CRCnetBASE - Information Security Management Handbook, Sixth Edition

Information Security Management Handbook, Sixth Edition

Citation Information

Information Security Management Handbook, Sixth Edition

Harold F. Tipton and Micki Krause

CRC Press 2007

Print ISBN: 978-0-8493-7495-1

eBook ISBN: 978-1-4398-3303-2

Table of Contents

Permalink

http://dx.doi.org/10.1201/9781439833032

Download to Citation Mgr

View Abstracts

Add to Bookshelf

Email
Access

Page

Title
V
Front Matter

Abstract - Hi-Res PDF (1157 KB) - PDF w/links (1158 KB)
9
DomainI. Information Security and Risk Management

Abstract - Hi-Res PDF (145 KB) - PDF w/links (146 KB)
9
Chapter 1. Bits to Bytes to Boardroom

Abstract - Hi-Res PDF (135 KB) - PDF w/links (136 KB)
15
Chapter 2. Information Security Governance
Todd Fitzgerald

Abstract - Hi-Res PDF (245 KB) - PDF w/links (246 KB)
35
Chapter 3. Corporate Governance
David C. Krehnke

Abstract - Hi-Res PDF (201 KB) - PDF w/links (201 KB)
45
Chapter 4. IT Governance Institute (ITGI) Overview
David C. Krehnke

Abstract - Hi-Res PDF (142 KB) - PDF w/links (143 KB)
51
Chapter 5. Top Management Support Essential for Effective Information Security
Kenneth J. Knapp, Thomas E. Marshall

Abstract - Hi-Res PDF (165 KB) - PDF w/links (166 KB)
59
Chapter 6. Managing Security by the Standards
Bonnie A. Goins

Abstract - Hi-Res PDF (154 KB) - PDF w/links (155 KB)
67
Chapter 7. Information Security for Mergers and Acquisitions
Craig A. Schiller

Abstract - Hi-Res PDF (294 KB) - PDF w/links (300 KB)
89
Chapter 8. Information Security Governance
Ralph Spencer Poore

Abstract - Hi-Res PDF (140 KB) - PDF w/links (140 KB)
95
Chapter 9. Belts and Suspenders
Jeffrey Davis

Abstract - Hi-Res PDF (120 KB) - PDF w/links (121 KB)
105
Chapter 10. Building Management Commitment through Security Councils, or Security Council Critical Success Factors
Todd Fitzgerald

Abstract - Hi-Res PDF (218 KB) - PDF w/links (219 KB)
123
Chapter 11. Validating Your Business Partners
Jeff Misrahi

Abstract - Hi-Res PDF (163 KB) - PDF w/links (163 KB)
133
Chapter 12. Measuring ROI on Security
Carl F. Endorf

Abstract - Hi-Res PDF (152 KB) - PDF w/links (152 KB)
139
Chapter 13. The Human Side of Information Security
Kevin Henry

Abstract - Hi-Res PDF (198 KB) - PDF w/links (198 KB)
155
Chapter 14. Security Management
Ken Buszta

Abstract - Hi-Res PDF (168 KB) - PDF w/links (169 KB)
165
Chapter 15. It Is All about Control
Chris Hare

Abstract - Hi-Res PDF (186 KB) - PDF w/links (186 KB)
179
Chapter 16. Patch Management 101
Lynda L McGhie

Abstract - Hi-Res PDF (129 KB) - PDF w/links (129 KB)
185
Chapter 17. Security Patch Management
Felicia M. Nicastro

Abstract - Hi-Res PDF (203 KB) - PDF w/links (204 KB)
201
Chapter 18. Configuration Management
Mollie E. Krehnke, Mollie E. Krehnke

Abstract - Hi-Res PDF (269 KB) - PDF w/links (270 KB)
221
Chapter 19. Information Classification
Jim Appleyard

Abstract - Hi-Res PDF (180 KB) - PDF w/links (180 KB)
243
Chapter 20. Ownership and Custody of Data
William Hugh Murray

Abstract - Hi-Res PDF (161 KB) - PDF w/links (162 KB)
251
Chapter 21. Information Security Risk Assessment
Samantha Thomas Cruz

Abstract - Hi-Res PDF (161 KB) - PDF w/links (161 KB)
259
Chapter 22. Developing and Conducting a Security Test and Evaluation
Sean M. Price

Abstract - Hi-Res PDF (155 KB) - PDF w/links (155 KB)
261
Chapter 23. Enterprise Security Management Program
George G. McBride

Abstract - Hi-Res PDF (165 KB) - PDF w/links (165 KB)
271
Chapter 24. Technology Convergence and Security
Ken M. Shaurette

Abstract - Hi-Res PDF (180 KB) - PDF w/links (181 KB)
281
Chapter 25. The Role of Information Security in the Enterprise Risk Management Structure
Carl B. Jackson, Mark Carey

Abstract - Hi-Res PDF (227 KB) - PDF w/links (228 KB)
295
Chapter 26. A Matter of Trust
Ray Kaplan

Abstract - Hi-Res PDF (218 KB) - PDF w/links (219 KB)
311
Chapter 27. Trust Governance in a Web Services World
Daniel D. Houser

