Guide to computer network security

목차 (Table of Contents)

• CONTENTS
• Part I Introduction to Traditional Computer Network Security
• 1 Computer Network Fundamentals = 3
• 1.1 Introduction = 3
• 1.2 Computer Network Models = 4
• 1.3 Computer Network Types = 5
• 1.4 Data Communication Media Technology = 7
• 1.5 Network Topology = 13
• 1.6 Network Connectivity and Protocols = 17
• 1.7 Network Services = 22
• 1.8 Network Connecting Devices = 26
• 1.9 Network Technologies = 34
• 1.10 Conclusion = 39
• References = 40
• 2 Computer Network Security Fundamentals = 41
• 2.1 Introduction = 41
• 2.2 Securing the Computer Network = 44
• 2.3 Forms of Protection = 44
• 2.4 Security Standards = 48
• References = 57
• Part II Security Issues and Challenges in the Traditional Computer Network
• 3 Security Threats and Threat Motives to Computer Networks = 61
• 3.1 Introduction = 61
• 3.2 Sources of Security Threats = 62
• 3.3 Security Threat Motives = 79
• 3.4 Security Threat Management = 82
• 3.5 Security Threat Correlation = 83
• 3.6 Security Threat Awareness = 84
• References = 85
• 4 Introduction to Computer Network Vulnerabilities = 87
• 4.1 Definition = 87
• 4.2 Sources of Vulnerabilities = 87
• 4.3 Vulnerability Assessment = 100
• References = 102
• 5 Cyber Crimes and Hackers = 105
• 5.1 Introduction = 105
• 5.2 Cybercrimes = 106
• 5.3 Hackers = 110
• 5.4 Dealing with the Rising Tide of Cybercrimes = 128
• 5.5 Conclusion = 129
• References = 130
• 6 Scripting and Security in Computer Networks and Web Browsers = 133
• 6.1 Introduction = 133
• 6.2 Scripting = 133
• 6.3 Scripting Languages = 134
• 6.4 Scripting in Computer Networks = 137
• 6.5 Computer Networks Scripts and Security = 141
• 6.6 Dealing with the Script Security Problems = 144
• References = 145
• 7 Security Assessment, Analysis, and Assurance = 147
• 7.1 Introduction = 147
• 7.2 System Security Policy = 149
• 7.3 Building a Security Policy = 151
• 7.4 Security Requirements Specification = 156
• 7.5 Threat Identification = 158
• 7.6 Threat Analysis = 161
• 7.7 Vulnerability Identification and Assessment = 163
• 7.8 Security Certification = 166
• 7.9 Security Monitoring and Auditing = 167
• 7.10 Products and Services = 170
• References = 171
• Part III Dealing with Computer Network Security Challenges
• 8 Disaster Management = 175
• 8.1 Introduction = 175
• 8.2 Disaster Prevention = 177
• 8.3 Disaster Response = 179
• 8.4 Disaster Recovery = 179
• 8.5 Make Your Business Disaster Ready = 183
• 8.6 Resources for Disaster Planning and Recovery = 184
• References = 186
• 9 Access Control and Authorization = 187
• 9.1 Definitions = 187
• 9.2 Access Rights = 188
• 9.3 Access Control Systems = 194
• 9.4 Authorization = 199
• 9.5 Types of Authorization Systems = 201
• 9.6 Authorization Principles = 202
• 9.7 Authorization Granularity = 203
• 9.8 Web Access and Authorization = 204
• References = 205
• 10 Authentication = 207
• 10.1 Definition = 207
• 10.2 Multiple Factors and Effectiveness of Authentication = 208
• 10.3 Authentication Elements = 210
• 10.4 Types of Authentication = 212
• 10.5 Authentication Methods = 213
• 10.6 Developing an Authentication Policy = 223
• References = 225
• 11 Cryptography = 227
• 11.1 Definition = 227
• 11.2 Symmetric Encryption = 230
• 11.3 Public Key Encryption = 234
• 11.4 Enhancing Security : Combining Symmetric and Public Key Encryptions = 237
• 11.5 Key Management : Generation, Transportation, and Distribution = 238
• 11.6 Public Key Infrastructure (PKI) = 245
• 11.7 Hash Function = 246
• 11.8 Digital Signatures = 247
• References = 250
• 12 Firewalls = 251
• 12.1 Definition = 251
• 12.2 Types of Firewalls = 254
• 12.3 Configuration and Implementation of a Firewall = 266
• 12.4 The Demilitarized Zone (DMZ) = 267
• 12.5 Improving Security Through the Firewall = 269
• 12.6 Firewall Forensics = 271
• 12.7 Firewall Services and Limitations = 271
• References = 273
• 13 System Intrusion Detection and Prevention = 275
• 13.1 Definition = 275
• 13.2 Intrusion Detection = 275
• 13.3 Intrusion Detection Systems (IDSs) = 278
• 13.4 Types of Intrusion Detection Systems = 282
• 13.5 The Changing Nature ofJDS Tools = 289
• 13.6 Other Types of Intrusion Detection Systems = 290
• 13.7 Response to System Intrusion = 292
• 13.8 Challenges to Intrusion Detection Systems = 293
• 13.9 Implementing an Intrusion Detection System = 294
• 13.10 Intrusion Prevention Systems (IPSs) = 295
• 13.11 Intrusion Detection Tools = 298
• References = 300
• 14 Computer and Network Forensics = 303
• 14.1 Definition = 303
