Information Security: Principles and Practice, 2nd Edition

Information Security: Principles and Practice, 2nd Edition

by Mark Stamp
Released May 2011
Publisher(s): Wiley
ISBN: 9780470626399

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

Now updated—your expert guide to twenty-first century information security

Information security is a rapidly evolving field. As businesses and consumers become increasingly dependent on complex multinational information systems, it is more imperative than ever to protect the confidentiality and integrity of data. Featuring a wide array of new information on the most current security issues, this fully updated and revised edition of Information Security: Principles and Practice provides the skills and knowledge readers need to tackle any information security challenge.

Taking a practical approach to information security by focusing on real-world examples, this book is organized around four major themes:

  • Cryptography: classic cryptosystems, symmetric key cryptography, public key cryptography, hash functions, random numbers, information hiding, and cryptanalysis

  • Access control: authentication and authorization, password-based security, ACLs and capabilities, multilevel security and compartments, covert channels and inference control, security models such as BLP and Biba's model, firewalls, and intrusion detection systems

  • Protocols: simple authentication protocols, session keys, perfect forward secrecy, timestamps, SSH, SSL, IPSec, Kerberos, WEP, and GSM

  • Software: flaws and malware, buffer overflows, viruses and worms, malware detection, software reverse engineering, digital rights management, secure software development, and operating systems security

    • This Second Edition features new discussions of relevant security topics such as the SSH and WEP protocols, practical RSA timing attacks, botnets, and security certification. New background material has been added, including a section on the Enigma cipher and coverage of the classic "orange book" view of security. Also featured are a greatly expanded and upgraded set of homework problems and many new figures, tables, and graphs to illustrate and clarify complex topics and problems. A comprehensive set of classroom-tested PowerPoint slides and a solutions manual are available to assist in course development.

    Minimizing theory while providing clear, accessible content, Information Security remains the premier text for students and instructors in information technology, computer science, and engineering, as well as for professionals working in these fields.

    A solutions manual is available. Please email digialo@wiley.com to obtain it.

    Table of contents

    1. Cover
    2. Half Title page
    3. Title page
    4. Copyright page
    5. Dedication
    6. Preface
    7. About The Author
    8. Acknowledgments
    9. Chapter 1: Introduction
      1. 1.1 The Cast of Characters
      2. 1.2 Alice’s Online Bank
      3. 1.3 About This Book
      4. 1.4 The People Problem
      5. 1.5 Principles and Practice
      6. 1.6 Problems
    10. Part I: Crypto
      1. Chapter 2: Crypto Basics
        1. 2.1 Introduction
        2. 2.2 How to Speak Crypto
        3. 2.3 Classic Crypto
        4. 2.4 Modern Crypto History
        5. 2.5 A Taxonomy of Cryptography
        6. 2.6 A Taxonomy of Crypt analysis
        7. 2.7 Summary
        8. 2.8 Problems
      2. Chapter 3: Symmetric Key Crypto
        1. 3.1 Introduction
        2. 3.2 Stream Ciphers
        3. 3.3 Block Ciphers
        4. 3.4 Integrity
        5. 3.5 Summary
        6. 3.6 Problems
      3. Chapter 4: Public Key Crypto
        1. 4.1 Introduction
        2. 4.2 Knapsack
        3. 4.3 RSA
        4. 4.4 Diffie-Hellman
        5. 4.5 Elliptic Curve Cryptography
        6. 4.6 Public Key Notation
        7. 4.7 Uses for Public Key Crypto
        8. 4.8 Public Key Infrastructure
        9. 4.9 Summary
        10. 4.10 Problems
      4. Chapter 5: Hash Functions++
        1. 5.1 Introduction
        2. 5.2 What is a Cryptographic Hash Function?
        3. 5.3 The Birthday Problem
        4. 5.4 A Birthday Attack
        5. 5.5 Non-Cryptographic Hashes
        6. 5.6 Tiger Hash
        7. 5.7 HMAC
        8. 5.8 Uses for Hash Functions
        9. 5.9 Miscellaneous Crypto-Related Topics
        10. 5.10 Summary
        11. 5.11 Problems
      5. Chapter 6: Advanced Cryptanalysis
        1. 6.1 Introduction
        2. 6.2 Enigma
        3. 6.3 RC4 as Used in WEP
        4. 6.4 Linear and Differential Cryptanalysis
        5. 6.5 Lattice Reduction and the Knapsack
        6. 6.6 RSA Timing Attacks
        7. 6.7 Summary
        8. 6.8 Problems
    11. Part II: Access Control
      1. Chapter 7: Authentication
        1. 7.1 Introduction
        2. 7.2 Authentication Methods
        3. 7.3 Passwords
        4. 7.4 Biometrics
        5. 7.5 Something You Have
        6. 7.6 Two-Factor Authentication
        7. 7.7 Single Sign-On and Web Cookies
        8. 7.8 Summary
        9. 7.9 Problems
      2. Chapter 8: Authorization
        1. 8.1 Introduction
        2. 8.2 A Brief History of Authorization
        3. 8.3 Access Control Matrix
        4. 8.4 Multilevel Security Models
        5. 8.5 Compartments
        6. 8.6 Covert Channel
        7. 8.7 Inference Control
        8. 8.8 CAPTCHA
        9. 8.9 Firewalls
        10. 8.10 Intrusion Detection Systems
        11. 8.11 Summary
        12. 8.12 Problems
    12. Part III: Protocols
      1. Chapter 9: Simple Authentication Protocols
        1. 9.1 Introduction
        2. 9.2 Simple Security Protocols
        3. 9.3 Authentication Protocols
        4. 9.4 Authentication and TCP
        5. 9.5 Zero Knowledge Proofs
        6. 9.6 The Best Authentication Protocol?
        7. 9.7 Summary
        8. 9.8 Problems
      2. Chapter 10: Real-World Security Protocols
        1. 10.1 Introduction
        2. 10.2 SSH
        3. 10.3 SSL
        4. 10.4 IPSec
        5. 10.5 Kerberos
        6. 10.6 WEP
        7. 10.7 GSM
        8. 10.8 Summary
        9. 10.9 Problems
    13. Part IV: Software
      1. Chapter 11: Software Flaws and Malware
        1. 11.1 Introduction
        2. 11.2 Software Flaws
        3. 11.3 Malware
        4. 11.4 Botnets
        5. 11.5 Miscellaneous Software-Based Attacks
        6. 11.6 Summary
        7. 11.7 Problems
      2. Chapter 12: Insecurity in Software
        1. 12.1 Introduction
        2. 12.2 Software Reverse Engineering
        3. 12.3 Digital Rights Management
        4. 12.4 Software Development
        5. 12.5 Summary
        6. 12.6 Problems
      3. Chapter 13: Operating Systems and Security
        1. 13.1 Introduction
        2. 13.2 OS Security Functions
        3. 13.3 Trusted Operating System
        4. 13.4 Next Generation Secure Computing Base
        5. 13.5 Summary
        6. 13.6 Problems
    14. Appendix
      1. A-1 Network Security Basics
      2. A-2 Math Essentials
    15. Annotated Bibliography
    16. Index

    Product information

    • Title: Information Security: Principles and Practice, 2nd Edition
    • Author(s): Mark Stamp
    • Release date: May 2011
    • Publisher(s): Wiley
    • ISBN: 9780470626399