CIW Security Professional Certification Bible

by Mandy Andress; Phil Cox; Ed Tittel

• ISBN13: 9780764548222
• ISBN10: 0764548220
• Edition: CD
• Format: Hardcover
• Copyright: 2001-10-01
• Publisher: Wiley

Summary

CIW Security Professional Certification Bible follows Prosoft Training's curriculum and objectives for the CIW Security exam, while providing information to help security professionals on the job. It details areas such as encryption technologies, types of incidents and attacks, system and network security, TCP/IP, managing the network boundary, implementing firewalls, intrusion detection and prevention. This book also covers securing the operating system, securing user accounts and file resources, assessing risk, auditing, scanning and discovery, defeating network penetration, creating security control procedures.Covers: Exam 1D0 470

Author Biography

About the Authors Mandy Andress, CISSP, CISA, CPA, is a full-time security professional and consultant. She has written regularly for InfoWorld magazine on security topics and has helped design and maintain enterprise-wide security policies for several Fortune 500 companies. Phil Cox has worked at the Computer Incident Advisory Capability for the Department of Energy and been a columnist for ;login:, the USENIX magazine. The author of Windows 2000 Security Handbook, he speaks on security topics at Networld InterOp and The Internet Security Conference. Ed Tittel is a 19-year computer industry veteran. He is currently the president of LANWrights, Inc., and Vice President of IT Certifications at Leaplt.com. Ed stays busy writing magazine articles and books (he has 110 titles to his credit), teaching, and consulting.

Table of Contents

Preface	vii
Acknowledgments	xv
Part I: Introducing Computer Security Concepts	1	(104)
A Security Primer	3	(20)
Basic Principles of System and Network Security	23	(22)
Using Encyption Technologies	45	(38)
Securing TCP/IP	83	(22)
Part II: Network Security	105	(68)
Security Incidents and Attacks	107	(24)
Understanding Boundary Devices	131	(24)
Implementing Firewalls	155	(18)
Part III: Operating System Security	173	(104)
Operating System Security Risks	175	(22)
Principles of Operating System Security	197	(20)
Operating System Hardening	217	(24)
Securing File Systems and Resources	241	(16)
Securing User Accounts	257	(20)
Part IV: Intrusion Detection and Response	277	(102)
Defeating Network and Server Attacks and Penetration	279	(34)
Intrusion Detection and Prevention	313	(26)
Intrusion Detection Systems	339	(20)
Handling Security Incidents	359	(20)
Part V: Security, Auditing, Analysis, and Intrusion Detection	379	(150)
Principle of Security Auditing	381	(18)
System Security Scanning and Discovery	399	(32)
Creating and Managing Security Control Procedures	431	(34)
Auditing System and Security Logs	465	(32)
Acting on Audit Results	497	(32)
Appendix A: What's on the CD-ROM	529	(4)
Appendix B: Objective Map	533	(8)
Appendix C: Sample Exam	541	(14)
Appendix D: Exam Tips	555	(4)
Appendix E: Well-Known Ports	559	(48)
Appendix F: Web Resources for Security Professionals	607	(12)
Index	619	(41)
End-User License Agreement	660	(3)
CD-ROM Installation Instructions	663