Analyzing Computer Security A Threat/Vulnerability/Countermeasure Approach

The Modern Introduction to Computer Security: Understand Threats, Identify Their Causes, and Implement Effective Countermeasures

In this new book, renowned security and software engineering experts Charles P. Pfleeger and Shari Lawrence Pfleeger-authors of the classic Security in Computing-teach security the way modern security professionals approach it: by identifying the people or things that may cause harm, uncovering weaknesses that can be exploited, and choosing and applying the right protections. With this approach, not only will you study cases of attacks that have occurred, but you will also learn to apply this methodology to new situations.

The book covers "hot button" issues, such as authentication failures, network interception, and denial of service. You also gain new insight into broader themes, including risk analysis, usability, trust, privacy, ethics, and forensics. One step at a time, the book systematically helps you develop the problem-solving skills needed to protect any information infrastructure.

Coverage includes

• Understanding threats, vulnerabilities, and countermeasures
• Knowing when security is useful, and when it's useless "security theater"
• Implementing effective identification and authentication systems
• Using modern cryptography and overcoming weaknesses in cryptographic systems
• Protecting against malicious code: viruses, Trojans, worms, rootkits, keyloggers, and more
• Understanding, preventing, and mitigating DOS and DDOS attacks
• Architecting more secure wired and wireless networks
• Building more secure application software and operating systems through more solid designs and layered protection
• Protecting identities and enforcing privacy
• Addressing computer threats in critical areas such as cloud computing, e-voting, cyberwarfare, and social media