Abstract - Hi-Res PDF (188 KB) - PDF w/links (189 KB)
321
Chapter 28. Risk Management and Analysis
Kevin Henry

Abstract - Hi-Res PDF (180 KB) - PDF w/links (184 KB)
331
Chapter 29. New Trends in Information Risk Management
Brett Regan Young

Abstract - Hi-Res PDF (157 KB) - PDF w/links (158 KB)
339
Chapter 30. Cyber-Risk Management
Carol A. Siegel, Ty R. Sagalow, Paul Serritella

Abstract - Hi-Res PDF (235 KB) - PDF w/links (236 KB)
355
Chapter 31. Committee of Sponsoring Organizations (COSO)
Mignona Cote

Abstract - Hi-Res PDF (161 KB) - PDF w/links (162 KB)
367
Chapter 32. Toward Enforcing Security Policy
John O. Wylder

Abstract - Hi-Res PDF (163 KB) - PDF w/links (164 KB)
377
Chapter 33. The Security Policy Life Cycle
Patrick D. Howard

Abstract - Hi-Res PDF (188 KB) - PDF w/links (189 KB)
389
Chapter 34. People, Processes, and Technology
Felicia M. Nicastro

Abstract - Hi-Res PDF (148 KB) - PDF w/links (148 KB)
401
Chapter 35. Building an Effective Privacy Program
Rebecca Herold

Abstract - Hi-Res PDF (170 KB) - PDF w/links (171 KB)
415
Chapter 36. Establishing an E-Mail Retention Policy
Stephen D. Fried

Abstract - Hi-Res PDF (192 KB) - PDF w/links (192 KB)
427
Chapter 37. Ten Steps to Effective Web-Based Security Policy Development and Distribution
Todd Fitzgerald

Abstract - Hi-Res PDF (209 KB) - PDF w/links (209 KB)
443
Chapter 38. Roles and Responsibilities of the Information Systems Security Officer
Carl Burney

Abstract - Hi-Res PDF (136 KB) - PDF w/links (137 KB)
451
Chapter 39. Organizing for Success
Jeffrey H. Fenton, James M. Wolfe

Abstract - Hi-Res PDF (203 KB) - PDF w/links (204 KB)
465
Chapter 40. Information Security Policies from the Ground Up
Brian Shorten

Abstract - Hi-Res PDF (166 KB) - PDF w/links (166 KB)
475
Chapter 41. Policy Development
Chris Hare

Abstract - Hi-Res PDF (260 KB) - PDF w/links (261 KB)
499
Chapter 42. Training Your Employees to Identify Potential Fraud and How to Encourage Them to Come Forward
Rebecca Herold

Abstract - Hi-Res PDF (308 KB) - PDF w/links (277 KB)
521
Chapter 43. Change That Attitude
Samuel W. Chun

Abstract - Hi-Res PDF (174 KB) - PDF w/links (175 KB)
531
Chapter 44. Maintaining Management's Commitment
William Tompkins

Abstract - Hi-Res PDF (177 KB) - PDF w/links (178 KB)
541
Chapter 45. Making Security Awareness Happen
Susan D. Hansche

Abstract - Hi-Res PDF (176 KB) - PDF w/links (177 KB)
555
Chapter 46. Beyond Information Security Awareness Training
Stan Stahl

Abstract - Hi-Res PDF (179 KB) - PDF w/links (180 KB)
567
Chapter 47. Overview of an IT Corporate Security Organization
Jeffrey Davis

Abstract - Hi-Res PDF (161 KB) - PDF w/links (162 KB)
579
Chapter 48. Make Security Part of Your Company's DNA
Ken M. Shaurette

Abstract - Hi-Res PDF (190 KB) - PDF w/links (191 KB)
591
Chapter 49. Building an Effective and Winning
Lynda L. McGhie

Abstract - Hi-Res PDF (183 KB) - PDF w/links (184 KB)
607
Chapter 50. When Trust Goes Beyond the Border
Stephen D. Fried

Abstract - Hi-Res PDF (180 KB) - PDF w/links (181 KB)
619
Chapter 51. Maintaining Information Security during Downsizing
Thomas J. Bray

Abstract - Hi-Res PDF (152 KB) - PDF w/links (153 KB)
625
Chapter 52. The Business Case for Information Security
Sanford Sherizen

Abstract - Hi-Res PDF (130 KB) - PDF w/links (131 KB)
631
Chapter 53. How to Work with a Managed Security Service Provider
Laurie Hill McQuillan

Abstract - Hi-Res PDF (179 KB) - PDF w/links (180 KB)
643
Chapter 54. Considerations for Outsourcing Security
Michael J. Corby

Abstract - Hi-Res PDF (197 KB) - PDF w/links (198 KB)
659
Chapter 55. The Ethical and Legal Concerns of Spyware
Janice C. Sipior, Burke T. Ward, Georgina R. Roselli

Abstract - Hi-Res PDF (234 KB) - PDF w/links (235 KB)
673
Chapter 56. Ethics and the Internet

