计算机安全原理|康克林,|高等教育出版社

[放大封面]

【相关下载】

【二手书】
本产品共有 0 册二手书出售，最低价：￥.00 [查看]

推荐图书

	计算机网络安全教程作者:梁亚声
	计算机安全原理与实践作者:（澳）William Stallings Lawrie Brown
	计算机网络安全管理第2版作者:葛秀慧
	电脑医院电脑安全防护作者:力诚教育
	计算机病毒防治活用百问（... 作者:吴启迪编著
	网络安全——新电脑生活丛... 作者:焦赢洲著

用户购买本书还购买了

· 材料科学与工程基础(影印版)(含...

· 操作系统概念:第7版·影印版-第7...

· 操作系统概念——Java实现(第七...

· 成功的项目管理(第三版)

· 数据通信与网络（英文版.第4版）

· 数据挖掘导论

· UML和模式应用（英文版第3版）

· 电力电子学——变换器、应用和设...

· 工程材料科学与设计

· 模拟集成电路的分析与设计（第4...

金书共建·What's this?

[分类共建] ·所有未分类图书查看
本书当前分类：
安全 > 综合
我觉得本书应分到此类中：

[金书WIKI]
[ 编辑 ]当前页面使本书内容更加完善

[资源共建]
·提交本书书摘 ·提交本书相关资源

计算机安全原理

您想读这本书吗？
作者：康克林,	出版社：高等教育出版社
译者：	丛书名：
出版日期：2005-1-1	上架日期：2006-8-11 8:46:00
ISBN：7040167751	页数：
开本：24cm	装帧：

市场价：~~￥49.50~~

贵宾会员价：￥39.60
高级会员价：￥41.08
普通会员价：￥42.08

金书豆豆(What's this?)

种一个豆豆，书价我来定！

我要种一个豆豆

【您的购物车】

购买册数：


货到付款：北京、上海、天津、广州、深圳、湖北、河南、山西、陕西、山东、四川、重庆、浙江更多查看>>

| 大封面 | 封底 | 前言 | 内容简介 | 序言 | 目录 | 作者简介 | 译者简介 | 作者序 | 译者序 |

【读者评论】

内容简介
通过本书，既可以学习到计算机和网络安全的基础知识，又可以为参加CompTIA的Security+认证考试做好准备；本书也涵盖了（ISC）2SSCP认证考试的内容——该认证考试侧重于最佳实践、安全专家的角色以及责任。本书由IT安全领域的专家编写，从信息安全的三个层面——技术、实践和意识——较为全面地阐述了通信、基础设施和操作安全的基本原理；还详细介绍了计算机系统和网络如何防御各种攻击。本书共包含24章，分别讲述了以下主题：计算机安全概论与趋势，一般的安全概念，运营/组织安全，人员在安全中的作用，加密，公钥基础结构，标准和协议，物理安全对网络安全的影响，网络基础，基础结构安全，远程访问，无线通信与及时消息，安全基线，攻击和恶意代码，Email，Web组件，软件开发，灾难恢复、业务连续性与组织策略，风险管理，变更管理，有关计算机的争论，安全与法律。本书适合作为计算机专业、信息系统与管理专业、电子信息科学专业的本科生教材。

目录
伸缩显示:

[弹出查看]

