Description

Features

• NEW - Features new coverage of network security (firewalls, privacy enhancements for e-mail—PEM and PGP, secure network management, address spoofing, authentication and authorization in distributed systems, Kerberos, DCE, SESAME, CORBA, virtual private networks).

• NEW - Includes new coverage of security in programs (viruses, worms, the Morris/Internet worm, Trojan horses, other malicious code, covert leakage channels, program development and management controls).

• NEW - Presents new coverage of trust (security policies, models, security enforcement mechanisms, secure design, assurance, evaluation criteria, the U.S. "Orange Book" or TCSEC, the European ITSEC, the harmonized Common Criteria, evaluation).

• NEW - Offers new coverage of management/administration of security (security administration for PCs, UNIX systems, and networks, security plans, organizational security policies, physical security management, risk management/analysis, contingency planning).

• Provides coverage that is extremely up to date.

• Offers extended coverage of network security issues.

• Explains cryptology in depth.

• Brings together core computer science concepts of operating systems, networks, database management systems, and program development techniques, while making accessible the mathematical and formal topics of computation complexity, number theory, cryptography, and protocols.

• Contains pedagogical aids, such as an overview of key points to be learned in the chapter, a review of what the chapter has covered, a list of new terms and concepts, notes on key bibliographic references, and exercises to check understanding.

• Offers a layered presentation and comprehensive coverage of all aspects of security, allowing instructors to decide which topics to cover and how deeply to cover them.

• Covers key topics—vulnerabilities and controls—to the security of today’s information systems, including Firewalls, Privacy enhanced e-mail (PEM, PGP), Viruses, worms, Trojan horses, other malicious code, Cryptographic key escrow (e.g., "Clipper" /Fortezza), Risks in the World Wide Web and the Internet, Software quality, including ISO 9000 and the SEI CMM, Password security, Contingency planning, Digital signatures, including DSS, Public key cryptosystems, including RSA and El Gamal, Assurance evaluation—the Common Criteria, the ITSEC, the U.S. "Orange Book", Management and administration of secure installations, Security for the PC user—standalone and networked, and Risk analysis.

• Offers over 175 exercises and six case studies.

New To This Edition

• Features new coverage of network security (firewalls, privacy enhancements for e-mail—PEM and PGP, secure network management, address spoofing, authentication and authorization in distributed systems, Kerberos, DCE, SESAME, CORBA, virtual private networks).

• Includes new coverage of security in programs (viruses, worms, the Morris/Internet worm, Trojan horses, other malicious code, covert leakage channels, program development and management controls).

• Presents new coverage of trust (security policies, models, security enforcement mechanisms, secure design, assurance, evaluation criteria, the U.S. "Orange Book" or TCSEC, the European ITSEC, the harmonized Common Criteria, evaluation).

• Offers new coverage of management/administration of security (security administration for PCs, UNIX systems, and networks, security plans, organizational security policies, physical security management, risk management/analysis, contingency planning).

Table of Contents



Preface.


1. Is There a Security Problem in Computing?

Courses

Network Security  [PTG: PRENTICE HALL PROFESSIONAL]   (Computer Science)

Next Edition(s)

• Instructor's Manual, 4/E
  Pfleeger & Pfleeger
  ©2007  |  Prentice Hall  |  Paper; 96 pp  |  Instock
  ISBN-10: 0132342596  |  ISBN-13: 9780132342599
  More Info
  

• Security in Computing, 4/E
  Pfleeger & Pfleeger
  ©2007  |  Prentice Hall  |  Cloth; 880 pp  |  Instock
  ISBN-10: 0132390779  |  ISBN-13: 9780132390774
  Suggested retail price: $109.00  Buy from myPearsonStoreNet price: $74.12  (What's this?)More Info
  

Backcover Copy

33748-5

Every day, more and more critical information is created, transmitted, and archived by computers. This ever-growing reliance on technology has made computer security a higher priority than ever before, yet the pace of computer development has far outstripped the improvements in computer security. Today's computer professionals need a comprehensive understanding of all aspects of security in computing.

Security in Computing is the most complete and up-to-date college textbook now available. Enlivened by actual case studies and supported by more than 175 exercises, the book covers:

• Viruses, worms, Trojan horses, and other forms of malicious code
• Firewalls and the protection of networked systems
• E-mail privacy, including PEM, PGP, key management, and certificates
• Key escrow—both as a technology and in the “Clipper” program
• Evaluation of trusted systems, including the Common Criteria, the ITSEC, and the Orange Book
• Standards for program development and quality, including ISO9000 and SEI CMM
• Administering secure installations of PCs, UNIX¨, and networked environments
• Ethical and legal issues in computing

A modular, layered structure makes Security in Computing ideal for classroom use as well as a reference for professionals. Once the basic tools have been covered, the remaining chapters can be studied in any order, and to any depth desired.

Since the publication of the first edition in 1989, the number of threats to secure computing have increased, but so have the available countermeasures. This second edition has been thoroughly revised to reflect teaching experiences with the first edition and to incorporate all the latest information on computer security.

Pearson Higher Education offers special pricing when you choose to package your text with other student resources. If you're interested in creating a cost-saving package for your students contact your Pearson Higher Education representative.