Information Security Management Handbook, Sixth Edition, Volume 3

by Tipton; Harold F.

• ISBN13: 9781420090925
• ISBN10: 1420090925
• Edition: 6th
• Format: Hardcover
• Copyright: 2009-06-24
• Publisher: Auerbach Public

Summary

Every year, in response to new technologies and new laws in different countries and regions, there are changes to the fundamental knowledge, skills, techniques, and tools required by all IT security professionals. In step with the lightning-quick, increasingly fast pace of change in the technology field, the Information Security Management Handbook, updated yearly, has become the standard on which all IT security programs and certifications are based. It reflects new updates to the Common Body of Knowledge (CBK) that IT security professionals all over the globe need to know.

Table of Contents

Preface	p. ix
Contributors	p. xi
Access Control
Expanding PKI-Based Access Control Capabilities with Attribute Certificates	p. 3
Five Components to Identity Management Systems	p. 19
Security Weaknesses of System and Application Interfaces Used to Process Sensitive Information	p. 33
Telecommunications and Network Security
Mobile Data Security	p. 43
Enhanced Security Through Open Standards: A Path to a Stronger Global Digital Ecosystem	p. 57
Web Application Firewalls	p. 73
Botnets	p. 77
Information Security and Risk Management
Collaborating Information Security and Privacy to Create Effective Awareness and Training	p. 89
Security Information and Event Management (SIEM) Technology	p. 111
The Insider Threat: A View from the Outside	p. 127
Pod Slurping	p. 137
The USB (Universal Security Burden) Nightmare: Pod Slurping and Other High Storage Capacity Portable Device Vulnerabilities	p. 145
Diary of a Security Assessment: "Put That in Your Pipe and Smoke It!"	p. 149
NERC Compliance: A Compliance Review	p. 163
Application Security
Mashup Security	p. 189
Format String Vulnerabilities	p. 199
Fast Scanning Worms	p. 207
Cryptography
Message Digests	p. 217
Quantum Computing: The Rise of the Machine	p. 227
Security Architecture and Design
Information Flow and Covert Channels	p. 239
Securing Data at Rest: From Smart Phones to Tapes Defining Data at Rest	p. 281
Operations Security
Validating Tape Backups	p. 303
Business Continuity Planning and Disaster Recovery Planning
Determining Business Unit Priorities in Business Continuity Management	p. 313
Continuity Program Testing, Maintenance, Training, and Awareness	p. 323
Legal, Regulations, Compliance, and Investigation
Bluesnarfing	p. 337
Virtualization and Digital Investigations	p. 347
Physical Security
Halon Fire Suppression Systems	p. 367
Crime Prevention through Environmental Design	p. 377
Data Center Site Selection and Facility Design Considerations	p. 393
Index	p. 401
Table of Contents provided by Ingram. All Rights Reserved.