计算机安全：艺术与科学（英文影印版）|高等院校信息安全专业系列教材|Matt Bishop|清华大学出版社

【相关下载】

【二手书】
本产品共有 0 册二手书出售，最低价：￥.00 [查看]

推荐图书

	计算机病毒防治百事通作者:陈立新
	计算机信息安全技术{绝版... 作者:步山岳等
	信息安全技术信息系统灾难... 作者:本社编
	计算机病毒与反病毒技术作者:张仁斌等
	Snort 2.0入侵检测作者:（美）Brian Caswell,Jay Beale,James C.Foster,Jeffrey Posluns
	计算机病毒分析与防范大全... 作者:王建峰等

用户购买本书还购买了

· VHDL设计、表示和综合（英文版）...

· VLSI数字信号处理系统设计与实现...

· 离散事件系统仿真(英文版.第4版)

· 商务统计(第四版)

· 数字集成电路——设计透视（影印...

· 网络安全基础教程：标准与应用（...

· 运算放大器：理论与设计=Operati...

· C 语言的科学和艺术（英文版）

· C++网络编程，卷1：运用ACE和模...

· C++数值算法（第二版英文版）

金书共建·What's this?

[分类共建] ·所有未分类图书查看
本书当前分类：
安全 > 网络安全
我觉得本书应分到此类中：

[金书WIKI]
[ 编辑 ]当前页面使本书内容更加完善

[资源共建]
·提交本书书摘 ·提交本书相关资源

计算机安全：艺术与科学（英文影印版）

您想读这本书吗？
原书名：Computer Security:Art and Science	原出版社：Addison Wesley/Pearson
作者： Matt Bishop	出版社：清华大学出版社
译者：	丛书名：高等院校信息安全专业系列教材
出版日期：2004-5-1	上架日期：2005-10-8
ISBN：730208341X	页数：版次：1-1
开本：16开	装帧：

市场价：~~￥96.00~~

贵宾会员价：￥72.00
高级会员价：￥74.88
普通会员价：￥76.80

金书豆豆(What's this?)

种一个豆豆，书价我来定！

我要种一个豆豆

【您的购物车】

购买册数：


货到付款：北京、上海、天津、广州、深圳、湖北、河南、山西、陕西、山东、四川、重庆、浙江更多查看>>

| 大封面 | 封底 | 前言 | 内容简介 | 序言 | 目录 | 作者简介 | 译者简介 | 作者序 | 译者序 |

【读者评论】

内容简介
本书特点：

·内容全面

·计算机安全领域的经典之作

·习题丰富，每章后面作者都配有大量的习题

·浅显易懂，深入浅出

《计算机安全：艺术与科学》一书把计算机系统、网络、人为因素和密码学等概念融为一体，有效地阐明了计算机安全不仅是一门科学，而且也是一门艺术；阐述了从理论到实践和从实践到理论相互促进的重要性，强调了计算机安全和密码学的差异性，着重论述了密码学在计算机安全中的作用和局限性，阐明了密码学和计算机安全的相互关系。本书还详尽地介绍了计算机安全领域最基本和最普遍的工作，包括计算机安全的本质和面临的挑战，策略与安全的关系，密码学的角色与应用，策略实现机制，保障技术和方法学，脆弱性分析和入侵检测等。论述了不同的策略模型，并提出了执行这些策略的机制。并用大量的实例从网络、系统、用户和程序几个方面说明了如何应用书中所讨论的一些原则来解决实际安全问题。
本书无论是在内容上还是组织上，都堪称计算机安全领域的经典之作，对高校师生、研究人员和管理技术人员都有重要的指导作用。

目录
伸缩显示:

[弹出查看]

Preface
Goals
Philosophy
Organization
Roadmap
Dependencies
Background
Undergraduate Level
Graduate Level
Practitioners
Special Acknowledgment
Acknowledgments

PART 1: INTRODUCTION
Chapter I  An Overview of Computer Security
1.1  The Basic Components
1.2  Threats
1.3  Policy and Mechanism
1.4  Assumptions and Trust
1.5  Assurance
1.6  Operational Issues
1.7  Human Issues
1.8  Tying It All Together
1.9  Summary
1.10  Research Issues
1.11  Further Reading
1.12  Exercises

PART 2: FOUNDATIONS
Chapter 2  Access Control Matrix
2.1  Protection State
2.2  Access Control Matrix Model
2.3  Protection State Transitions
2.4  Copying, Owning, and the Attenuation of Privilege
2.5  Summary
2.6  Research Issues
2.7  Further Reading
2.8  Exercises

Chapter 3  Foundational Results
3.1  The General Question
3.2  Basic Results
3.3  The Take-Grant Protection Model
3.4  Closing the Gap
3.5  Expressive Power and the Models
3.6  Summary
3.7  Research Issues
3.8  Further Reading
3.9  Exercises

