Information Security Management Handbook, Fifth Edition, Volume 3

by Tipton; Harold F.

• ISBN13: 9780849395611
• ISBN10: 0849395615
• Edition: 5th
• Format: Hardcover
• Copyright: 2006-01-13
• Publisher: Auerbach Pub
• More Book Details
• Purchase Benefits

Summary

Since 1993, the Information Security Management Handbook has served not only as an everyday reference for information security practitioners but also as an important document for conducting the intense review necessary to prepare for the Certified Information System Security Professional (CISSP) examination. Now completely revised and updated and in its fifth edition, the handbook maps the ten domains of the Information Security Common Body of Knowledge and provides a complete understanding of all the items in it. This is a must-have book, both for preparing for the CISSP exam and as a comprehensive, up-to-date reference.

Table of Contents

About the Editors	xi
Contributors	xiii
Introduction	xxiii
Access Control Systems and Methodology	1	(68)
Access Control Techniques
Sensitive or Critical Data Access Controls	5	(12)
Mollie E. Krehnke
David C. Krehnke
An Introduction to Role-Based Access Control	17	(14)
Ian Clark
Smart Cards	31	(10)
Jim Tiller
A Guide to Evaluating Tokens	41	(10)
Joseph T. Hootman
Access Control Administration
Identity Management: Benefits and Challenges	51	(18)
Lynda L. McGhie
Telecommunications and Network Security	69	(106)
Communications and Network Security
An Examination of Firewall Architectures	73	(46)
Paul A. Henry
The Five W's and Designing a Secure, Identity-Based, Self-Defending Network (5W Network)	119	(12)
Samuel W. Chun
Maintaining Network Security: Availability via Intelligent Agents	131	(8)
Robby Fussell
PBX Firewalls: Closing the Back Door	139	(6)
William A. Yarberry, Jr.
Internet, Intranet, Extranet Security
Voice over WLAN	145	(10)
Bill Lipiczky
Spam Wars: How To Deal with Junk E-Mail	155	(6)
Al Bredenberg
Network Attacks and Countermeasures
Auditing the Telephony System: Defenses against Communications Security Breaches and Toll Fraud	161	(14)
William A. Yarberry, Jr.
Security Management Practices	175	(130)
Security Management Concepts and Principles
The Controls Matrix	179	(4)
Robert M. Slade
Information Security Governance	183	(6)
Ralph Spencer Poore
Belts and Suspenders: Diversity in Information Technology Security	189	(8)
Jeffrey Davis
Building Management Commitment through Security Councils, or Security Council Critical Success Factors	197	(16)
Todd Fitzgerald
Risk Management
Developing and Conducting a Security Test and Evaluation	213	(10)
Sean M. Price
Enterprise Security Management Program	223	(10)
George G. McBride
Technology Convergence and Security: A Simplified Risk Management Model	233	(8)
Ken M. Shaurette
Employment Policies and Practices
People, Processes, and Technology: A Winning Combination	241	(10)
Felicia M. Nicastro
Policies, Standards, Procedures, and Guidelines
Building an Effective Privacy Program	251	(14)
Rebecca Herold
Training Employees To Identify Potential Fraud and How To Encourage Them To Come Forward	265	(20)
Rebecca Herold
Security Management Planning
Beyond Information Security Awareness Training: It Is Time To Change the Culture	285	(10)
Stan Stahl
Establishing a Successful Security Awareness Program	295	(10)
Charles R. Hudson, Jr.
Applications and Systems Development Security	305	(58)
System Development Controls
System Development Security Methodology	309	(16)
Ian Lim
Ioana V. Bazavan
Software Engineering Institute Capability Maturity Model	325	(14)
Matt Nelson
Malicious Code
Organized Crime and Malware	339	(12)
Michael Pike
Methods of Attack
Enabling Safer Deployment of Internet Mobile Code Technologies	351	(12)
Ron Moritz
Cryptography	363	(30)
Crypto Concepts, Methodologies and Practices
Blind Detection of Steganographic Content in Digital Images Using Cellular Automata	367	(6)
Sasan Hamidi
An Overview of Quantum Cryptography	373	(12)
Ben Rothke
Elliptic Curve Cryptography: Delivering High-Performance Security for E-Commerce and Communications	385	(8)
Paul Lambert
Security Architecture and Models	393	(10)
Principles of Computer and Network Organizations, Architectures, and Designs
Enterprise Assurance: A Framework Explored	397	(6)
Bonnie A. Goins
Operations Security	403	(26)
Operations Controls
Managing Unmanaged Systems	407	(16)
Bill Stackpole
Man Nguyen
Resource Protection Requirements
Understanding Service Level Agreements	423	(6)
Gilbert Held
Business Continuity Planning and Disaster Recovery Planning	429	(68)
Business Continuity Planning
Building Maintenance Processes for Business Continuity Plans	433	(12)
Ken Doughty
Identifying Critical Business Functions	445	(6)
Bonnie A. Goins
Selecting the Right Business Continuity Strategy	451	(6)
Ken Doughty
Disaster Recovery Planning
Contingency at a Glance	457	(8)
Ken M. Shaurette
Thomas J. Schleppenbach
The Business Impact Assessment Process and the Importance of Using Business Process Mapping	465	(18)
Carl Jackson
How To Test Business Continuity and Disaster Recovery Plans and How Often	483	(14)
James S. Mitts
Law, Investigation, and Ethics	497	(140)
Information Law
Sarbanes--Oxley Compliance: A Technology Practitioner's Guide	501	(10)
Bonnie A. Goins
Health Insurance Portability and Accountability Act Security Rule	511	(14)
Lynda L. McGhie
The Ethical and Legal Concerns of Spyware	525	(12)
Janice C. Sipior
Burke T. Ward
Georgina R. Roselli
Major Categories of Computer Crime
The Evolution of the Sploit	537	(14)
Ed Skoudis
Computer Crime	551	(8)
Christopher A. Pilewski
Phishing: A New Twist to an Old Game	559	(20)
Stephen D. Fried
It's All about Power: Information Warfare Tactics by Terrorists, Activists, and Miscreants	579	(22)
Gerald L. Kovacich
Andy Jones
Perry G. Luzwick
Incident Handling
DCSA: A Practical Approach to Digital Crime Scene Analysis	601	(14)
Marcus K. Rogers
What a Computer Security Professional Needs To Know about E-Discovery and Digital Forensics	615	(6)
Larry R. Leibrock
How To Begin a Non-Liturgical Forensic Examination	621	(16)
Carol Stucki
Physical Security	637	(26)
Elements of Physical Security
Physical Security for Mission-Critical Facilities and Data Centers	641	(22)
Gerald Bowman
Index	663