Abstract - Hi-Res PDF (184 KB) - PDF w/links (185 KB)
685
Chapter 57. Computer Ethics
Peter S. Tippett

Abstract - Hi-Res PDF (212 KB) - PDF w/links (213 KB)
697
DomainII. Access Control

Abstract - Hi-Res PDF (106 KB) - PDF w/links (107 KB)
701
Chapter 58. A Look at RFID Security
Ben Rothke

Abstract - Hi-Res PDF (252 KB) - PDF w/links (253 KB)
707
Chapter 59. New Emerging Information Security Technologies and Solutions
Tara Chand

Abstract - Hi-Res PDF (446 KB) - PDF w/links (447 KB)
739
Chapter 60. Sensitive or Critical Data Access Controls
Mollie E. Krehnke, Mollie E. Krehnke

Abstract - Hi-Res PDF (202 KB) - PDF w/links (202 KB)
751
Chapter 61. An Introduction to Role-Based Access Control
Ian Clark

Abstract - Hi-Res PDF (213 KB) - PDF w/links (214 KB)
765
Chapter 62. Smart Cards
James S. Tiller

Abstract - Hi-Res PDF (173 KB) - PDF w/links (174 KB)
775
Chapter 63. A Guide to Evaluating Tokens
Joseph T. Hootman

Abstract - Hi-Res PDF (189 KB) - PDF w/links (190 KB)
785
Chapter 64. Controlling FTP
Chris Hare

Abstract - Hi-Res PDF (195 KB) - PDF w/links (195 KB)
803
Chapter 65. End Node Security and Network Access Management
Franjo Majstor

Abstract - Hi-Res PDF (475 KB) - PDF w/links (505 KB)
823
Chapter 66. Identity Management
Lynda L. McGhie

Abstract - Hi-Res PDF (211 KB) - PDF w/links (211 KB)
843
Chapter 67. Blended Threat Analysis
Daniel D. Houser

Abstract - Hi-Res PDF (258 KB) - PDF w/links (259 KB)
869
Chapter 68. Enhancing Security through Biometric Technology
Stephen D. Fried

Abstract - Hi-Res PDF (232 KB) - PDF w/links (233 KB)
887
Chapter 69. Single Sign-On for the Enterprise
Ross A. Leo

Abstract - Hi-Res PDF (257 KB) - PDF w/links (258 KB)
909
Chapter 70. Centralized Authentication Services (Radius, Tacacs, Diameter)
Bill Stackpole

Abstract - Hi-Res PDF (228 KB) - PDF w/links (229 KB)
923
Chapter 71. An Introduction to Secure Remote Access
Christina M. Bird

Abstract - Hi-Res PDF (188 KB) - PDF w/links (189 KB)
935
Chapter 72. Hacker Tools and Techniques
Ed Skoudis

Abstract - Hi-Res PDF (228 KB) - PDF w/links (229 KB)
951
Chapter 73. A New Breed of Hacker Tools and Defenses
Ed Skoudis

Abstract - Hi-Res PDF (203 KB) - PDF w/links (204 KB)
965
Chapter 74. Hacker Attacks and Defenses
Ed Skoudis

Abstract - Hi-Res PDF (202 KB) - PDF w/links (202 KB)
977
Chapter 75. Counter-Economic Espionage
Craig A. Schiller

Abstract - Hi-Res PDF (218 KB) - PDF w/links (218 KB)
993
Chapter 76. Insight into Intrusion Prevention Systems
Gildas Deograt-Lumy, Roy Naldo

Abstract - Hi-Res PDF (202 KB) - PDF w/links (203 KB)
1005
Chapter 77. Penetration Testing
Stephen D. Fried

Abstract - Hi-Res PDF (181 KB) - PDF w/links (182 KB)
1019
DomainIII. Auditing Cryptography

Abstract - Hi-Res PDF (104 KB) - PDF w/links (104 KB)
1023
Chapter 78. Auditing Cryptography
Steve Stanek

Abstract - Hi-Res PDF (125 KB) - PDF w/links (126 KB)
1029
Chapter 79. Cryptographic Transitions
Ralph Spencer Poore

Abstract - Hi-Res PDF (171 KB) - PDF w/links (172 KB)
1039
Chapter 80. Blind Detection of Steganographic Content in Digital Images Using Cellular Automata
Sasan Hamidi

Abstract - Hi-Res PDF (225 KB) - PDF w/links (249 KB)
1045
Chapter 81. An Overview of Quantum Cryptography
Ben Rothke

Abstract - Hi-Res PDF (276 KB) - PDF w/links (297 KB)
1059
Chapter 82. Elliptic Curve Cryptography
Paul Lambert

Abstract - Hi-Res PDF (192 KB) - PDF w/links (206 KB)
1067
Chapter 83. Cryptographic Key Management Concepts
Ralph Spencer Poore

Abstract - Hi-Res PDF (246 KB) - PDF w/links (247 KB)
1079
Chapter 84. Message Authentication
James S. Tiller

Abstract - Hi-Res PDF (237 KB) - PDF w/links (238 KB)
1095
Chapter 85. Fundamentals of Cryptography and Encryption
Ronald A. Gove

