Information Security Principles and Practice 1st Edition by Mark Stamp ISBN 0471738484 9780471738480

 Information Security: Principles and Practice 1st edition by Mark Stamp- Ebook PDF Instant Download/Delivery.0471738484  , 978-0471738480
Full download Information Security Principles and Practice 1st  Edition after payment

 

Product details:

ISBN 10:       0471738484 
ISBN 13: 978-0471738480
Author:         Mark Stamp

As businesses and consumers become more dependent on complex multinational information systems, the need to understand and devise sound information security systems has never been greater. This title takes a practical approach to information security by focusing on real–world examples. While not sidestepping the theory, the emphasis is on developing the skills and knowledge that security and information technology students and professionals need to face their challenges. The book is organized around four major themes:
∗ Cryptography: classic cryptosystems, symmetric key cryptography, public key cryptography, hash functions, random numbers, information hiding, and cryptanalysis
∗ Access control: authentication and authorization, password–based security, ACLs and capabilities, multilevel and multilateral security, covert channels and inference control, BLP and Biba′s models, firewalls, and intrusion detection systems
∗ Protocols: simple authentication protocols, session keys, perfect forward secrecy, timestamps, SSL, IPSec, Kerberos, and GSM
∗ Software: flaws and malware, buffer overflows, viruses and worms, software reverse engineering, digital rights management, secure software development, and operating systems security

Additional features include numerous figures and tables to illustrate and clarify complex topics, as well as problems–ranging from basic to challenging–to help readers apply their newly developed skills. A solutions manual and a set of classroom–tested PowerPoint(r) slides will assist instructors in their course development. Students and professors in information technology, computer science, and engineering, and professionals working in the field will find this reference most useful to solve their information security issues.

An Instructor′s Manual presenting detailed solutions to all the problems in the book is available from the Wiley editorial department.

Information Security Principles and Practice 1st  Table of contents:

Part I: Introduction to Information Security

1. Introduction to Information Security

   • What is Information Security?
   • Key Concepts and Terminology
   • The Importance of Information Security
   • Historical Context and Evolution of Information Security

2. The Information Security Landscape

   • Types of Threats and Attacks
   • Vulnerabilities in Information Systems
   • Risk Assessment and Management
   • Key Security Frameworks and Standards

---

Part II: Core Principles of Information Security

3. Confidentiality, Integrity, and Availability (CIA Triad)

   • Understanding the CIA Triad
   • Maintaining Data Confidentiality
   • Ensuring Data Integrity
   • Ensuring Data Availability

4. Authentication, Authorization, and Accounting (AAA)

   • Principles of Authentication
   • Implementing Access Control
   • Logging and Auditing User Activity

5. Security Policies and Procedures

   • The Role of Security Policies
   • Creating and Implementing Security Policies
   • Security Procedures and Best Practices
   • Compliance with Legal and Regulatory Requirements

---

Part III: Technical Foundations of Information Security

6. Cryptography: Securing Information

   • Introduction to Cryptography
   • Symmetric and Asymmetric Encryption
   • Hash Functions and Digital Signatures
   • Key Management and Cryptographic Protocols

7. Network Security

   • Secure Network Design and Architecture
   • Firewalls, IDS/IPS, and VPNs
   • Network Protocols and Security
   • Secure Wireless Networks

8. Operating System Security

   • Hardening Operating Systems
   • Secure Configuration and Patch Management
   • User Account Control and Permissions
   • Malware Prevention and Detection

---

Part IV: Risk Management and Threat Mitigation

9. Risk Management in Information Security

   • Risk Identification and Assessment
   • Quantifying and Prioritizing Risks
   • Risk Treatment Strategies
   • Continuously Managing Risks

10. Incident Response and Disaster Recovery

    • Building an Incident Response Plan
    • Detecting and Responding to Security Incidents
    • Business Continuity and Disaster Recovery Planning
    • Post-Incident Analysis and Reporting

11. Security Testing and Auditing

    • Penetration Testing and Vulnerability Assessments
    • Auditing Information Security Systems
    • Common Security Testing Tools and Techniques
    • Security Metrics and Reporting

---

Part V: Specialized Areas in Information Security

12. Cloud Security

    • Risks and Challenges in Cloud Computing
    • Securing Cloud Environments
    • Cloud Security Models and Standards
    • Data Privacy and Compliance in the Cloud

13. Mobile and Endpoint Security

    • Securing Mobile Devices and Apps
    • Endpoint Protection and Management
    • Mobile Device Management (MDM) Solutions
    • Security Challenges in Bring Your Own Device (BYOD)

14. Cybersecurity Threat Intelligence and Monitoring

    • Threat Intelligence Collection and Analysis
    • Security Operations Centers (SOC)
    • Real-Time Security Monitoring
    • Identifying and Mitigating Emerging Threats

---

Part VI: Advanced Topics in Information Security

15. Advanced Cryptographic Techniques

    • Public Key Infrastructure (PKI)
    • Digital Certificates and Trust Models
    • Advanced Encryption Standards (AES)
    • Quantum Cryptography and Future Trends

16. Artificial Intelligence and Machine Learning in Information Security

    • Leveraging AI/ML for Threat Detection
    • Automated Incident Response Systems
    • Behavioral Analytics in Cybersecurity
    • Challenges and Ethical Considerations

17. Ethical Hacking and Offensive Security

    • The Role of Ethical Hacking
    • Penetration Testing Methodologies
    • Legal and Ethical Implications of Hacking
    • Building a Red Team

---

Part VII: Governance and Compliance

18. Security Governance

    • The Role of Governance in Security Strategy
    • Aligning Information Security with Business Objectives
    • Governance Frameworks and Standards
    • Measuring and Reporting Security Effectiveness

19. Compliance with Legal and Regulatory Standards

    • Key Laws and Regulations in Information Security
    • GDPR, HIPAA, PCI DSS, and Other Compliance Frameworks
    • Ensuring Legal Compliance in Security Programs
    • Preparing for Audits and Inspections

People also search for Information Security Principles and Practice 1st :

information security principles and practice 3rd edition
stamp m 2011 information security principles and practice wiley
computer security principles and practice answers
cryptography and network security principles and practice amazon
basic principles of information security