Information Security
Information Security
复制标题
DOI：
10.1002/9781118027974
复制
发表时间：
2005-10
期刊：
影响因子：
--
通讯作者：
M. Stamp
中科院分区：
文献类型：
--
作者：
M. Stamp
现在更新您的21世纪信息安全专家指南信息安全是一个快速发展的领域。随着企业和消费者越来越依赖复杂的跨国信息系统，保护数据的机密性和完整性比以往任何时候都更加迫切。这本全面更新和修订的《信息安全：原则和实践》以最新安全问题的广泛新信息为特色，为读者提供了应对任何信息安全挑战所需的技能和知识。通过关注真实世界的例子，本书采取了一种实用的信息安全方法，围绕四个主要主题进行组织：密码学：经典密码系统、对称密钥密码学、公钥密码学、散列函数、随机数、信息隐藏和密码分析访问控制：身份验证和授权、基于密码的安全性、ACL和功能、多级安全和分区、秘密通道和推理控制、安全模型(如BLP和Biba的模型)、防火墙和入侵检测系统协议：简单身份验证协议、会话密钥、完美前向保密、时间戳、SSH、SSL、IPSec、Kerberos、WEP和GMSof：缺陷和恶意软件、缓冲区溢出、病毒和蠕虫、恶意软件检测软件逆向工程、数字版权管理、安全软件开发和操作系统安全本第二版对相关安全主题进行了新的讨论，如SSH和WEP协议、实用的RSA计时攻击、僵尸网络和安全认证。增加了新的背景材料，包括一个关于谜语密码的部分，以及对经典的“橙色书”安全观点的报道。此外，还提供了一组大大扩展和升级的家庭作业问题，以及许多新的图形、表格和图表来说明和澄清复杂的主题和问题。我们提供了一套经过课堂测试的全面的PowerPoint幻灯片和解决方案手册，以帮助课程开发。在提供清晰、可访问的内容的同时，信息安全最大限度地减少了理论，仍然是信息技术、计算机科学和工程领域的学生和教师以及这些领域的专业人员的首选教材。
Now updatedyour expert guide to twenty-first century information securityInformation security is a rapidly evolving field. As businesses and consumers become increasingly dependent on complex multinational information systems, it is more imperative than ever to protect the confidentiality and integrity of data. Featuring a wide array of new information on the most current security issues, this fully updated and revised edition of Information Security: Principles and Practice provides the skills and knowledge readers need to tackle any information security challenge. Taking a practical approach to information security by focusing on real-world examples, this book is organized around four major themes: Cryptography: classic cryptosystems, symmetric key cryptography, public key cryptography, hash functions, random numbers, information hiding, and cryptanalysisAccess control: authentication and authorization, password-based security, ACLs and capabilities, multilevel security and compartments, covert channels and inference control, security models such as BLP and Biba's model, firewalls, and intrusion detection systemsProtocols: simple authentication protocols, session keys, perfect forward secrecy, timestamps, SSH, SSL, IPSec, Kerberos, WEP, and GSMSoftware: flaws and malware, buffer overflows, viruses and worms, malware detection, software reverse engineering, digital rights management, secure software development, and operating systems securityThis Second Edition features new discussions of relevant security topics such as the SSH and WEP protocols, practical RSA timing attacks, botnets, and security certification. New background material has been added, including a section on the Enigma cipher and coverage of the classic "orange book" view of security. Also featured are a greatly expanded and upgraded set of homework problems and many new figures, tables, and graphs to illustrate and clarify complex topics and problems. A comprehensive set of classroom-tested PowerPoint slides and a solutions manual are available to assist in course development.Minimizing theory while providing clear, accessible content, Information Security remains the premier text for students and instructors in information technology, computer science, and engineering, as well as for professionals working in these fields.