SECURING THE INFORMATION INFRASTRUCTURE

By PAUL ANDERSON

INTRODUCTION PROBLEMS WITH BUILDING TRUST STEPS TO BUILDING TRUST CONCLUSTION REFERENCES CHAPTER II NEED FOR MORALITY AND ETHICS MORALITY ETHICS CODES OF PROFESSIONAL RESPONSIBILITY THE RELEVANCY OF ETHICS IN MODERN LIFE CONCLUSION CHAPTER III BUILDING AN ETHICAL FRAMEWORK FOR DECISION MAKING PRINCIPLE OF DUTY OF CARE WORK AND DECISION MAKING PILLARS OF A WORKING LIFE NEED FOR AN ETHICAL EDUCATION DECISION MAKING AND THE ETHICAL FRAMEWORK CHAPTER IV SECURITY, ANONYMITY, AND PRIVACY SECURITY THE IMPORTANCE OF INFORMATION SECURITY GOVERNMENT AND INTERNATIONAL SECURITY STANDARDS INFORMATION SECURITY EVALUATION CRITERIA PRIVACY PRIVACY AND SECURITY IN CYBERSPACE SECTION II: SECURITY THROUGH INNOVATIVE HARDWARE AND SOFTWARE SYSTEMS CHAPTER V SOFTWARE STANDARDS, RELIABILITY, SAFETY, AND RISK THE ROLE OF SOFTWARE IN THE SECURITY OF COMPUTING SYSTEMS SOFTWARE STANDARDS RELIABILITY SOFTWARE SECURITY CAUSES OF SOFTWARE FAILURES CHAPTER VI NETWORK BASICS AND SECURING THE NETWORK INFRASTRUCTURE COMPUTER NETWORK BASICS NETWORK PROTOCOLS AND LAYERING NETWORK SERVICES NETWORK CONNECTING DEVICES SECURING THE NETWORK INFRASTRUCTURE: BEST PRACTICES CHAPTER VII SECURITY THREATS AND VULNERABILITIES TYPES OF THREATS AND VULNERABILITIES SOURCES OF INFORMATION SECURITY THREATS BEST PRACTICES OF ONLINE SECURITY APPENDIX: ADDITIONAL READING CHAPTER VIII SECURITY POLICIES AND RISK ANALYSIS INFORMATION SECURITY POLICY ASPECTS OF SECURITY POLICIES BUILDING A SECURITY POLICY TYPES OF SECURITY POLICIES CHAPTER IX SECURITY ANALYSIS, ASSESSMENT, AND ASSURANCE THREAT IDENTIFICATION SECURITY BY ANALYSIS SECURITY ASSESSMENT AND ASSURANCE CHAPTER X ACCESS CONTROL, AUTHENTICATION, AND AUTHORIZATION DEFINITIONS ACCESS CONTROL AUTHENTICATION AUTHORIZATION CHAPTER XI PERIMETER DEFENSE: THE FIREWALL TYPES OF FIREWALLS OTHER FIREWALLS VIRTUAL PRIVATE NETWORK FIREWALL ISSUES BEFORE INSTALLATION CONFIGURATION AND IMPLEMENTATION OF A FIREWALL ADVANTAGES OF FIREWALLS DISADVANTAGES OF FIREWALLS SECURING A NETWORK BY A FIREWALL CHAPTER XII INTRUSION DETECTION AND PREVENTION SYSTEMS BACKGROUND OF INTRUSION DETECTION BASIC MODULES OF AN INTRUSION DETECTION SYSTEM INTRUSION DETECTION MODELS RESPONSES TO INTRUSION DETECTION REPORTS TYPES OF INTRUSION DETECTION SYSTEMS CHALLENGES FOR INTRUSION DETECTION INTRUSION PREVENTION SYSTEMS (IPSS) CHAPTER XIII SECURITY IN WIRELESS SYSTEMS TYPES OF WIRELESS TECHNOLOGY THE WIRELESS COMMUNICATION INFRASTRUCTURE WIRELESS LOCAL AREA NETWORK (WLAN): WIRELESS FIDELITY (WI-FI) SECURITY ISSUES IN WIRELESS SYSTEMS BEST PRACTICES FOR WI-FI SECURITY CHAPTER XIV BIOMETRICS FOR ACCESS CONTROL HISTORY OF BIOMETRICS BIOMETRIC AUTHENTICATION SYSTEM BIOMETRIC IDENTIFIERS ADVANTAGES OF BIOMETRICS DISADVANTAGES OF BIOMETRICS WHY BIOMETRICS ARE NOT TRULY ACCEPTED THE FUTURE OF BIOMETRICS SECTION III: SECURITY THROUGH THE LEGAL SYSTEM CHAPTER XV DIGITAL EVIDENCE AND COMPUTER CRIME NATURE OF DIGITAL EVIDENCE IMPORTANCE OF DIGITAL EVIDENCE RELIABILITY OF DIGITAL EVIDENCE THE NEED FOR STANDARDIZATION PROPOSED STANDARDS FOR THE EXCHANGE OF DIGITAL EVIDENCE THE PROCESS OF DIGITAL EVIDENCE ACQUISITION INVESTIGATIVE PROCEDURES REFERENCES316 CHAPTER XVI DIGITAL CRIME INVESTIGATION AND FORENSICS DEFINITION COMPUTER FORENSICS HISTORY OF COMPUTER FORENSICS NETWORK FORENSICS FORENSICS ANALYSIS FORENSICS TOOLS SECTION IV: WHAT NEXT? CHAPTER XVII TRENDS IN INFORMATION ASSURANCE GLOBAL INFORMATION ASSURANCE INITIATIVES AND TRENDS NATIONAL AND INTERNATIONAL INFORMATION SECURITY INITIATIVES CERTIFICATION PROGRAMS