Abstract - Hi-Res PDF (293 KB) - PDF w/links (301 KB)
1115
Chapter 86. Steganography
Mark Edmead

Abstract - Hi-Res PDF (192 KB) - PDF w/links (216 KB)
1121
Chapter 87. An Introduction to Cryptography
Javek Ikbal

Abstract - Hi-Res PDF (287 KB) - PDF w/links (288 KB)
1141
Chapter 88. Hash Algorithms
Keith Pasley

Abstract - Hi-Res PDF (169 KB) - PDF w/links (169 KB)
1151
Chapter 89. A Look at the Advanced Encryption Standard (AES)
Ben Rothke

Abstract - Hi-Res PDF (181 KB) - PDF w/links (182 KB)
1159
Chapter 90. Principles and Applications of Cryptographic Key Management
William Hugh Murray

Abstract - Hi-Res PDF (327 KB) - PDF w/links (335 KB)
1175
Chapter 91. Preserving Public Key Hierarchy
Geoffrey C. Grabow

Abstract - Hi-Res PDF (156 KB) - PDF w/links (156 KB)
1183
Chapter 92. PKI Registration
Alex Golod

Abstract - Hi-Res PDF (298 KB) - PDF w/links (302 KB)
1197
Chapter 93. Implementing Kerberos in Distributed Systems
Joe Kovara, Ray Kaplan

Abstract - Hi-Res PDF (519 KB) - PDF w/links (519 KB)
1255
Chapter 94. Methods of Attacking and Defending Cryptosystems
Joost Houwen, Joost Houwen

Abstract - Hi-Res PDF (221 KB) - PDF w/links (222 KB)
1271
DomainIV. Physical (Environmental) Security

Abstract - Hi-Res PDF (97 KB) - PDF w/links (97 KB)
1275
Chapter 95. Perimeter Security
R. Scott McCoy, R. Scott McCoy

Abstract - Hi-Res PDF (262 KB) - PDF w/links (262 KB)
1289
Chapter 96. Melding Physical Security and Traditional Information Systems Security
Kevin Henry

Abstract - Hi-Res PDF (93 KB) - PDF w/links (94 KB)
1293
Chapter 97. Physical Security for Mission-Critical Facilities and Data
Gerald Bowman

Abstract - Hi-Res PDF (289 KB) - PDF w/links (297 KB)
1317
Chapter 98. Physical Security
Christopher Steinke

Abstract - Hi-Res PDF (167 KB) - PDF w/links (168 KB)
1327
Chapter 99. Physical Security
Bruce R. Matthews

Abstract - Hi-Res PDF (186 KB) - PDF w/links (186 KB)
1339
Chapter 100. Computing FacilityPhysical Security
Alan Brusewitz

Abstract - Hi-Res PDF (160 KB) - PDF w/links (160 KB)
1349
Chapter 101. Closed-Circuit Television and Video Surveillance
David A. Litzau

Abstract - Hi-Res PDF (143 KB) - PDF w/links (144 KB)
1357
Chapter 102. Types of Information Security Controls

Abstract - Hi-Res PDF (158 KB) - PDF w/links (159 KB)
1367
Chapter 103. Workplace Violence
George Richards

Abstract - Hi-Res PDF (130 KB) - PDF w/links (131 KB)
1373
Chapter 104. Physical Security
Jaymes Williams

Abstract - Hi-Res PDF (236 KB) - PDF w/links (241 KB)
1393
DomainV. Security Architecture and Design

Abstract - Hi-Res PDF (95 KB) - PDF w/links (96 KB)
1397
Chapter 105. Enterprise Assurance
Bonnie A. Goins

Abstract - Hi-Res PDF (136 KB) - PDF w/links (137 KB)
1403
Chapter 106. Creating a Secure Architecture
Christopher A. Pilewski, Bonnie A. Goins

Abstract - Hi-Res PDF (169 KB) - PDF w/links (170 KB)
1413
Chapter 107. Common Models for
Matthew J. Decker

Abstract - Hi-Res PDF (238 KB) - PDF w/links (239 KB)
1431
Chapter 108. The Reality of Virtual Computing
Chris Hare

Abstract - Hi-Res PDF (392 KB) - PDF w/links (419 KB)
1451
Chapter 109. Formulating an Enterprise Information Security Architecture
Mollie E. Krehnke, David C. Krehnke

Abstract - Hi-Res PDF (212 KB) - PDF w/links (213 KB)
1469
Chapter 110. Security Architecture and Models
Foster J. Henderson, Kellina M. Craig-Henderson

Abstract - Hi-Res PDF (230 KB) - PDF w/links (231 KB)
1487
Chapter 111. The Common Criteria for IT Security Evaluation
Debra S. Herrmann

Abstract - Hi-Res PDF (178 KB) - PDF w/links (179 KB)
1501
Chapter 112. Common System Design Flaws and Security Issues
William Hugh Murray

Abstract - Hi-Res PDF (144 KB) - PDF w/links (145 KB)
1511
DomainVI. Business Continuity Planning and Disaster Recovery Planning