PART 3: POLICY
Chapter 4  Security Policies
4.1  Security Policies
4.2  Types of Security Policies
4.3  The Role of Trust
4.4  Types of Access Control
4.5  Policy Languages
4.6  Example: Academic Computer Security Policy
4.7  Security and Precision
4.8  Summary
4.9  Research Issues
4.10  Further Reading
4.11  Exercises

Chapter 5  Confidentiality Policies
5.1  Goals of Confidentiality Policies
5.2  The Bell-LaPadula Model
5.3  Tranquility
5.4  The Controversy over the Bell-LaPadula Model
5.5  Summary
5.6  Research Issues
5.7  Further Reading
5.8  Exercises

Chapter 6  Integrity Policies
6.1  Goals
6.2  Biba Integrity Model
6.3  Lipner's Integrity Matrix Model
6.4  Clark-Wilson Integrity Model
6.5  Summary
6.6  Research Issues
6.7  Further Reading
6.8  Exercises

Chapter 7  Hybrid Policies
7.1  Chinese Wall Model
7.2  Clinical Information Systems Security Policy
7.3  Originator Controlled Access Control
7.4  Role-Based Access Control
7.5  Summary
7.6  Research Issues
7.7  Further Reading
7.8  Exercises

Chapter 8  Noninterference and Policy Composition
8.1  The Problem
8.2  Deterministic Noninterference
8.3  Nondeducibility
8.4  Generalized Noninterference
8.5  Restrictiveness
8.6  Summary
8.7  Research Issues
8.8  Further Reading
8.9  Exercises

PART 4: IMPLEMENTATION I: CRYPTOGRAPHY
Chapter 9  Basic Cryptography
9.1  What Is Cryptography?
9.2  Classical Cryptosystems
9.3  Public Key Cryptography
9.4  Cryptographic Checksums
9.5  Summary
9.6  Research Issues
9.7  Further Reading
9.8  Exercises

Chapter 10  Key Management
10.1  Session and Interchange Keys
10.2  Key Exchange
10.3  Key Generation
10.4  Cryptographic Key Infrastructures
10.5  Storing and Revoking Keys
10.6  Digital Signatures
10.7  Summary
10.8  Research Issues
10.9  Further Reading
10.10  Exercises

Chapter 11  Cipher Techniques
11.1  Problems
11.2  Stream and Block Ciphers
11.3  Networks and Cryptography
11.4  Example Protocols
11.5  Summary
11.6  Research Issues
11.7  Further Reading
11.8  Exercises

Chapter 12  Authentication
12.1  Authentication Basics
12.2  Passwords
12.3  Challenge-Response
12.4  Biometrics
12.5  Location
12.6  Multiple Methods
12.7  Summary
12.8  Research Issues
12.9  Further Reading
12.10  Exercises

PART 5: IMPLEMENTATION II: SYSTEMS
Chapter 13  Design Principles
13.1  Overview
13.2  Design Principles
13.3  Summary
13.4  Research Issues
13.5  Further Reading
13.6  Exercises

Chapter 14  Representing Identity
14.1  What Is Identity?
14.2  Files and Objects
14.3  Users
14.4  Groups and Roles
14.5  Naming and Certificates
14.6  Identity on the Web
14.7  Summary
14.8  Research Issues
14.9  Further Reading
14.10  Exercises

Chapter 15  Access Control Mechanisms
15.1  Access Control Lists
15.2  Capabilities
15.3  Locks and Keys
15.4  Ring-Based Access Control
15.5  Propagated Access Control Lists
15.6  Summary
15.7  Research Issues
15.8  Further Reading
15.9  Exercises

Chapter 16  Information Flow
16.1  Basics and Background
16.2  Nonlattice Information Flow Policies
16.3  Compiler-Based Mechanisms
16.4  Execution-Based Mechanisms
16.5  Example Information Flow Controls
16.6  Summary
16.7  Research Issues
16.8  Further Reading
16.9  Exercises

Chapter 17  Confinement Problem
17.1  The Confinement Problem
17.2  Isolation
17.3  Covert Channels
17.4  Summary
17.5  Research Issues
17.6  Further Reading
17.7  Exercises

PART 6: ASSURANCE Contributed by Elisabeth Sullivan
Chapter 18  Introduction to Assurance
18.1  Assurance and Trust
18.2  Building Secure and Trusted Systems
18.3  Summary
18.4  Research Issues
18.5  Further Reading
18.6  Exercises

Chapter 19  Building Systems with Assurance
19.1  Assurance in Requirements Definition and Analysis
19.2  Assurance During System and Software Design
19.3  Assurance in Implementation and Integration
19.4  Assurance During Operation and Maintenance
19.5  Summary
19.6  Research Issues
19.7  Further Reading
19.8  Exercises

Chapter 20  Formal Methods
20.1  Formal Verification Techniques
20.2  Formal Specification
20.3  Early Formal Verification Techniques
20.4  Current Verification Systems
20.5  Summary
20.6  Research Issues
20.7  Further Reading
20.8  Exercises

