Del i serien Pearson IT Cybersecurity Curriculum (ITCC)

Computer Security Fundamentals

Name: Computer Security Fundamentals
SKU: 9780137984787
Price: 779 SEK
Availability: InStock
Author: William Easttom II
ISBN: 9780137984787

Häftad, Engelska, 2023

AvWilliam Easttom II

779 kr

Beställningsvara. Skickas inom 7-10 vardagar. Fri frakt för medlemmar vid köp för minst 249 kr.

ONE-VOLUME INTRODUCTION TO COMPUTER SECURITY

Clearly explains core concepts, terminology, challenges, technologies, and skills

Covers today's latest attacks and countermeasures

The perfect beginner's guide for anyone interested in a computer security career

Dr. Chuck Easttom brings together complete coverage of all basic concepts, terminology, and issues, along with all the skills you need to get started. Drawing on 30 years of experience as a security instructor, consultant, and researcher, Easttom helps you take a proactive, realistic approach to assessing threats and implementing countermeasures. Writing clearly and simply, he addresses crucial issues that many introductory security books ignore, while addressing the realities of a world where billions of new devices are Internet-connected.

This guide covers web attacks, hacking, spyware, network defense, security appliances, VPNs, password use, and much more. Its many tips and examples refl ect new industry trends and the state-of-the-art in both attacks and defense. Exercises, projects, and review questions in every chapter help you deepen your understanding and apply all you've learned.

LEARN HOW TO

Identify and prioritize potential threats to your network
Use basic networking knowledge to improve security
Get inside the minds of hackers, so you can deter their attacks
Implement a proven layered approach to network security
Resist modern social engineering attacks
Defend against today's most common Denial of Service (DoS) attacks
Halt viruses, spyware, worms, Trojans, and other malware
Prevent problems arising from malfeasance or ignorance
Choose the best encryption methods for your organization
Compare security technologies, including the latest security appliances
Implement security policies that will work in your environment
Scan your network for vulnerabilities
Evaluate potential security consultants
Master basic computer forensics and know what to do if you're attacked
Learn how cyberterrorism and information warfare are evolving

Produktinformation

Utgivningsdatum2023-01-19
Mått178 x 232 x 34 mm
Vikt980 g
FormatHäftad
SpråkEngelska
SeriePearson IT Cybersecurity Curriculum (ITCC)
Antal sidor576
Upplaga5
FörlagPearson Education
ISBN9780137984787

Tillhör följande kategorier

Nätverk och kommunikation inom Data och it

Dr. Chuck Easttom is the author of 37 books, including several on computer security, forensics, and cryptography. He has also authored scientific papers on digital forensics, cyber warfare, cryptography, and applied mathematics. He is an inventor with 25 computer science patents. He holds a doctor of science degree in cybersecurity (dissertation topic: a study of lattice-based algorithms for post quantum cryptography), a Ph.D. in Computer Science (dissertation topic: "A Systematic Framework for Network Forensics Using Graph Theory"), and a Ph.D. in Nanotechnology (dissertation topic: "The Effects of Complexity on Carbon Nanotube Failures") and three master's degrees (one in applied computer science, one in education, and one in systems engineering). He also holds more than 70 industry certifications (CISSP, CEH, etc.). He is a frequent speaker at cybersecurity, computer science, and engineering conferences. He is a Distinguished Speaker and senior member of the ACM and a senior member of the IEEE. You can find out more about Dr. Easttom and his research at www.ChuckEasttom.com.

