Network Security Bible

Eric Cole holds a PhD and CISSP and has been a security consultant for international banks and the Fortune 500. He made his mark working for the CIA for more than seven years and as a member of the Honeynet Project. He was also a member of the Commission on Cyber Security for the 44th Presidency. He has appeared as a security expert on CBS News and 60 Minutes and is a regular security expert for CNN Headline News.

• Introduction xxxvPart I: Network Security LandscapeChapter 1: State of Network Security 3Cyber Security 3Summary 7Chapter 2: New Approaches to Cyber Security 9General Trends 9The Changing Face of Cyber Security 16Summary 17Chapter 3: Interfacing with the Organization 19An Enterprise Security Methodology 19Key Questions to Manage Risk 27Summary 32Part II: Security Principles and PracticesChapter 4: Information System Security Principles 35Key Principles of Network Security 35Formal Processes 37Risk Management 60Calculating and Managing Risk 70Summary 71Chapter 5: Information System Security Management 73Security Policies 73Security Awareness 77Managing the Technical Effort 79Configuration Management 87Business Continuity and Disaster Recovery Planning 90Physical Security 98Legal and Liability Issues 105Summary 107Chapter 6: Access Control 109Control Models 109Types of Access Control Implementations 112Identification and Authentication 115Databases 121Remote Access 123Summary 125Chapter 7: Attacks and Threats 127Malicious Code 127Review of Common Attacks 129External Attack Methodologies Overview 136Internal Threat Overview 140Summary 142Part III: Operating Systems and ApplicationsChapter 8: Windows Security 145Windows Security at the Heart of the Defense 147Out-of-the-Box Operating System Hardening 151Installing Applications 171Putting the Workstation on the Network 175Operating Windows Safely 177Upgrades and Patches 191Maintain and Test the Security 194Attacks Against the Windows Workstation 198Summary 205Chapter 9: UNIX and Linux Security 207The Focus of UNIX/Linux Security 207Physical Security 212Controlling the Configuration 217Operating UNIX Safely 224Hardening UNIX 245Summary 253Chapter 10: Web Browser and Client Security 255Web Browser and Client Risk 255How a Web Browser Works 259Web Browser Attacks 268Operating Safely 271Web Browser Configurations 276Summary 286Chapter 11: Web Security 287What Is HTTP? 287How Does HTTP Work? 289Server Content 301Client Content 303State 309Attacking Web Servers 315Web Services 317Summary 321Chapter 12: Electronic mail (E-mail) Security 323The E-mail Risk 323The E-mail Protocols 340E-mail Authentication 345Operating Safely When Using E-mail 348Summary 355Chapter 13: Domain Name System 357DNS Basics 358Purpose of DNS 364Setting Up DNS 375Security Issues with DNS 377DNS Attacks 384Designing DNS 386Master Slave DNS 388Detailed DNS Architecture 388DNS SEC 389Summary 393Chapter 14: Server Security 395General Server Risks 395Security by Design 396Operating Servers Safely 413Server Applications 417Multi-Level Security and Digital Rights Management 421Summary 427Part IV: Network Security FundamentalsChapter 15: Network Protocols 431Protocols 431The Open Systems Interconnect Model 432The OSI Layers 433The TCP/IP Model 439TCP/IP Model Layers 441Internet Protocol 442VoIP 450Summary 457Chapter 16: Wireless Security 459Electromagnetic Spectrum 459The Cellular Phone Network 462Placing a Cellular Telephone Call 464Wireless Transmission Systems 469Pervasive Wireless Data Network Technologies 473IEEE Wireless LAN Specifications 478IEEE 802.11 480IEEE 802.11 Wireless Security 485Bluetooth 503Wireless Application Protocol 504Future of Wireless 506Summary 508Chapter 17: Network Architecture Fundamentals 509Network Segments 510Perimeter Defense 511Network Address Translation 511Basic Architecture Issues 513Subnetting, Switching, and VLANs 516Address Resolution Protocol and Media Access Control 517Dynamic Host Configuration Protocol and Addressing Control 518Zero Configuration Networks 519System Design and Architecture Against Insider Threats 525Common Attacks 528Summary 529Chapter 18: Firewalls 531Firewalls 531Firewall Rules 537The Use of Personal Firewalls 542Summary 548Chapter 19: Intrusion Detection/Prevention 549Intrusion Detection Systems 549Responses to Intrusion Detection 556Emerging Technologies in Intrusion Detection Systems 556Summary 567Part V: CommunicationChapter 20: Secret Communication 571What is Cryptography? 572General Terms 576Principles of Cryptography 577The Four Cryptographic Primitives 587Putting These Primitives Together to Achieve CIA 602The Difference Between Algorithm and Implementation 603Proprietary Versus Open Source Algorithms 606Attacks on Hash Functions 607Quantum Cryptography 617Summary 628Chapter 21: Covert Communication 631Where Hidden Data Hides 631Where Did It Come From? 633Where Is It Going? 633Overview of Steganography 634History of Steganography 639Core Areas of Network Security and Their Relation to Steganography 641Principles of Steganography 643Steganography Compared to Cryptography 644Types of Steganography 646Products That Implement Steganography 654Steganography Versus Digital Watermarking 673Types of Digital Watermarking 675Goals of Digital Watermarking 676Digital Watermarking and Stego 676Summary 679Chapter 22: Applications of Secure/Covert Communication 681E-mail 682Authentication Servers 685Working Model 686Public Key Infrastructure 688Virtual Private Networks 692Secure Sockets Layer/Transport Layer Security 699SSL Handshake 700Summary 704Part VI: The Security Threat and ResponseChapter 23: Intrusion Detection and Response 707Intrusion Detection Mechanisms 707Honeypots 712Incident Handling 716Summary 727Chapter 24: Digital Forensics 729Computer Forensics Defined 730Traditional Computer Forensics 730Proactive Forensics 746Future Research Areas 748The Forensic Life Cycle 750Summary 750Chapter 25: Security Assessments, Testing, and Evaluation 751Information Assurance Approaches and Methodologies 751Certification and Accreditation 756Diacap 760Federal Information Processing Standard 102 763OMB Circular A-130 764The National Institute of Standards and Technology Assessment Guidelines 765Penetration Testing 770Auditing and Monitoring 772Summary 774Part VII: Integrated Cyber SecurityChapter 26: Validating Your Security 777Overview 777Current State of Penetration Testing 780Formal Penetration Testing Methodology 783Steps to Exploiting a System 787Summary 795Chapter 27: Data Protection 797Endpoint Security 799Insider Threats and Data Protection 805Summary 806Chapter 28: Putting Everything Together 809Critical Problems Facing Organizations 809General Tips for Protecting a Site 815Security Best Practices 819Summary 834Chapter 29: The Future 835Approaching the Problem 835Mission Resilience 837Limiting Failure Points 844Summary 847Index 849