Acknowledgments
Foreword
Preface
Introduction
ChapterIIntroductionandSecurityTrends
TheSecurityProblem
SecurityIncidents
ThreatstoSecurity
SecurityTrends
AvenuesofAttack
TheStepsinanAttack
MinimizingPossibleAvenuesofAttack
TypesofAttacks
GhapterReview
Chapter2GeneralSecurityConcepts
BasicSecurityTerminology
SecurityBasics
AccessControl
Authentication
SecurityModels
ConfidentialityModels
IntegrityModels
ChapterReview
Chapter3Operational/OrganizationalSecurity
SecurityOperationsinYourOrganization
Policies,Procedures,Standards,andGuidelines
TheSecurityPerimeter
PhysicalSecurity
AccessControls
PhysicalBarriers
SocialEngineering
Environment
FireSuppression
Wireless
ElectromagneticEavesdropping
Shielding
Location
Chapter
Chapter4TheRoleofPeopleinSecurity
People--ASecurityProblem
PoorSecurityPractices
SocialEngineering
PeopleasaSecurityTool
SecurityAwareness
ChapterReview
ChapterSCryptography
Algorithms
Hashing
SHA
MessageDigest(MD)
HashingSummary
SymmetricEncryption
DES
3DES
AES
CAST
RC
Blowfish
IDEA
SymmetricEncryptionSummary
AsymmetricEncryption
RSA
Diffie-Hellman
EIGamal
ECC
AsymmetricEncryptionSummary
Usage
Confidentiality
Integrity
Nonrepudiation
Authentication
DigitalSignatures
KeyEscrow
ChapterReview
Chapter6PublicKeyInfrastructure
TheBasicsofPublicKeyInfrastructures
CertificateAuthorities
RegistrationAuthorities
LocalRegistrationAuthorities
CertificateRepositories
TrustandCertificateVerification
DigitalCertificates
CertificateAttributes
CertificateExtensions
CertificateLifecycles
CentralizedorDecentralizedInfrastructures
HardwareStorageDevices
PrivateKeyProtection
KeyRecovery
KeyEscrow
PublicCertificateAuthorities
In-HouseCertificateAuthorities
OutsourcedCertificateAuthorities
TyingDifferentPI(IsTogether
TrustModels
CertificateUsage
ChapterReview
Chapter7StandardsandProtocols
PKIX/PKCS
PKIXStandards
PKCS
WhyYouNeedtoKnow
X.509
SSL/TLS
ISAKMP
CMP
XKMS
S/MIME
IETFS/MIMEv3Specifications
PGP
HowItWorks
WhereCanYouUsePCP?
HTFPS
IPSec
CEP
FIPS
CommonCriteria(CC)
WTLS
WEP
WEPSecurityIssues
ISO17799
ChapterReview
Chapter8TheImpactofPhysicalSecurityonNetworkSecurity
TheProblem
PhysicalSecuritySafeguards
PoliciesandProcedures
AccessControls
Authentication
ChapterReview
Chapter9NetworkFundamentals
NetworkArchitectures
NetworkTopology
NetworkProtocols
Packets
TCPvs.UDP
ICMP
PacketDelivery
LocalPacketDelivery
RemotePacketDelivery
Subnetting
NetworkAddressTranslation
ChapterReview
ChapterI0InfrastructureSecurity
Devices
Workstations
Savers
NetworkInterfaceCards(NICs)
Hubs
Bridges
Switches
Routers
Firewalls
Wireless
Modems
RAS
Telecom/PBX
VPN
IDS
NetworkMonitoring/Diagnostic
MobileDevices
Media
Coax
UTP/STP
Fiber
UnguidedMedia
SecurityConcernsforTransmissionMedia
PhysicalSecurity
RemovableMedia
MagneticMedia
OpticalMedia
ElectronicMedia
SecurityTopologies
SecurityZones
VLANs
NAT
Tunneling
GhapterReview
ChapterIIRemoteAccess
TheRemoteAccessProcess
Identification
Authentication
Authorization
Telnet
SSH
L2TPandPPIp
PPIP
L2TP
IEEE802.11
VPN
IPSec
IPSecConfigurations
IPSecSecurity
IEEE802.Ix
RADIUS
RADIUSAuthentication
RADIUSAuthorization
RADIUSAccounting
DIAMETER
TACACS+
TACACS+Authentication
TAGACS+Authorization
TAGAGS+Accounting
Vulnerabilities
ConnectionSummary
GhapterReview
Chapter12WirelessandInstantHessaging
Wireless
WAPandWTLS
802.11
InstantMessaging
ChapterReview
Chapter13IntrusionDetectionSystems
HistoryofIntrusionDetectiionSystems
IDSOverview
Host-BasedIntrusionDetectionSystems
AdvantagesofHost-BasedIDSs
DisadvantagesofHost-BasedIDSs
Activevs.PassiveHost-BasedIDSs
Network-BasedIntrusionDetectionSystems
AdvantagesofaNetwork-BasedIDS
DisadvantagesofaNetwork-Based1DS
Activevs.PassiveNetwork-BasedIDSs
Signatures
FalsePositivesandNegatives
IDSModels
PreventativeIntrusionDetectionSystems
IDSProductsandVendors
Honeypots
IncidentResponse
GhapterReview
Chapter14SecurityBaselines
Oven,JewBaselines
PasswordSelection