Introduction xxixChapter 1: Introduction to Computer Security 2Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2How Seriously Should You Take Threats to Network Security?. . . . . . . . . . 4Identifying Types of Threats.. . . . . . . . . . . . . . . . . . . . . . . . 7Assessing the Likelihood of an Attack on Your Network.. . . . . . . . . . . . 17Basic Security Terminology. . . . . . . . . . . . . . . . . . . . . . . . 18Concepts and Approaches.. . . . . . . . . . . . . . . . . . . . . . . . 21How Do Legal Issues Impact Network Security?.. . . . . . . . . . . . . . . 24Online Security Resources.. . . . . . . . . . . . . . . . . . . . . . . . 25Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Chapter 2: Networks and the Internet 34Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Network Basics.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 35How the Internet Works. . . . . . . . . . . . . . . . . . . . . . . . . 43History of the Internet.. . . . . . . . . . . . . . . . . . . . . . . . . . 50Basic Network Utilities.. . . . . . . . . . . . . . . . . . . . . . . . . 52Other Network Devices.. . . . . . . . . . . . . . . . . . . . . . . . . 59Advanced Network Communications Topics.. . . . . . . . . . . . . . . . 60Cloud Computing. . . . . . . . . . . . . . . . . . . . . . . . . . . . 61Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65Chapter 3: Cyber Stalking, Fraud, and Abuse 74Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74How Internet Fraud Works.. . . . . . . . . . . . . . . . . . . . . . . . 75Identity Theft.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80Cyber Stalking.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82Protecting Yourself Against Cybercrime.. . . . . . . . . . . . . . . . . . 91Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99Chapter 4: Denial of Service Attacks 106Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106DoS Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107Illustrating an Attack.. . . . . . . . . . . . . . . . . . . . . . . . . . 107Common Tools Used for DoS Attacks.. . . . . . . . . . . . . . . . . . . 109DoS Weaknesses.. . . . . . . . . . . . . . . . . . . . . . . . . . . 112Specific DoS Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . 112Real-World Examples of DoS Attacks.. . . . . . . . . . . . . . . . . . . 120How to Defend Against DoS Attacks.. . . . . . . . . . . . . . . . . . . 121Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123Chapter 5: Malware 130Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130Viruses.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131Trojan Horses.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142The Buffer-Overflow Attack. . . . . . . . . . . . . . . . . . . . . . . 145Spyware.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146Other Forms of Malware.. . . . . . . . . . . . . . . . . . . . . . . . 149Detecting and Eliminating Viruses and Spyware. . . . . . . . . . . . . . . 153Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159Chapter 6: Techniques Used by Hackers 166Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166Basic Terminology.. . . . . . . . . . . . . . . . . . . . . . . . . . . 167The Reconnaissance Phase.. . . . . . . . . . . . . . . . . . . . . . . 167Actual Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 177Malware Creation. . . . . . . . . . . . . . . . . . . . . . . . . . . 184Penetration Testing.. . . . . . . . . . . . . . . . . . . . . . . . . . 187The Dark Web. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194Chapter 7: Industrial Espionage in Cyberspace 200Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200What Is Industrial Espionage?.. . . . . . . . . . . . . . . . . . . . . . 202Information as an Asset. . . . . . . . . . . . . . . . . . . . . . . . . 203Real-World Examples of Industrial Espionage.. . . . . . . . . . . . . . . 205How Does Espionage Occur?. . . . . . . . . . . . . . . . . . . . . . 207Protecting Against Industrial Espionage.. . . . . . . . . . . . . . . . . . 212Trade Secrets.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215The Industrial Espionage Act.. . . . . . . . . . . . . . . . . . . . . . 218Spear Phishing.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 219Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220Chapter 8: Encryption 226Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226Cryptography Basics.. . . . . . . . . . . . . . . . . . . . . . . . . . 227History of Encryption.. . . . . . . . . . . . . . . . . . . . . . . . . . 228Modern Cryptography Methods.. . . . . . . . . . . . . . . . . . . . . 236Public Key (Asymmetric) Encryption.. . . . . . . . . . . . . . . . . . . 245PGP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250Legitimate Versus Fraudulent Encryption Methods.. . . . . . . . . . . . . 251Digital Signatures. . . . . . . . . . . . . . . . . . . . . . . . . . . 252Hashing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253MAC and HMAC.. . . . . . . . . . . . . . . . . . . . . . . . . . . 254Steganography. . . . . . . . . . . . . . . . . . . . . . . . . . . . 255Cryptanalysis.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257Cryptography Used on the Internet.. . . . . . . . . . . . . . . . . . . . 