|
![]() |
|||
|
||||
OverviewWelcome to today’s most useful and practical one-volume introduction to computer security. Chuck Easttom brings together up-to-the-minute coverage of all basic concepts, terminology, and issues, along with all the skills you need to get started in the field. Drawing on his extensive experience as a security instructor and consultant, Easttom thoroughly covers core topics, such as vulnerability assessment, virus attacks, hacking, spyware, network defense, passwords, firewalls, VPNs, and intrusion detection. Writing clearly and simply, he fully addresses crucial issues that many introductory security books ignore, from industrial espionage to cyberbullying. Computer Security Fundamentals, Second Edition is packed with tips and examples, all extensively updated for the state-of-the-art in both attacks and defense. Each chapter offers exercises, projects, and review questions designed to deepen your understanding and help you apply all you’ve learned. Whether you’re a student, a system or network administrator, a manager, or a law enforcement professional, this book will help you protect your systems and data and expand your career options. Learn how to Identify the worst threats to your network and assess your risks Get inside the minds of hackers, so you can prevent their attacks Implement a proven layered approach to network security Use basic networking knowledge to improve security Resist the full spectrum of Internet-based scams and frauds Defend against today’s most common Denial of Service (DoS) attacks Prevent attacks by viruses, spyware, and other malware Protect against low-tech social engineering attacks Choose the best encryption methods for your organization Select firewalls and other security technologies Implement security policies that will work in your environment Scan your network for vulnerabilities Evaluate potential security consultants Understand cyberterrorism and information warfare Master basic computer forensics and know what to do after you’re attacked Full Product DetailsAuthor: William (Chuck) Easttom, II , William (Chuck) Easttom, IIPublisher: Pearson Education (US) Imprint: Pearson IT Certification Edition: 2nd edition Dimensions: Width: 18.00cm , Height: 2.00cm , Length: 23.20cm Weight: 0.544kg ISBN: 9780789748904ISBN 10: 0789748908 Pages: 352 Publication Date: 05 January 2012 Audience: Adult education , Professional and scholarly , Further / Higher Education , Professional & Vocational Replaced By: 9780789757463 Format: Paperback Publisher's Status: Out of Print Availability: Awaiting stock ![]() Table of ContentsIntroduction 1 Chapter 1: Introduction to Computer Security Introduction How Seriously Should You Take Threats to Network Security? Identifying Types of Threats Malware Compromising System Security Denial of Service Attacks Web Attacks Session Hijacking DNS Poisoning Assessing the Likelihood of an Attack on Your Network Basic Security Terminology Hacker Slang Professional Terms Concepts and Approaches How Do Legal Issues Impact Network Security? Online Security Resources CERT Microsoft Security Advisor F-Secure SANS Institute Summary Test Your Skills Chapter 2: Networks and the Internet Introduction Network Basics The Physical Connection: Local Networks Faster Connection Speeds Data Transmission How the Internet Works IP Addresses CIDR Uniform Resource Locators History of the Internet Basic Network Utilities IPConfig Ping Tracert Other Network Devices Advanced Network Communications Topics The OSI Model Media Access Control (MAC) Addresses Summary Test Your Skills Chapter 3: Cyber Stalking, Fraud, and Abuse Introduction How Internet Fraud Works Investment Offers Auction Frauds Identity Theft Phishing Cyber Stalking Laws about Internet Fraud Protecting Yourself against Cyber Crime Protecting against Investment Fraud Protecting against Identity Theft Secure Browser Settings Summary Test Your Skills Chapter Footnotes Chapter 4: Denial of Service Attacks Introduction Denial of Service Illustrating an Attack Common Tools Used for DoS DoS Weaknesses Specific DoS Attacks Land Attack Distributed Denial of Service (DDoS) Summary Test Your Skills Chapter 5: Malware Introduction Viruses How a Virus Spreads Recent Virus Examples W32/Netsky-P Troj/Invo-Zip MacDefender The Sobig Virus The Mimail Virus The Bagle Virus A Nonvirus Virus Rules for Avoiding Viruses Trojan Horses . The Buffer-Overflow Attack The Sasser Virus/Buffer Overflow Spyware Legal Uses of Spyware How Is Spyware Delivered to a Target System? Obtaining Spyware Software Other Forms of Malware Rootkit Malicious Web-Based Code Logic Bombs Spam Detecting and Eliminating Viruses and Spyware Antivirus Software Antispyware Software Summary Test Your Skills Chapter 6: Techniques Used by Hackers Introduction Basic Terminology The Reconnaissance Phase Passive Scanning Techniques Active Scanning Techniques Actual Attacks SQL Script Injection Cross-Site Scripting Password Cracking Summary Test Your Skills Chapter 7: Industrial Espionage