For computer-security courses that are taught at the undergraduate level and that have as their sole prerequisites an introductory computer science sequence (e.g., CS 1/CS 2).
A new Computer Security textbook for a new generation of IT professionals.
Unlike most other computer security textbooks available today, Introduction to Computer Security, 1e does NOT focus on the mathematical and computational foundations of security, and it does not assume an extensive background in computer science. Instead it looks at the systems, technology, management, and policy side of security, and offers students fundamental security concepts and a working knowledge of threats and countermeasures with “just-enough” background in computer science. The result is a presentation of the material that is accessible to students of all l
1 Introduction
1.1 Fundamental Concepts
1.2 Access Control Models
1.3 Cryptographic Concepts
1.4 Implementation and Usability Issues
1.5 Exercises
2 Physical Security
2.1 Physical Protections and Attacks
2.2 Locks and Safes
2.3 Authentication Technologies
2.4 Direct Attacks Against Computers
2.5 Special-Purpose Machines
2.6 Physical Intrusion Detection
2.7 Exercises
3 Operating Systems Security
3.1 Operating Systems Concepts
3.2 Process Security
3.3 Memory and Filesystem Security
3.4 Application Program Security
3.5 Exercises
4 Malware
4.1 Insider Attacks
4.2 Computer Viruses
4.3 Malware Attacks
4.4 Privacy-Invasive Software
4.5 Countermeasures
4.6 Exercises
5 Network Security I
5.1 Network Security Concepts
5.2 The Link Layer
5.3 The Network Layer
5.4 The Transport Layer
5.5 Denial-of-Service Attacks
5.6 Exercises
6 Network Security II
6.1 The Application Layer and DNS
6.2 Firewalls
6.3 Tunneling
6.4 Intrusion Detection
6.5 Wireless Networking
6.6 Exercises
7 Web Security
7.1 The World Wide Web
7.2 Attacks on Clients
7.3 Attacks on Servers
7.4 Exercises
8 Cryptography
8.1 Symmetric Cryptography
8.2 Public-Key Cryptography
8.3 Cryptographic Hash Functions
8.4 Digital Signatures
8.5 Details on AES and RSA
8.6 Exercises
9 Security Models and Practice
9.1 Policy, Models, and Trust
9.2 Access Control Models
9.3 Security Standards and Evaluation
9.4 Software Vulnerability Assessment
9.5 Administration and Auditing
9.6 Kerberos
9.7 Secure Storage
9.8 Exercises
10 Distributed-Applications Security
10.1 Database Security
10.2 Email Security
10.3 Payment Systems and Auctions
10.4 Digital Rights Management
10.5 Social Networking
10.6 Voting Systems
10.7 Exercises