259Quantum Computing Cryptography. . . . . . . . . . . . . . . . . . . . 259Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261Chapter 9: Computer Security Technology 268Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268Virus Scanners.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 269Firewalls.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272Antispyware.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278IDSs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279Digital Certificates.. . . . . . . . . . . . . . . . . . . . . . . . . . . 292SSL/TLS.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293Virtual Private Networks.. . . . . . . . . . . . . . . . . . . . . . . . 296Wi-Fi Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299Chapter 10: Security Policies 304Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304What Is a Policy?.. . . . . . . . . . . . . . . . . . . . . . . . . . . 305Important Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . 305Defining User Policies.. . . . . . . . . . . . . . . . . . . . . . . . . 308Defining System Administration Policies.. . . . . . . . . . . . . . . . . . 316Security Breaches.. . . . . . . . . . . . . . . . . . . . . . . . . . . 319Defining Access Control.. . . . . . . . . . . . . . . . . . . . . . . . 321Development Policies.. . . . . . . . . . . . . . . . . . . . . . . . . 322Standards, Guidelines, and Procedures.. . . . . . . . . . . . . . . . . . 323Disaster Recovery.. . . . . . . . . . . . . . . . . . . . . . . . . . . 324Zero Trust.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327Important Laws.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 328Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330Chapter 11: Network Scanning and Vulnerability Scanning 336Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336Basics of Assessing a System.. . . . . . . . . . . . . . . . . . . . . . 337Securing Computer Systems.. . . . . . . . . . . . . . . . . . . . . . 346Scanning Your Network. . . . . . . . . . . . . . . . . . . . . . . . . 352Testing and Scanning Standards.. . . . . . . . . . . . . . . . . . . . . 363Getting Professional Help.. . . . . . . . . . . . . . . . . . . . . . . . 366Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369Chapter 12: Cyber Terrorism and Information Warfare 378Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378Actual Cases of Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 379Weapons of Cyber Warfare.. . . . . . . . . . . . . . . . . . . . . . . 382Economic Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . 384Military Operations Attacks. . . . . . . . . . . . . . . . . . . . . . . 386General Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 387Supervisory Control and Data Acquisitions (SCADA).. . . . . . . . . . . . . 387Information Warfare.. . . . . . . . . . . . . . . . . . . . . . . . . . 388Actual Cases of Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 391Future Trends.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 395Defense Against Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 399Terrorist Recruiting and Communication.. . . . . . . . . . . . . . . . . . 399TOR and the Dark Web.. . . . . . . . . . . . . . . . . . . . . . . . . 400Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402Chapter 13: Cyber Detective 408Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 408General Searches. . . . . . . . . . . . . . . . . . . . . . . . . . . 410Company Searches.. . . . . . . . . . . . . . . . . . . . . . . . . . 413Court Records and Criminal Checks.. . . . . . . . . . . . . . . . . . . 413Usenet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417Google.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418Maltego. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421Chapter 14: Introduction to Forensics 426Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426General Guidelines. . . . . . . . . . . . . . . . . . . . . . . . . . . 427Finding Evidence on a PC. . . . . . . . . . . . . . . . . . . . . . . . 440Finding Evidence in System Logs.. . . . . . . . . . . . . . . . . . . . 441Getting Back Deleted Files.. . . . . . . . . . . . . . . . . . . . . . . 442Operating System Utilities. . . . . . . . . . . . . . . . . . . . . . . . 445The Windows Registry. . . . . . . . . . . . . . . . . . . . . . . . . 447Mobile Forensics: Cell Phone Concepts.. . . . . . . . . . . . . . . . . . 452The Need for Forensic Certification.. . . . . . . . . . . . . . . . . . . . 457Expert Witnesses.. . . . . . . . . . . . . . . . . . . . . . . . . . . 458Additional Types of Forensics.. . . . . . . . . . . . . . . . . . . . . . 459Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463Chapter 15: Cybersecurity Engineering 466Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466Defining Cybersecurity Engineering.. . . . . . . . . . . . . . . . . . . . 467Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475SecML. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480Modeling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491Glossary 494Appendix A: Resources 500Appendix B: Answers to the Multiple Choice Questions 502 9780137984787, TOC, 12/6/2022