Chapter 21  Evaluating Systems
21.1  Goals of Formal Evaluation
21.2  TCSEC: 1983-1999
21.3  International Efforts and the ITSEC: 1991-2001
21.4  Commercial International Security Requirements: 1991
21.5  Other Commercial Efforts: Early 1990s
21.6  The Federal Criteria: 1992
21.7  FIPS 140: 1994-Present
21.8  The Common Criteria: 1998-Present
21.9  SSE-CMM: 1997-Present
21.10  Summary
21.11  Research Issues
21.12  Further Reading
21.13  Exercises

PART 7: SPECIAL TOPICS
Chapter 22  Malicious Logic
22.1  Introduction
22.2  Trojan Horses
22.3  Computer Viruses
22.4  Computer Worms
22.5  Other Forms of Malicious Logic
22.6  Theory of Malicious Logic
22.7  Defenses
22.8  Summary
22.9  Research Issues
22.10  Further Reading
22.11  Exercises

Chapter 23  Vulnerability Analysis
23.1  Introduction
23.2  Penetration Studies
23.3  Vulnerability Classification
23.4  Frameworks
23.5  Gupta and Gligor's Theory of Penetration Analysis
23.6  Summary
23.7  Research Issues
23.8  Further Reading
23.9  Exercises

Chapter 24  Auditing
24.1  Definitions
24.2  Anatomy of an Auditing System
24.3  Designing an Auditing System
24.4  A Posteriori Design
24.5  Auditing Mechanisms
24.6  Examples: Auditing File Systems
24.7  Audit Browsing
24.8  Summary
24.9  Research Issues
24.10  Further Reading
24.11  Exercises

Chapter 25  Intrusion Detection
25.1  Principles
25.2  Basic Intrusion Detection
25.3  Models
25.4  Architecture
25.5  Organization of Intrusion Detection Systems
25.6  Intrusion Response
25.7  Summary
25.8  Research Issues
25.9  Further Reading
25.10  Exercises

PART 8: PRACTICUM
Chapter 26  Network Security
26.1  Introduction
26.2  Policy Development
26.3  Network Organization
26.4  Availability and Network Flooding
26.5  Anticipating Attacks
26.6  Summary
26.7  Research Issues
26.8  Further Reading
26.9  Exercises

Chapter 27  System Security
27.1  Introduction
27.2  Policy
27.3  Networks
27.4  Users
27.5  Authentication
27.6  Processes
27.7  Files
27.8  Retrospective
27.9  Summary
27.10  Research Issues
27.11  Further Reading
27.12  Exercises

Chapter 28  User Security
28.1  Policy
28.2  Access
28.3  Files and Devices
28.4  Processes
28.5  Electronic Communications
28.6  Summary
28.7  Research Issues
28.8  Further Reading
28.9  Exercises

Chapter 29  Program Security
29.1  Introduction
29.2  Requirements and Policy
29.3  Design
29.4  Refinement and Implementation
29.5  Common Security-Related Programming Problems
29.6  Testing, Maintenance, and Operation
29.7  Distribution
29.8  Conclusion
29.9  Summary
29.10  Research Issues
29.11  Further Reading
29.12  Exercises

PART 9: END MATTER
Chapter 30  Lattices
30.1  Basics
30.2  Lattices
30.3  Exercises

Chapter 31  The Extended Euclidean Algorithm
31.1  The Euclidean Algorithm
31.2  The Extended Euclidean Algorithm
31.3  Solving ax mod n=1
31.4  Solving ax mod n=b
31.5  Exercises

Chapter 32  Entropy and Uncertainty
32.1  Conditional and Joint Probability
32.2  Entropy and Uncertainty
32.3  Joint and Conditional Entropy
32.4  Exercises

Chapter 33  Virtual Machines
33.1  Virtual Machine Structure
33.2  Virtual Machine Monitor
33.3  Exercises

Chapter 34  Symbolic Logic
34.1  Propositional Logic
34.2  Predicate Logic
34.3  Temporal Logic Systems
34.4  Exercises

Chapter 35  Example Academic Security Policy
35.1  University of California E-mail Policy
35.2  The Acceptable Use Policy for the University of Califomia, Davis
Bibliography
Index

伸缩显示:

[弹出查看]


	编辑荐语 [您可以向编辑推荐本书的亮点，采纳后奖励５－１０元优惠卷]（一个工作日内处理您的建议）

读者评论 w 查看本书所有书评

[发表您的书评，编辑将根据书评质量，予以相应的奖励]

(共0条)

关于我们 | 帮助 | 合作伙伴 | 我的帐户 | 图书馆 | 自考教材网 | 高校教材网
北京电话：010-68993821/88379639/88379641 邮箱：service@golden-book.com 传真：010-68990188
京ICP证060035号

专题 | 特价 | 书评 | 论坛 | 下载 | 新品 | 豆豆 | 鉴委会 | 共建 | 编辑博客 | 抢鲜预订 | 样章试读 | 名人签名 | 格子 | 播报

我的订单

关于配送

关于付款

售后服务

金书网