Abstract - Hi-Res PDF (101 KB) - PDF w/links (102 KB)
1515
Chapter 113. Developing Realistic Continuity Planning Process Metrics
Carl B. Jackson

Abstract - Hi-Res PDF (281 KB) - PDF w/links (282 KB)
1529
Chapter 114. Building Maintenance Processes for Business Continuity Plans
Ken Doughty

Abstract - Hi-Res PDF (169 KB) - PDF w/links (170 KB)
1541
Chapter 115. Identifying Critical Business Functions
Bonnie A. Goins

Abstract - Hi-Res PDF (146 KB) - PDF w/links (146 KB)
1549
Chapter 116. Selecting the Right Business Continuity Strategy
Ken Doughty

Abstract - Hi-Res PDF (146 KB) - PDF w/links (146 KB)
1557
Chapter 117. Contingency Planning Best Practices and Program Maturity
Timothy R. Stacey

Abstract - Hi-Res PDF (203 KB) - PDF w/links (204 KB)
1573
Chapter 118. Reengineering the Business Continuity Planning Process
Carl B. Jackson

Abstract - Hi-Res PDF (300 KB) - PDF w/links (301 KB)
1587
Chapter 119. The Role of Continuity Planning in the Enterprise Risk Management Structure
Carl B. Jackson

Abstract - Hi-Res PDF (197 KB) - PDF w/links (198 KB)
1601
Chapter 120. Contingency at a Glance
Ken M. Shaurette, Thomas J. Schleppenbach

Abstract - Hi-Res PDF (150 KB) - PDF w/links (151 KB)
1611
Chapter 121. The Business Impact Assessment Process and the Importance of Using Business Process Mapping
Carl B. Jackson

Abstract - Hi-Res PDF (232 KB) - PDF w/links (233 KB)
1629
Chapter 122. Testing Business Continuity and Disaster Recovery Plans
James S. Mitts

Abstract - Hi-Res PDF (375 KB) - PDF w/links (386 KB)
1645
Chapter 123. Restoration Component of Business Continuity Planning
John Dorf, Martin Johnson

Abstract - Hi-Res PDF (148 KB) - PDF w/links (149 KB)
1655
Chapter 124. Business Resumption Planning and Disaster Recovery
Kevin Henry

Abstract - Hi-Res PDF (161 KB) - PDF w/links (161 KB)
1665
Chapter 125. Business Continuity Planning
Kevin Henry

Abstract - Hi-Res PDF (167 KB) - PDF w/links (168 KB)
1675
Chapter 126. The Business Impact Assessment Process
Carl B. Jackson

Abstract - Hi-Res PDF (256 KB) - PDF w/links (256 KB)
1693
DomainVII. Telecommunications and Network Security

Abstract - Hi-Res PDF (125 KB) - PDF w/links (125 KB)
1699
Chapter 127. Network Security Utilizing an Adaptable Protocol Framework
Robby Fussell

Abstract - Hi-Res PDF (197 KB) - PDF w/links (198 KB)
1709
Chapter 128. The Five W’s and Designing a Secure, Identity-Based, Self-Defending Network (5W Network)
Samuel W. Chun

Abstract - Hi-Res PDF (232 KB) - PDF w/links (233 KB)
1721
Chapter 129. Maintaining Network Security
Robby Fussell

Abstract - Hi-Res PDF (172 KB) - PDF w/links (173 KB)
1731
Chapter 130. PBX Firewalls
William A. Yarberry

Abstract - Hi-Res PDF (187 KB) - PDF w/links (204 KB)
1739
Chapter 131. Network Security Overview
Bonnie A. Goins, Christopher A. Pilewski

Abstract - Hi-Res PDF (177 KB) - PDF w/links (178 KB)
1751
Chapter 132. Putting Security in the Transport
Chris Hare

Abstract - Hi-Res PDF (229 KB) - PDF w/links (230 KB)
1761
Chapter 133. WLAN Security Update
Franjo Majstor

Abstract - Hi-Res PDF (314 KB) - PDF w/links (332 KB)
1777
Chapter 134. Understanding SSL
Chris Hare

Abstract - Hi-Res PDF (260 KB) - PDF w/links (269 KB)
1791
Chapter 135. Packet Sniffers and Network Monitors
James S. Tiller, Bryan D. Fish

Abstract - Hi-Res PDF (249 KB) - PDF w/links (250 KB)
1811
Chapter 136. Secured Connections to External Networks
Steven F. Blanding

Abstract - Hi-Res PDF (215 KB) - PDF w/links (216 KB)
1827
Chapter 137. Security and Network Technologies
Chris Hare

Abstract - Hi-Res PDF (255 KB) - PDF w/links (256 KB)
1847
Chapter 138. Wired and Wireless Physical Layer Security Issues
James Trulove

Abstract - Hi-Res PDF (144 KB) - PDF w/links (145 KB)
1855
Chapter 139. Network Router Security
Steven F. Blanding

Abstract - Hi-Res PDF (172 KB) - PDF w/links (173 KB)
1867
Chapter 140. What’s Not So Simple about SNMP?
Chris Hare