in Cyberspace Introduction What Is Industrial Espionage? Information as an Asset Real-World Examples of Industrial Espionage Example 1: VIA Technology Example 2: General Motors Example 3: Interactive Television Technologies, Inc. Example 4: Bloomberg, Inc Example 5: Avant Software Industrial Espionage and You How Does Espionage Occur? Low-Tech Industrial Espionage Spyware Used in Industrial Espionage Steganography Used in Industrial Espionage Phone Taps and Bugs Protecting against Industrial Espionage Industrial Espionage Act Spear Phishing Summary Test Your Skills Chapter 8: Encryption Introduction Cryptography Basics History of Encryption The Caesar Cipher Multi-Alphabet Substitution Binary Operations Modern Methods Single-Key (Symmetric) Encryption Public Key (Asymmetric) Encryption Legitimate Versus Fraudulent Encryption Methods Digital Signatures Hashing Authentication Encryptions Used in Internet Virtual Private Networks PPTP L2TP IPsec Summary Test Your Skills Chapter 9: Computer Security Software Introduction Virus Scanners How Does a Virus Scanner Work? Virus-Scanning Techniques Commercial Antivirus Software Firewalls Benefits and Limitation of Firewalls Firewall Types and Components How Firewalls Examine Packets Firewall Configurations Commercial and Free Firewall Products Firewall Logs Antispyware Intrusion-Detection Software IDS Categorization IDS Approaches Snort Honey Pots Other Preemptive Techniques Summary Test Your Skills Chapter 10: Security Policies Introduction What Is a Policy Defining User Policies Passwords Internet Use Email Usage Installing/Uninstalling Software Instant Messaging Desktop Configuration Final Thoughts on User Policies Defining System Administration Policies New Employees Departing Employees Change Requests Security Breaches Virus Infection Denial of Service Attacks Intrusion by a Hacker Defining Access Control Developmental Policies Standards, Guidelines, and Procedures Summary Test Your Skills Chapter 11: Network Scanning and Vulnerability Scanning Introduction Basics of Assessing a System Patch Ports Protect Policies Probe Physical Securing Computer Systems Securing an Individual Workstation Securing a Server Securing a Network Scanning Your Network MBSA NESSUS Getting Professional Help Summary Test Your Skills Chapter 12: Cyber Terrorism and Information Warfare Introduction Actual Cases of Cyber Terrorism China Eagle Union Economic Attacks Military Operations Attacks General Attacks Supervisory Control and Data Acquisitions Information Warfare Propaganda Information Control Disinformation Actual Cases Future Trends Positive Trends Negative Trends Defense against Cyber Terrorism Summary Test Your Skills Chapter 13: Cyber Detective Introduction General Searches Court Records and Criminal Checks Sex Offender Registries Civil Court Records Other Resources Usenet Summary Test Your Skills Chapter 14: Introduction to Forensics Introduction General Guidelines Don’t Touch the Suspect Drive Document Trail Secure the Evidence FBI Forensics Guidelines Finding Evidence on the PC Finding Evidence in the Browser Finding Evidence in System Logs Windows Logs Linux Logs Getting Back Deleted Files Operating System Utilities Net Sessions Openfiles Fc Netstat The Windows Registry Summary Test Your Skills Appendix A: Glossary Appendix B: Resources General Computer Crime and Cyber Terrorism General Knowledge Cyber Stalking Identity Theft Port Scanners and Sniffers Password Crackers Countermeasures Spyware Counter Spyware Cyber Investigation Tools General Tools Virus Research 9780789748904 TOC 12/6/2011ReviewsAuthor InformationChuck Easttom has been in the IT industry for many years working in all aspects including network administration, software engineering, and IT managementFor the past 10 years he has been parttime teaching at colleges and doing corporate trainingFor the past 7 years, he has also been an independent consultant working with a variety of companies and serving as an expert consultant/witness in various computer casesChuck holds more than 28 different IT industry certifications, including the CISSP, ISSAP, Certified Ethical Hacker, Certified Hacking Forensics Investigator, EC Council Certified Security Administrator, and EC Council Certified InstructorHe has served as a subject matter expert for the Computer Technology Industry Association (CompTIA) in the development or revision of four of their certification tests, including the initial creation of their Security+ certification. Most recently he worked with the EC Council to develop their new advanced cryptography course, which he is teaching around the world. In addition to this book, Chuck has authored 12 other titles on topics such as computer security, web development, programming, Linux, and computer crimeChuck also is a frequent guest speaker for computer groups, discussing computer securityYou can reach Chuck at his website www.chuckeasttom.com or by email at chuck@chuckeasttom.com Tab Content 6Author Website:Countries AvailableAll regions |