PasswordPolio/Guidelines
SelectingaPassword
ComponentsofaGoodPassword
PasswordAging
OperatingSystemandNetworkOperatingSystemHardening
HardeningMicrosoftOperatingSystems
HardeningUNIX-orLinux-BaSedOperatingSystems
NetworkHardening
SoftwareUpdates
DeviceConfiguration
PortsandServices
TrafficFiltering
ApplicationHardening
ApplicationPatches
WebServers
MallServers
FIPServers
DNSServers
FileandPrintServices
ActiveDirectory
ChapterReview
Chapter15AttacksandMalware
AttackingComputerSystemsandNetworks
DeniM-of-ServiceAttacks
BackdoorsandTrapdoors
Sniffing
Spoofing
Man-in-the-MiddleAttacks
ReplayAttacks
TCP/IPHijacking
AttacksonEncryption
PasswordGuessing
SoftwareExploitation
WardialingandWarDriving
SocialEngineering
Malware
Auditing
ChapterReview
Chapter16E-mail
SecurityofE-mailTransmissions
MalidousCode
HoaxE-mails
UnsolicitedCommercialE-mail(Spare)
MailEncrypfon
ChapterReview
Chapter17WebComponents
CurrentWebComponentsandConcerns
Protocols
Encryption(SSLandTLS)
TheWeb(HTTPandHTIPS)
WebServices
DirectoryServices(DAPandLDAP)
FileTransfer(FITandSFTP)
Vulnerabilities
Code-BasedVulnerabilities
BufferOverflows
JavaandIavaScript
ActiveX
CGI
Server-SideScripts
Cookies
SignedApplets
BrowserPlug-Ins
ChapterReview
Chapter18SoftwareDevelopment
TheSoftwareEngineeeingProcess
ProcessModels
ROIandErrorCorrection
SecureCodeTechniques
GoodPractices
Requirements
Testing
ChapterReview
Chapter19DisasterRecovery,BusinessContinuity,andOrganizationalPolicies
DisasterRecovery
DisasterRecoveryPlans/Process
Backups
Utilities
SecureRecovery
HighAvailabilityandFaultTolerance
ComputerIncidentResponseTeams
Test,Exercise,andRehearse
PoliciesandProcedures
SecurityPolicies
Privacy
ServiceLevelAgreements
HumanResourcesPolicies
CodeofEthics
IncidentResponsePolicies
ChapterReview
Chapter20RiskManagement
AnOverviewofRiskManagement
Macro-LevelExampleofRiskManagement
InternationalBanking
KeyTermsEssentialtoUnderstandingRiskManagement
WhatIsRiskManagement?
BusinessRisks
ExamplesofBusinessRisks
ExamplesofTechnologyRisks
RiskManagementModels
GeneralRiskManagementModel
SoftwareEngineeringInstituteModel
QualitativelyAssessingRisk
QuantitativelyAssessingRisk
Qualitativevs.QuantitativeRiskAssessmem
Tools
ChapterReview
Chapter21ChangeManagement
WhyChangeManagement?
TheKeyConcept:SegregationofDuties
ElementsofChangeManagement
ImplementingChangeManagement
ThePurposeofaChangeControlBoard
CodeIntegrity
TheCapabilityMaturityModel
ChapterReview
Chapter22PrivilegeManagement
User,Group,andRoleManagement
User.
Groups
Role
SingleSign-On
Centralizedvs.DecentralizedManagement
CentralizedManagement
DecentralizedManagement
TheDecentralized,GentralizedModel
Auditing(Privilege,Usage,andEscalation)
PrivilegeAuditing
UsageAuditing
EscalationAuditing
HandlingAccessControl(MAC,DAC,andRBAC)
MandatoryAccessControl(MAC)
DiscretionaryAccessControl(DAC)
Role-BasedAccessControl(RBAC)
ChapterReview
Chapter23ComputerForensics
Evidence
StandardsforEvidence
TypesofEvidence
ThreeRulesRegardingEvidence
CollectingEvidence
AcquiringEvidence
IdentifyingEvidence
ProtectingEvidence
TransportingEvidence
StoringEvidence
ConductingtheInvestigation
ChainofCustody
FreeSpacevs.SlackSpace
FreeSpace
SlackSpace
What'sThisMessageDigestandHash?
Analysis
ChapterReview
Chapter24SecurityandLaw
Import/ExportEncryptionRestrictions
UnitedStatesLaw
Non-U.S.Laws
DigitalSignatureLaws
Non-U.S.Laws
DigitalRightsManagement
PrivacyLaws
UnitedStatesLaws
EuropeanLaws
ComputerTrespass
ConventiononCybercrime
Ethics
ChapterReview
Glossary
Index

伸缩显示:

[弹出查看]


	编辑荐语 [您可以向编辑推荐本书的亮点，采纳后奖励５－１０元优惠卷]（一个工作日内处理您的建议）

读者评论 w 查看本书所有书评

[发表您的书评，编辑将根据书评质量，予以相应的奖励]

(共0条)

关于我们 | 帮助 | 合作伙伴 | 我的帐户 | 图书馆 | 自考教材网 | 高校教材网
北京电话：010-68993821/88379639/88379641 邮箱：service@golden-book.com 传真：010-68990188
京ICP证060035号

专题 | 特价 | 书评 | 论坛 | 下载 | 新品 | 豆豆 | 鉴委会 | 共建 | 编辑博客 | 抢鲜预订 | 样章试读 | 名人签名 | 格子 | 播报

我的订单

关于配送

关于付款

售后服务

金书网