Abstract - Hi-Res PDF (191 KB) - PDF w/links (199 KB)
1879
Chapter 141. Network and Telecommunications Media
Samuel W. Chun

Abstract - Hi-Res PDF (224 KB) - PDF w/links (224 KB)
1895
Chapter 142. Security and the Physical Network Layer
Matthew J.Decker

Abstract - Hi-Res PDF (171 KB) - PDF w/links (172 KB)
1903
Chapter 143. Wireless LAN Security Challenge
Frandinata Halim, Gildas Deograt-Lumy

Abstract - Hi-Res PDF (224 KB) - PDF w/links (225 KB)
1917
Chapter 144. ISO/OSI and TCP/IP Network Model Characteristics
George G. McBride

Abstract - Hi-Res PDF (191 KB) - PDF w/links (192 KB)
1929
Chapter 145. VoIP Security Issues
Anthony Bruno

Abstract - Hi-Res PDF (237 KB) - PDF w/links (238 KB)
1941
Chapter 146. An Examination of Firewall Architectures
Paul A. Henry

Abstract - Hi-Res PDF (813 KB) - PDF w/links (814 KB)
1997
Chapter 147. Voice over WLAN
Bill Lipiczky

Abstract - Hi-Res PDF (183 KB) - PDF w/links (184 KB)
2007
Chapter 148. Spam Wars
Al Bredenberg

Abstract - Hi-Res PDF (148 KB) - PDF w/links (148 KB)
2013
Chapter 149. Secure Web Services
Lynda L. McGhie

Abstract - Hi-Res PDF (193 KB) - PDF w/links (194 KB)
2025
Chapter 150. IPSec Virtual Private Networks
James S.Tiller

Abstract - Hi-Res PDF (343 KB) - PDF w/links (344 KB)
2051
Chapter 151. Internet Security
Douglas G. Conorich

Abstract - Hi-Res PDF (186 KB) - PDF w/links (186 KB)
2061
Chapter 152. Application-Layer Security Protocols for Networks
Bill Stackpole

Abstract - Hi-Res PDF (231 KB) - PDF w/links (244 KB)
2073
Chapter 153. Application Layer
Keith Pasley

Abstract - Hi-Res PDF (162 KB) - PDF w/links (163 KB)
2083
Chapter 154. Security of Communication Protocols and Services
William Hugh Murray

Abstract - Hi-Res PDF (177 KB) - PDF w/links (178 KB)
2093
Chapter 155. An Introduction to IPSec
Bill Stackpole

Abstract - Hi-Res PDF (177 KB) - PDF w/links (178 KB)
2103
Chapter 156. VPN Deployment and Evaluation Strategy
Keith Pasley

Abstract - Hi-Res PDF (226 KB) - PDF w/links (227 KB)
2123
Chapter 157. Comparing Firewall Technologies
Per Thorsheim

Abstract - Hi-Res PDF (179 KB) - PDF w/links (179 KB)
2133
Chapter 158. Cookies and Web Bugs
William T. Harding, Anita J. Reed, Robert L. Gray

Abstract - Hi-Res PDF (246 KB) - PDF w/links (262 KB)
2143
Chapter 159. Security for Broadband Internet Access Users
James Trulove

Abstract - Hi-Res PDF (159 KB) - PDF w/links (159 KB)
2151
Chapter 160. Instant Messaging Security Issues
William Hugh Murray

Abstract - Hi-Res PDF (259 KB) - PDF w/links (260 KB)
2169
Chapter 161. Voice Security
Chris Hare

Abstract - Hi-Res PDF (187 KB) - PDF w/links (187 KB)
2181
Chapter 162. Secure Voice Communications (VoI)
Valene Skerpac

Abstract - Hi-Res PDF (199 KB) - PDF w/links (200 KB)
2195
Chapter 163. Deep Packet Inspection Technologies
Anderson Ramos

Abstract - Hi-Res PDF (142 KB) - PDF w/links (143 KB)
2203
Chapter 164. Wireless Penetration Testing
Christopher A. Pilewski

Abstract - Hi-Res PDF (246 KB) - PDF w/links (270 KB)
2213
Chapter 165. Auditing the Telephony System
William A. Yarberry

Abstract - Hi-Res PDF (204 KB) - PDF w/links (205 KB)
2229
Chapter 166. Insecurity by Proxy
Micah Silverman

Abstract - Hi-Res PDF (178 KB) - PDF w/links (194 KB)
2233
Chapter 167. Wireless Security
Charles R. Hudson, Chris R. Cunningham

Abstract - Hi-Res PDF (173 KB) - PDF w/links (174 KB)
2243
Chapter 168. Packet Sniffers
Steve A. Rodgers

Abstract - Hi-Res PDF (309 KB) - PDF w/links (339 KB)
2253
Chapter 169. ISPs and Denial-of-Service Attacks
K. Narayanaswamy

Abstract - Hi-Res PDF (174 KB) - PDF w/links (175 KB)
2263
DomainVIII. Application Security

Abstract - Hi-Res PDF (109 KB) - PDF w/links (109 KB)
2267
Chapter 170. Application Service Provider Security
Stephen D. Fried