Mer från samma författare

Network Defense and Countermeasures

William Easttom II

Häftad, 2024

889 kr

Penetration Testing Fundamentals

William Easttom II

Häftad, 2018

1 239 kr

Network Defense and Countermeasures

William Easttom II

Häftad, 2018

1 269 kr

Mer från samma serie

Network Defense and Countermeasures

William Easttom II

Häftad, 2024

889 kr

Complete A+ Guide to IT Hardware and Software

Cheryl Schmidt, Christopher Lee

Häftad, 2025

1 239 kr

Developing Cybersecurity Programs and Policies in an AI-Driven World

Omar Santos

Häftad, 2024

829 kr

Du kanske också är intresserad av

Network Defense and Countermeasures

William Easttom II

Häftad, 2024

889 kr

Network Defense and Countermeasures

William Easttom II

Häftad, 2018

1 269 kr

Penetration Testing Fundamentals

William Easttom II

Häftad, 2018

1 239 kr

Computer Networks and Internets, Global Edition

Douglas Comer

Häftad, 2015

1 159 kr

Nyhet

Del 7

Fördrivaren

Viveca Sten

Inbunden, 2026

289 kr319 kr

Complete A+ Guide to IT Hardware and Software

Cheryl Schmidt, Christopher Lee

Häftad, 2025

1 239 kr

Developing Cybersecurity Programs and Policies in an AI-Driven World

Omar Santos

Häftad, 2024

829 kr

Ruth Kvarnström-Jones - Systrarna på Sophiahemmet, Inbunden

Nyhet

Del 3

Systrarna på Sophiahemmet

Ruth Kvarnström-Jones

Inbunden, 2026

299 kr329 kr

Autobiography of Red

Anne Carson

Häftad, 1999

249 kr

Nyhet

Allt det blå på himlen

Mélissa Da Costa

Pocket, 2026

79 kr129 kr

Del i serien Pearson IT Cybersecurity Curriculum (ITCC)

Computer Security Fundamentals

Häftad, Engelska, 2023

AvWilliam Easttom II

779 kr

Beställningsvara. Skickas inom 7-10 vardagar. Fri frakt för medlemmar vid köp för minst 249 kr.

ONE-VOLUME INTRODUCTION TO COMPUTER SECURITY

Clearly explains core concepts, terminology, challenges, technologies, and skills

Covers today's latest attacks and countermeasures

The perfect beginner's guide for anyone interested in a computer security career

LEARN HOW TO

Identify and prioritize potential threats to your network
Use basic networking knowledge to improve security
Get inside the minds of hackers, so you can deter their attacks
Implement a proven layered approach to network security
Resist modern social engineering attacks
Defend against today's most common Denial of Service (DoS) attacks
Halt viruses, spyware, worms, Trojans, and other malware
Prevent problems arising from malfeasance or ignorance
Choose the best encryption methods for your organization
Compare security technologies, including the latest security appliances
Implement security policies that will work in your environment
Scan your network for vulnerabilities
Evaluate potential security consultants
Master basic computer forensics and know what to do if you're attacked
Learn how cyberterrorism and information warfare are evolving

Produktinformation

Utgivningsdatum2023-01-19
Mått178 x 232 x 34 mm
Vikt980 g
FormatHäftad
SpråkEngelska
SeriePearson IT Cybersecurity Curriculum (ITCC)
Antal sidor576
Upplaga5
FörlagPearson Education
ISBN9780137984787

