Pfleeger C.P., Pfleeger S.L. Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

Prentice Hall, 2011. - 848 pages
ISBN: 0132789469Analyzing Computer Security is a fresh, modern, and relevant introduction to computer security. Organized around today’s key attacks, vulnerabilities, and countermeasures, it helps you think critically and creatively about computer security—so you can prevent serious problems and mitigate the effects of those that still occur.In this new book, renowned security and software engineering experts Charles P. Pfleeger and Shari Lawrence Pfleeger—authors of the classic Security in Computing—teach security the way modern security professionals approach it: by identifying the people or things that may cause harm, uncovering weaknesses that can be exploited, and choosing and applying the right protections. With this approach, not only will you study cases of attacks that have occurred, but you will also learn to apply this methodology to new situations.The book covers hot button issues, such as authentication failures, network interception, and denial of service. You also gain new insight into broader themes, including risk analysis, usability, trust, privacy, ethics, and forensics. One step at a time, the book systematically helps you develop the problem-solving skills needed to protect any information infrastructure.Coverage includes
Understanding threats, vulnerabilities, and countermeasures
Knowing when security is useful, and when it’s useless security theater
Implementing effective identification and authentication systems
Using modern cryptography and overcoming weaknesses in cryptographic systems
Protecting against malicious code: viruses, Trojans, worms, rootkits, keyloggers, and more
Understanding, preventing, and mitigating DOS and DDOS attacks
Architecting more secure wired and wireless networks
Building more secure application software and operating systems through more solid designs and layered protection
Protecting identities and enforcing privacy
Addressing computer threats in critical areas such as cloud computing, e-voting, cyberwarfare, and social mediaDr. Charles P. Pfleeger, an independent computer and information security consultant, provides threat/vulnerability analysis, design review, training, expert testimony, and security advice to clients worldwide. He was master security architect at Cable and Wireless and Exodus Communications, and professor of computer science at the University of Tennessee. Dr. Pfleeger is coauthor of Security in Computing, Fourth Edition (Prentice Hall, 2007), today’s leading college computer security textbook. Dr Charles P Pfleeger is the co-author of Analyzing Computer Security (2011) and Security in Computing (of which the current-4th-edition, was published in 2007). An independent consultant with the Pfleeger Consulting Group, he provides computer and information security advice to commercial and government clients throughout the world. Prior to establishing his consulting practice, he was a Master Security Architect with Cable and Wireless and Exodus Communications. Serving as Director of European Operations of Trusted Information Systems (UK) Ltd, he managed to office in London and interacted with colleagues and clients in Europe. As a professor in the Computer Science Department of the University of Tennessee, he led the Chancellor's computer literacy committee and directed the first Tennessee Governor's School for the Sciences. He has lectured at many universities and industrial locations. In his spare time he volunteers with Habitat for Humanity, with which he has helped on the construction of over 100 homes for low-income families in Washington D.C. He is also an accomplished pastry chef.Dr. Shari Lawrence Pfleeger is Director of Research for the Institute for Information Infrastructure Protection at Dartmouth College, a consortium working to protect the U.S. cyber infrastructure. The Journal of Systems and Software has repeatedly named her one of the world’s top software engineering researchers. Dr. Pfleeger is coauthor of Security in Computing, Fourth Edition (Prentice Hall, 2007), today’s leading college computer security textbook.