Abstract - Hi-Res PDF (235 KB) - PDF w/links (236 KB)
2289
Chapter 171. Stack-Based Buffer Overflows
Jonathan S. Held

Abstract - Hi-Res PDF (284 KB) - PDF w/links (308 KB)
2301
Chapter 172. Web Application Security
Mandy Andress

Abstract - Hi-Res PDF (248 KB) - PDF w/links (220 KB)
2311
Chapter 173. Security for XML and Other Metadata Languages
william Hugh Murray

Abstract - Hi-Res PDF (173 KB) - PDF w/links (174 KB)
2319
Chapter 174. XML and Information Security
Samuel C. McClintock

Abstract - Hi-Res PDF (189 KB) - PDF w/links (190 KB)
2327
Chapter 175. Application Security
Walter S. Kobus

Abstract - Hi-Res PDF (149 KB) - PDF w/links (149 KB)
2335
Chapter 176. Covert Channels
Anton Chuvakin

Abstract - Hi-Res PDF (202 KB) - PDF w/links (216 KB)
2343
Chapter 177. Security as a Value Enhancer in Application Systems Development
Lowell Bruce McCulley

Abstract - Hi-Res PDF (201 KB) - PDF w/links (202 KB)
2361
Chapter 178. Open Source versus Closed Source
Ed Skoudis

Abstract - Hi-Res PDF (272 KB) - PDF w/links (273 KB)
2381
Chapter 179. A Look at Java Security
Ben Rothke

Abstract - Hi-Res PDF (152 KB) - PDF w/links (153 KB)
2387
Chapter 180. Reflections on Database Integrity
William Hugh Murray

Abstract - Hi-Res PDF (165 KB) - PDF w/links (166 KB)
2395
Chapter 181. Digital Signatures in Relational Database Applications
Mike R. Prevost

Abstract - Hi-Res PDF (199 KB) - PDF w/links (200 KB)
2405
Chapter 182. Security and Privacy for Data Warehouses
David Bonewall, Karen Gibbs, Adriaan Veldhuisen

Abstract - Hi-Res PDF (233 KB) - PDF w/links (234 KB)
2425
Chapter 183. Building and Assessing Security in the Software Development Lifecycle
George G. McBride

Abstract - Hi-Res PDF (169 KB) - PDF w/links (169 KB)
2437
Chapter 184. Avoiding Buffer Overflow Attacks
Sean M. Price

Abstract - Hi-Res PDF (167 KB) - PDF w/links (167 KB)
2449
Chapter 185. Secure Development Life Cycle
Kevin Henry

Abstract - Hi-Res PDF (154 KB) - PDF w/links (155 KB)
2457
Chapter 186. System Development Security Methodology
Ian Lim, Ioana V. Bazavan

Abstract - Hi-Res PDF (221 KB) - PDF w/links (222 KB)
2475
Chapter 187. Software Engineering Institute Capability Maturity Model
Matt Nelson

Abstract - Hi-Res PDF (206 KB) - PDF w/links (207 KB)
2491
Chapter 188. Enterprise Security Architecture
William Hugh Murray

Abstract - Hi-Res PDF (182 KB) - PDF w/links (183 KB)
2503
Chapter 189. Certification and Accreditation Methodology
Mollie E.Krehnke, David C.Krehnke

Abstract - Hi-Res PDF (264 KB) - PDF w/links (265 KB)
2521
Chapter 190. System Development Security Methodology
Ian Lim, Ioana V. Bazavan

Abstract - Hi-Res PDF (216 KB) - PDF w/links (217 KB)
2537
Chapter 191. Methods of Auditing Applications
David C. Rice, Graham Bucholz

Abstract - Hi-Res PDF (172 KB) - PDF w/links (173 KB)
2547
Chapter 192. Hacking Methods
Georges J. Jahchan

Abstract - Hi-Res PDF (189 KB) - PDF w/links (189 KB)
2557
Chapter 193. Enabling Safer Deployment of Internet Mobile Code Technologies
Ron Moritz

Abstract - Hi-Res PDF (184 KB) - PDF w/links (184 KB)
2569
DomainIX. Operations Security

Abstract - Hi-Res PDF (97 KB) - PDF w/links (98 KB)
2573
Chapter 194. Security Considerations in Distributed Computing
Sasan Hamidi

Abstract - Hi-Res PDF (126 KB) - PDF w/links (127 KB)
2579
Chapter 195. Managing Unmanaged Systems
Man Nguyen, Bill Stackpole

Abstract - Hi-Res PDF (273 KB) - PDF w/links (274 KB)
2597
Chapter 196. Storage Area Networks Security Protocols and Mechanisms
Franjo Majstor

Abstract - Hi-Res PDF (558 KB) - PDF w/links (559 KB)
2615
Chapter 197. Operations
Kevin Henry

Abstract - Hi-Res PDF (123 KB) - PDF w/links (124 KB)
2623
Chapter 198. Why Today
Steven Hofmeyr

Abstract - Hi-Res PDF (121 KB) - PDF w/links (121 KB)
2629
Chapter 199. Operations Security and Controls
Patricia A. P. Fisher