• 14.2 Computer Forensics = 304
• 14.3 Network Forensics = 319
• 14.4 Forensic Tools = 325
• References = 328
• 15 Virus and Content Filtering = 331
• 15.1 Definitions = 331
• 15.2 Scanning, Filtering, and Blocking = 331
• 15.3 Virus Filtering = 336
• 15.4 Content Filtering = 343
• 15.5 Spam = 347
• References = 349
• 16 Standardization and Security Criteria : Security Evaluation of Computer Products = 351
• 16.1 Introduction = 351
• 16.2 Product Standardization = 352
• 16.3 Security Evaluations = 353
• 16.4 Major Security Evaluation Criteria = 358
• 16.5 Does Evaluation Mean Security? = 363
• References = 364
• 17 Computer Network Security Protocols = 367
• 17.1 Introduction = 367
• 17.2 Application-Level Security = 368
• 17.3 Security in the Transport Layer = 382
• 17.4 Security in the Network Layer = 386
• 17.5 Security in the Physical Layer = 395
• References = 397
• 18 Security in Wireless Networks and Devices = 399
• 18.1 Introduction = 399
• 18.2 Types of Wireless Broadband Networks = 400
• 18.3 Development of Cellular Technology = 413
• 18.4 Other Features of Mobile Cellular Technology = 416
• 18.5 Security Vulnerabilities in Cellular Wireless Networks = 419
• References = 427
• 19 Security in Sensor Networks = 429
• 19.1 Introduction = 429
• 19.2 The Growth of Sensor Networks = 430
• 19.3 Design Factors in Sensor Networks = 431
• 19.4 Security in Sensor Networks = 435
• 19.5 Security Mechanisms and Best Practices for Sensor Networks = 440
• 19.6 Trends in Sensor Network Security Research = 441
• References = 444
• 20 Other Efforts to Secure Data in Computer Networks and Beyond = 447
• 20.1 Introduction = 447
• 20.2 Legislation = 447
• 20.3 Regulation = 448
• 20.4 Self-Regulation = 448
• 20.5 Education = 450
• 20.6 Reporting Centers = 452
• 20.7 Market Forces = 453
• 20.8 Activism = 453
• Reference = 455
• Part IV The Emergence of the Digital and Social Network Ecosystem
• 21 Virtualization Technology and Security = 459
• 21.1 Introduction = 459
• 21.2 History of Virtualization = 460
• 21.3 Virtualization Terminologies 461
• 21.4 Types of Computing System Virtualization = 462
• 21.5 The Benefits of Virtualization = 470
• 21.6 Virtualization Infrastructure Security = 473
• References = 476
• 22 Cloud Computing Technology and Security = 477
• 22.1 Introduction = 477
• 22.2 Cloud Computing Infrastructure Characteristics = 478
• 22.3 Cloud Computing Service Models = 480
• 22.4 Cloud Computing Deployment Models = 482
• 22.5 Virtualization and Cloud Computing = 483
• 22.6 Benefits of Cloud Computing = 483
• 22.7 Cloud Computing, Power Consumption, and Environmental Issues = 486
• 22.8 Cloud Computing Security, Reliability, Availability, and Compliance Issues = 487
• References = 501
• 23 Mobile Systems and Corresponding Intractable Security Issues = 503
• 23.1 Introduction = 503
• 23.2 Current Major Mobile Operating Systems = 504
• 23.3 Security in the Mobile Ecosystems = 504
• 23.4 General Mobile Devices Attack Types = 509
• 23.5 Mitigation of Mobile Devices Attacks = 512
• 23.6 Users Role in Securing Mobile Devices = 514
• References = 515
• 24 Internet of Things (IoT) : Growth, Challenges, and Security = 517
• 24.1 Introduction = 517
• 24.2 Overview and Growth of the Internet of Things = 519
• 24.3 Architecture and Networking of the IoT ]= 520
• 24.4 IoT Governance, Privacy, and Security Challenges = 525
• References = 530
• 25 Blockchains, Cryptocurrency, and Smart Contracts Technology : Security Considerations = 533
• 25.1 Introduction = 533
• 25.2 Transactions = 534
• 25.3 Blockchain = 535
• 25.4 Cryptocurrencies = 543
• 25.5 Security Issues = 550
• 25.6 Applications = 552
• 25.7 Managed Blockchains = 553
• 25.8 Future of Blockchain and Cryptocurrencies = 554
• 25.9 Online Resources and Students Hands-on Videos = 555
• References = 557
• Part V Securing the Last Frontiers - The Home Front
• 26 Conquering the Last Frontier in the Digital Invasion : The Home Front = 561
• 26.1 Introduction = 561
• 26.2 The Changing Home Network and Hotspots = 562
• 26.3 Data and Activities in the Home LAN = 567
• 26.4 Threats to the Home and Home LAN = 569
• References = 574
• Part VI Hands-On Projects
• 27 Projects = 577
• 27.1 Introduction = 577
• 27.2 Part 1 : Case Studies = 577
• 27.3 Part 2 : Weekly/Biweekly Laboratory Assignments = 578
• 27.4 Part 3 : Semester Projects = 581
• 27.5 Scanning Tools for System Vulnerabilities = 584
• 27.6 The Following Tools Are Used to Enhance Security in Web Applications = 584
• 27.7 Part 4 : Research Projects = 585
• Index = 589