Security in Computing

The New State-of-the-Art in Information Security: Threats, Vulnerabilities, Attacks, and Countermeasures

For years, IT and security professionals have turned to "Security in Computing" as the definitive guide to information-security attacks and countermeasures. In this new "Fourth Edition," Charles P. Pfleeger and Shari Lawrence Pfleeger have thoroughly updated their classic guide to reflect today's newest technologies, standards, and trends.

The authors first introduce the core concepts and vocabulary of computer security, including cryptography. Next, they systematically identify and assess threats now facing programs, operating systems, databases, and networks. For each threat, they offer best-practice responses.

Security in Computing, Fourth Edition, goes beyond technology, covering crucial management issues you face in protecting infrastructure and information. This edition contains an all-new chapter on the economics of cybersecurity, and making the business case for security investments. Another new chapter addresses privacy--from data mining to identity theft, to RFID and e-voting. New coverage also includesProgramming mistakes that compromise security: man-in-the-middle, timing, and privilege escalationWeb application threats and vulnerabilitiesNetworks of compromised systems: bots, botnets, and drones Rootkits--including the notorious Sony XCPWi-Fi network security challenges, standards, and techniquesNew malicious code attacks, including false interfaces and keystroke loggersImproving code quality: software engineering, testing, and liability approachesBiometric authentication: capabilities and limitationsUsing Advanced Encryption System (AES) moreeffectivelyBalancing efficiency and piracy control in music and other digital contentDefending against new cryptanalytic attacks against RSA, DES, and SHAResponding to the emergence of organized attacker groups pursuing profit