Abstract - Hi-Res PDF (174 KB) - PDF w/links (175 KB)
2641
Chapter 200. The Nebulous Zero Day
Robert M. Slade

Abstract - Hi-Res PDF (99 KB) - PDF w/links (100 KB)
2645
Chapter 201. Understanding Service Level Agreements
Gilbert Held

Abstract - Hi-Res PDF (161 KB) - PDF w/links (162 KB)
2651
Chapter 202. Physical Access Control
Dan M. Bowers

Abstract - Hi-Res PDF (214 KB) - PDF w/links (215 KB)
2669
Chapter 203. Auditing the Electronic Commerce Environment
Chris Hare

Abstract - Hi-Res PDF (259 KB) - PDF w/links (269 KB)
2689
DomainX. Law, Compliance and Investigations

Abstract - Hi-Res PDF (111 KB) - PDF w/links (112 KB)
2693
Chapter 204. Sarbanes–Oxley Compliance
Bonnie A. Goins

Abstract - Hi-Res PDF (168 KB) - PDF w/links (168 KB)
2703
Chapter 205. Health Insurance Portability and Accountability Act Security Rule
Lynda L. McGhie

Abstract - Hi-Res PDF (191 KB) - PDF w/links (192 KB)
2707
Chapter 206. Jurisdictional Issues in Global Transmissions
Ralph Spencer Poore

Abstract - Hi-Res PDF (146 KB) - PDF w/links (147 KB)
2725
Chapter 207. An Emerging Information Security Minimum Standard of Due Care
Stan Stahl, Robert Braun

Abstract - Hi-Res PDF (241 KB) - PDF w/links (242 KB)
2745
Chapter 208. ISPs and Accountability
Lee Imrey

Abstract - Hi-Res PDF (221 KB) - PDF w/links (222 KB)
2761
Chapter 209. The Case for Privacy
Michael J. Corby

Abstract - Hi-Res PDF (138 KB) - PDF w/links (139 KB)
2767
Chapter 210. Liability for Lax Computer Security in DDoS Attacks
Dorsey Morrow

Abstract - Hi-Res PDF (110 KB) - PDF w/links (111 KB)
2773
Chapter 211. Operational Forensics
Michael J. Corby

Abstract - Hi-Res PDF (139 KB) - PDF w/links (140 KB)
2781
Chapter 212. Computer Crime Investigation and Computer Forensics
Thomas Welch

Abstract - Hi-Res PDF (321 KB) - PDF w/links (322 KB)
2813
Chapter 213. What Happened?
Kelly J. Kuchta

Abstract - Hi-Res PDF (113 KB) - PDF w/links (114 KB)
2817
Chapter 214. Potential Cyber Terrorist Attacks
Chris Hare

Abstract - Hi-Res PDF (204 KB) - PDF w/links (204 KB)
2831
Chapter 215. The Evolution of the Sploit
Ed Skoudis

Abstract - Hi-Res PDF (221 KB) - PDF w/links (222 KB)
2845
Chapter 216. Computer Crime
Christopher A. Pilewski

Abstract - Hi-Res PDF (147 KB) - PDF w/links (148 KB)
2853
Chapter 217. Phishing
Stephen D. Fried

Abstract - Hi-Res PDF (385 KB) - PDF w/links (408 KB)
2873
Chapter 218. It’s All About Power
Gerald L. Kovacich, Andy Jones, Perry G. Luzwick

Abstract - Hi-Res PDF (288 KB) - PDF w/links (297 KB)
2897
Chapter 219. Social Engineering
Marcus K. Rogers

Abstract - Hi-Res PDF (215 KB) - PDF w/links (216 KB)
2911
Chapter 220. Privacy Breach Incident Response
Rebecca Herold

Abstract - Hi-Res PDF (227 KB) - PDF w/links (228 KB)
2929
Chapter 221. Security Event Management
Glenn Cater

Abstract - Hi-Res PDF (210 KB) - PDF w/links (211 KB)
2945
Chapter 222. DCSA
Marcus K. Rogers

Abstract - Hi-Res PDF (205 KB) - PDF w/links (206 KB)
2961
Chapter 223. What a Computer Security Professional Needs to Know about E-Discovery and Digital Forensics
Larry R. Leibrock

Abstract - Hi-Res PDF (119 KB) - PDF w/links (120 KB)
2967
Chapter 224. How To Begin A Non-Liturgical Forensic Examination
Carol Stucki

Abstract - Hi-Res PDF (633 KB) - PDF w/links (732 KB)
2983
Chapter 225. Honeypot Essentials
Anton Chuvakin

Abstract - Hi-Res PDF (137 KB) - PDF w/links (138 KB)
2989
Chapter 226. Managing the Response to a Computer Security Incident
Michael Vangelos

Abstract - Hi-Res PDF (175 KB) - PDF w/links (176 KB)
3001
Chapter 227. Cyber-Crime
Thomas Akin

Abstract - Hi-Res PDF (126 KB) - PDF w/links (127 KB)
3009
Glossary

Abstract - Hi-Res PDF (1313 KB) - PDF w/links (1313 KB)