CISSP^®: Certified Information Systems Security Professional Study Guide, 4th Edition

by James M. Stewart (Lan Wrights, Inc., Austin, Texas); Ed Tittel (Austin, Texas); Mike Chapple (The Brand Institute, Miami, FL)

• ISBN13: 9780470276884
• ISBN10: 0470276886
• Edition: 4th
• Format: Paperback
• Copyright: 2008-07-01
• Publisher: Sybex

Summary

Presenting 100 percent coverage of the CISSP Body of Knowledge exam objectives, this essential study guide features clear and concise information on crucial security topics and includes practical examples and advice taken from real-world experiences Provides authoritative coverage of key exam topics, such as access control, application security, cryptography, operations security, information security and risk management, business continuity and disaster recovery planning, and more The CD contains exam preparation software, two full-length bonus exams, and electronic flashcards

Author Biography

James Michael Stewart, CISSP, has been writing and training for more than 14 years, with a current focus on security. He has taught dozens of CISSP training courses, not to mention numerous sessions on Windows security and the Certified Ethical Hacker certification. He is the author of several books and courseware sets on security certification, Microsoft topics, and network administration. More information about Michael can be found at his website: www.impactonline.com

Ed Tittel is a full-time freelance writer, trainer, and consultant specializing in matters related to information security, markup languages, and networking technologies. He is a regular contributor to numerous TechTarget websites; teaches online security and technology courses for companies including HP, Sony, and Motorola; and writes regularly for Tom’s Hardware. Ed’s professional bio and other information are available at www.edtittel.com

Mike Chapple , CISSP, is an IT security professional with the University of Notre Dame. In the past, he was chief information officer of Brand Institute and an information security researcher with the National Security Agency and the U.S. Air Force. His primary areas of expertise include network intrusion detection and access controls. Mike is a frequent contributor to TechTarget’s SearchSecurity site, a technical editor for Information Security magazine, and the author of several information security titles including The GSEC Prep Guide from Wiley and Information Security Illuminated from Jones and Bartlett Publishers.

Table of Contents

Introduction

Assessment Test

Accountability and Access Control

Attacks and Monitoring

ISO Model, Protocols, Network Security, and Network Infrastructure

Communications Security and Countermeasures

Security Management Concepts and Principles

Asset Value, Policies, and Roles

Data and Application Security Issues

Malicious Code and Application Attacks

Cryptography and Private Key Algorithms

PKI and Cryptographic Applications

Principles of Computer Design

Principles of Security Models

Administrative Management

Auditing and Monitoring

Business Continuity Planning

Disaster Recovery Planning

Law and Investigations

Incidents and Ethics

Physical Security Requirements

Appendix: About the Companion CD

Glossary

Index

Table of Contents provided by Publisher. All Rights Reserved.