Cybercrime and Cybersecurity

Preface

Introduction

• CIA Triad
• Confidentiality
• Integrity
• Availability
• Conclusion

Risk Management

• Introduction
• Risk Assessment Scope
• Analysing Data
• Risk Mitigation or Acceptance?
• Case Study: Which Country Is Most Likely to Attack?
• Conclusion

Threats

• Introduction
• Mistakes
• Stealing and Fraud
• Employee Sabotage
• Supporting Infrastructure Loss
• Hacking
• Espionage (Commercial and Government)
• Malicious Code (Malware)
• Scams
• Case Study: Data Loss in the British Government
• Conclusion

Organisational Responses

• Introduction
• The Cybersecurity Strategy
• Case Study: Monitoring the Underground Economy
• Conclusion

Operational Security: Users

• Introduction
• Staffing
• Managing Users
• Psychological Factors
• Modifying User Behaviour
• Case Study: A Non-Associative Model of Phishing
• Conclusion

Operational Security: Systems

• Introduction
• Physical Security
• Conclusion

Operational Security: Threat Response

• Introduction
• Situational Crime Prevention
• Incident Response
• Disaster Response
• Conclusion

Technical Responses: Securing Systems

• Introduction
• Identification and Authentication
• Authorisation and Access Control
• Cryptography
• Steganography
• Antivirus
• Conclusion

Technical Responses: Forensics

• Introduction
• Conclusion

Technical Responses: Penetration Testing

• Introduction
• Breaking into Your Own Network
• Breaking Your Own Applications
• Conclusion

Regulatory and Legal Responses

• Introduction
• Expert Juries
• Conclusion

Honeypots and Deception

• Introduction
• Child Exploitation as a Cybercrime
• Technical Mechanisms for Warning Message Delivery
• The Classic Case
• The Broader Case
• Legal Issues
• Conclusion