Security in Computing

by Shari Lawrence Pfleeger

The New State-of-the-Art in Information Security: Now Covers the Economics of Cyber Security and the Intersection of Privacy and Information Security For years, IT and security professionals and students have turned to Security in Computing as the definitive guide to information about computer security attacks and countermeasures. In their new fourth edition, Charles P. Pfleeger and Shari Lawrence Pfleeger have thoroughly updated their classic guide to reflect today's newest technologies, standards, and trends. The authors first introduce the core concepts and vocabulary of computer security, including attacks and controls. Next, the authors systematically identify and assess threats now facing programs, operating systems, database systems, and networks. For each threat, they offer best-practice responses. Security in Computing, Fourth Edition , goes beyond technology, covering crucial management issues faced in protecting infrastructure and information. This edition contains an all-new chapter on the economics of cybersecurity, explaining ways to make a business case for security investments. Another new chapter addresses privacy--from data mining and identity theft, to RFID and e-voting. New coverage also includes

Genres: Computer Science, Computers, Textbooks, Technology, Nonfiction, Programming, College

845 pages, Hardcover

First published January 1, 1988

Reviews

[Darrin Hawe]

Textbook used for MSIT Program. Good read, factually accurate, and fully accessible.

[Joseph]

This book covers security at Many different levels (tries to be comprehensive)... although this is a constantly changing topic of study, every time new tactics are used by some hacker/virus/trojan...etc.

Topic included are: the "Meaning of Computer Security", Attacks & methods of defense, cryptology, software(code) security, Viruses, root-hacks, Operating system security, Trusted-systems, File protections, Database security, SQL injection, Multi-Level approaches, Networks, firewalls, Vlans, Session hijacking, flaws in net protocols, Web site vulnerabilities, Alarms, monitoring, countermeasures, Administration, Risk Analysis, Physical building security, Data privacy, computer ethics, Email monitoring or interception, spoofing, phishing, computer crime, code of ethics, SOA Architecture, and more...

This is certainly not a "light read" or something you complete in a week; but for somebody who runs computers professionally, there is a lot of info here -so you know several problem issues to avoid when designing new computer systems.

I would also recommend knowing the ISO-27001 and ISO-27009 standards, and similar security standards from OWASP (Open.Web.Application.Security.Project),
plus Oasis-open.org guides.

[Martin Coetsee]

Great book for a well rounded view of all computer security domains.

[Deidre]

This book was my prescribed book for uni and was a really good introduction to the industry

[amadeus]

...

[Marcus]

1000 pages of text. My eyes…

[Will]

This book has some great high level information on computer security and is heavy loaded with the computer security's industry lingo. However, it does not cover details on hacking techniques and the content is quite verbose - not very succinct. Additionally, this is not the latest edition of that book.

[Peterwilliam]

grad class text - no review or rating

[Patejjoe]

gfasdf

[Alex Trimm]

Good for what it is, which is entirely non-technical. If you're a middle-manager, have at it.

[Frank Palardy]

Class book, overview.

[Kainan Liu]

Difficult not to like the book

[Shannon]

KSKS