security
Part 5: Application Security
23 Principles of Application Security
24 Controlling Application Behavior
25 Writing Secure Software
26 J2EE Security
27 Windows .NET Security
28 Database Security
Part 6: Planning and Response
29 Disaster Recovery and Business Continuity
30 Attacks and Countermeasures
31 Incident Response and Forensic Analysis
32 Legal, Regulatory, and Standards Compliance