Tillhör följande kategorier

Nätverk och kommunikation inom Data och it

Introduction xxixChapter 1: Introduction to Computer Security 2Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2How Seriously Should You Take Threats to Network Security?. . . . . . . . . . 4Identifying Types of Threats.. . . . . . . . . . . . . . . . . . . . . . . . 7Assessing the Likelihood of an Attack on Your Network.. . . . . . . . . . . . 17Basic Security Terminology. . . . . . . . . . . . . . . . . . . . . . . . 18Concepts and Approaches.. . . . . . . . . . . . . . . . . . . . . . . . 21How Do Legal Issues Impact Network Security?.. . . . . . . . . . . . . . . 24Online Security Resources.. . . . . . . . . . . . . . . . . . . . . . . . 25Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Chapter 2: Networks and the Internet 34Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34Network Basics.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 35How the Internet Works. . . . . . . . . . . . . . . . . . . . . . . . . 43History of the Internet.. . . . . . . . . . . . . . . . . . . . . . . . . . 50Basic Network Utilities.. . . . . . . . . . . . . . . . . . . . . . . . . 52Other Network Devices.. . . . . . . . . . . . . . . . . . . . . . . . . 59Advanced Network Communications Topics.. . . . . . . . . . . . . . . . 60Cloud Computing. . . . . . . . . . . . . . . . . . . . . . . . . . . . 61Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65Chapter 3: Cyber Stalking, Fraud, and Abuse 74Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74How Internet Fraud Works.. . . . . . . . . . . . . . . . . . . . . . . . 75Identity Theft.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80Cyber Stalking.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82Protecting Yourself Against Cybercrime.. . . . . . . . . . . . . . . . . . 91Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99Chapter 4: Denial of Service Attacks 106Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106DoS Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107Illustrating an Attack.. . . . . . . . . . . . . . . . . . . . . . . . . . 107Common Tools Used for DoS Attacks.. . . . . . . . . . . . . . . . . . . 109DoS Weaknesses.. . . . . . . . . . . . . . . . . . . . . . . . . . . 112Specific DoS Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . 112Real-World Examples of DoS Attacks.. . . . . . . . . . . . . . . . . . . 120How to Defend Against DoS Attacks.. . . . . . . . . . . . . . . . . . . 121Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123Chapter 5: Malware 130Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130Viruses.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131Trojan Horses.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142The Buffer-Overflow Attack. . . . . . . . . . . . . . . . . . . . . . . 145Spyware.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146Other Forms of Malware.. . . . . . . . . . . . . . . . . . . . . . . . 149Detecting and Eliminating Viruses and Spyware. . . . . . . . . . . . . . . 153Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159Chapter 6: Techniques Used by Hackers 166Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166Basic Terminology.. . . . . . . . . . . . . . . . . . . . . . . . . . . 167The Reconnaissance Phase.. . . . . . . . . . . . . . . . . . . . . . . 167Actual Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 177Malware Creation. . . . . . . . . . . . . . . . . . . . . . . . . . . 184Penetration Testing.. . . . . . . . . . . . . . . . . . . . . . . . . . 187The Dark Web. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194Chapter 7: Industrial Espionage in Cyberspace 200Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200What Is Industrial Espionage?.. . . . . . . . . . . . . . . . . . . . . . 202Information as an Asset. . . . . . . . . . . . . . . . . . . . . . . . . 203Real-World Examples of Industrial Espionage.. . . . . . . . . . . . . . . 205How Does Espionage Occur?. . . . . . . . . . . . . . . . . . . . . . 207Protecting Against Industrial Espionage.. . . . . . . . . . . . . . . . . . 212Trade Secrets.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215The Industrial Espionage Act.. . . . . . . . . . . . . . . . . . . . . . 218Spear Phishing.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 219Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220Chapter 8: Encryption 226Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226Cryptography Basics.. . . . . . . . . . . . . . . . . . . . . . . . . . 227History of Encryption.. . . . . . . . . . . . . . . . . . . . . . . . . . 228Modern Cryptography Methods.. . . . . . . . . . . . . . . . . . . . . 236Public Key (Asymmetric) Encryption.. . . . . . . . . . . . . . . . . . . 245PGP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250Legitimate Versus Fraudulent Encryption Methods.. . . . . . . . . . . . . 251Digital Signatures. . . . . . . . . . . . . . . . . . . . . . . . . . . 252Hashing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253MAC and HMAC.. . . . . . . . . . . . . . . . . . . . . . . . . . . 254Steganography. . . . . . . . . . . . . . . . . . . . . . . . . . . . 255Cryptanalysis.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257Cryptography Used on the Internet.. . . . . . . . . . . . . . . . . . . . 