Fundamentals Of Network Security

by John E Canavan

Overview

Many books focus on one operating system when considering network security. John E. Canavan's reference work covers principles and practical applications that can be used with all operating systems.

Product Details

ISBN-13:	9781580531764
Publisher:	Artech House, Incorporated
Publication date:	01/31/2001
Series:	Artech House Telecommunications Library Series
Pages:	340
Product dimensions:	6.00(w) x 9.00(h) x 0.88(d)

About the Author

John E. Canavan is vice president, information systems and technology at Chevron Federal Credit Union and an adjunct professor at Golden Gate University where he teaches in the Telecommunications Management program. He holds a B.S. in information systems from Quinnipiac University and a M.S. in telecommunications management from Golden Gate University.

Table of Contents

Contents:
Basic Security Concepts – Why is Computer and Network Security Important. Background and History. The Security Trinity. Information Security. Risk Assessment. Security Models. Basic Terminology. More Basic Terminology.

Threats, Vulnerabilities and Attacks – Protocols. The OSI Reference Model. TCP/IP Protocol Suite. Useful Web Sites. Search Engines. Mailing Lists.

Encryption, Digital Signatures and Certification – Cryptography. Stream Ciphers. Breaking Ciphers. Block Ciphers. Encryption. Public Key Cryptosystems. Message Integrity. Authentication. Digital Signatures. Competing Standards. Digital Certificates. Limitations of Digital Certificates. Certificate Authorities. Public Key Infrastructure. The Future. The Limitations of Encryption.

Kerberos – How Kerberos Works. Kerberos' Limitations.

Encryption on the WWW - The World Wide Web. Secure Sockets Layer (HTTPS). Secure HTTP (SHTTP). Microsoft's Internet Explorer. Viewing Digital Certificates with Internet Explorer. Viewing the Encryption Strength of IE5. Viewing Certification Authorities with IE5. Netscape Navigator. Viewing Digital Certificates with Navigator. Authenticode Certificates.

E-Mail – E-Mail Issues. E-Mail Issues. Secure E-Mail Protocols. Web-Based E-Mail Services. Security of Stored Messages. Identity: Spoofing and Hiding. E-Mail as a weapon. E-Mail Policies. E-Mail Privacy. Auto-Responses.

Operating System Security – Passwords. Password Attacks. Onetime Passwords. Access Control. Data Redundancy. General Recommendations. Modems. Useful Tools.

LAN Security - LAN Guidelines. Controlling End-User Access. Concurrent Logins. Available DiskSpace. Restrictions to Location or Workstation. Time/Day Restrictions. Access to Directories and Trustee Rights. File Attributes. Other Privileges. Single Sign-On. Policy-Based Network Management. Honeypot Systems. Network Segmentation. Static IP Addresses vs. DHCP

Media and Protocols - Network Media. Plenum Cabling and Risers. WANs. Redundancy and Alternative Connections.

Routers and SNMP - Router Issues. SNMP.

Virtual Private Networks - Encryption on the Network. Node-to-Node Encryption. End-to-End Encryption. Where to Encrypt. Virtual Private Networks. PPTP. L2TP. IPSec. SOCKS.

Firewalls - Firewalls Pros and Cons. Types of Firewalls. Packet Filters vs. Proxies. Firewall Configurations. Restricting Users' Access to the Internet. Firewall Products. Personal Firewalls

Biometrics – Identification and Authentication. Biometric Identification and Authentication. Biometric Identification Reliability. Backup Authentication. Environmental Conditions. User Acceptance. Security of the Biometric System. Interoperability. Costs vs. Savings.

Policies and Procedures – Policies vs. Procedures. Information Security Policy Objectives. Developing Security Policies. Policy and Procedure Manuals. Policy Awareness & Education. Policy Enforcement. Policy Format. Security Policy Suggestions. Information Protection Team. Crisis Management Planning. Sources for Information Policies.

Auditing and Intrusion Detection - What is an Audit. Operational Security Audits. System Security Auditing. Activity and Usage Auditing. Audit Mistakes. Deficiencies of Traditional Audit Techniques. Intrusion Detection. Intrusion Detection Systems. Host-Based Intrusion Detection Systems. Network-Based Intrusion Detection Systems. Knowledge-Based Intrusion Detection Systems. Statistical-Based Intrusion Detection Systems. Defense In-Depth Approach . Future Directions.

Crisis Management Planning - Crisis Management. Disaster Recovery Planning. Computer Security Incident Response Plan.

Browser Security – Cookie Files. Cache Files. Autocomplete.

Editorial Reviews

Overviews basic network security concepts, principles, and terms that are applicable to all operating systems, while focusing on security from a management perspective. The author provides advice on how to identify the best type of intrusion detection system for a particular environment, develop organizational guidelines for passwords, set general computer security policies, and perform a security review and risk assessment. Specific tools that can be used to test, strengthen, monitor, and protect systems are presented. The topics include cryptography, digital signatures and certificates, encryption on the web, biometrics, virtual private network protocols, and firewalls. Annotation c. Book News, Inc., Portland, OR (booknews.com)

Booknews