259Quantum Computing Cryptography. . . . . . . . . . . . . . . . . . . . 259Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261Chapter 9: Computer Security Technology 268Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268Virus Scanners.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 269Firewalls.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272Antispyware.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278IDSs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279Digital Certificates.. . . . . . . . . . . . . . . . . . . . . . . . . . . 292SSL/TLS.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293Virtual Private Networks.. . . . . . . . . . . . . . . . . . . . . . . . 296Wi-Fi Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299Chapter 10: Security Policies 304Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304What Is a Policy?.. . . . . . . . . . . . . . . . . . . . . . . . . . . 305Important Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . 305Defining User Policies.. . . . . . . . . . . . . . . . . . . . . . . . . 308Defining System Administration Policies.. . . . . . . . . . . . . . . . . . 316Security Breaches.. . . . . . . . . . . . . . . . . . . . . . . . . . . 319Defining Access Control.. . . . . . . . . . . . . . . . . . . . . . . . 321Development Policies.. . . . . . . . . . . . . . . . . . . . . . . . . 322Standards, Guidelines, and Procedures.. . . . . . . . . . . . . . . . . . 323Disaster Recovery.. . . . . . . . . . . . . . . . . . . . . . . . . . . 324Zero Trust.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327Important Laws.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 328Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330Chapter 11: Network Scanning and Vulnerability Scanning 336Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336Basics of Assessing a System.. . . . . . . . . . . . . . . . . . . . . . 337Securing Computer Systems.. . . . . . . . . . . . . . . . . . . . . . 346Scanning Your Network. . . . . . . . . . . . . . . . . . . . . . . . . 352Testing and Scanning Standards.. . . . . . . . . . . . . . . . . . . . . 363Getting Professional Help.. . . . . . . . . . . . . . . . . . . . . . . . 366Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369Chapter 12: Cyber Terrorism and Information Warfare 378Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378Actual Cases of Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 379Weapons of Cyber Warfare.. . . . . . . . . . . . . . . . . . . . . . . 382Economic Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . 384Military Operations Attacks. . . . . . . . . . . . . . . . . . . . . . . 386General Attacks.. . . . . . . . . . . . . . . . . . . . . . . . . . . . 387Supervisory Control and Data Acquisitions (SCADA).. . . . . . . . . . . . . 387Information Warfare.. . . . . . . . . . . . . . . . . . . . . . . . . . 388Actual Cases of Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 391Future Trends.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 395Defense Against Cyber Terrorism.. . . . . . . . . . . . . . . . . . . . . 399Terrorist Recruiting and Communication.. . . . . . . . . . . . . . . . . . 399TOR and the Dark Web.. . . . . . . . . . . . . . . . . . . . . . . . . 400Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402Chapter 13: Cyber Detective 408Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 408General Searches. . . . . . . . . . . . . . . . . . . . . . . . . . . 410Company Searches.. . . . . . . . . . . . . . . . . . . . . . . . . . 413Court Records and Criminal Checks.. . . . . . . . . . . . . . . . . . . 413Usenet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417Google.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418Maltego. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421Chapter 14: Introduction to Forensics 426Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426General Guidelines. . . . . . . . . . . . . . . . . . . . . . . . . . . 427Finding Evidence on a PC. . . . . . . . . . . . . . . . . . . . . . . . 440Finding Evidence in System Logs.. . . . . . . . . . . . . . . . . . . . 441Getting Back Deleted Files.. . . . . . . . . . . . . . . . . . . . . . . 442Operating System Utilities. . . . . . . . . . . . . . . . . . . . . . . . 445The Windows Registry. . . . . . . . . . . . . . . . . . . . . . . . . 447Mobile Forensics: Cell Phone Concepts.. . . . . . . . . . . . . . . . . . 452The Need for Forensic Certification.. . . . . . . . . . . . . . . . . . . . 457Expert Witnesses.. . . . . . . . . . . . . . . . . . . . . . . . . . . 458Additional Types of Forensics.. . . . . . . . . . . . . . . . . . . . . . 459Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463Chapter 15: Cybersecurity Engineering 466Introduction.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466Defining Cybersecurity Engineering.. . . . . . . . . . . . . . . . . . . . 467Standards.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 475SecML. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480Modeling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489Summary.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491Glossary 494Appendix A: Resources 500Appendix B: Answers to the Multiple Choice Questions 502 9780137984787, TOC, 12/6/2022