Pearson Computer Security Fundamentals

Introduction

Introduction to Computer Security

• Introduction
• How Seriously Should You Take Threats to Network Security?
• Identifying Types of Threats
• Assessing the Likelihood of an Attack on Your Network
• Basic Security Terminology
• Concepts and Approaches
• How Do Legal Issues Impact Network Security?
• Online Security Resources
• Summary

Networks and the Internet

• Introduction
• Network Basics
• How the Internet Works
• History of the Internet
• Basic Network Utilities
• Other Network Devices
• Advanced Network Communications Topics
• Summary

Cyber Stalking, Fraud, and Abuse

• Introduction
• How Internet Fraud Works
• Identity Theft
• Cyber Stalking
• Protecting Yourself Against Cyber Crime
• Summary

Denial of Service Attacks

• Introduction
• DoS
• Illustrating an Attack
• Summary

Malware

• Introduction
• Viruses
• Trojan Horses
• The Buffer-Overflow Attack
• The Sasser Virus/Buffer Overflow
• Spyware
• Other Forms of Malware
• Detecting and Eliminating Viruses and Spyware
• Summary

Techniques Used by Hackers

• Introduction
• Basic Terminology
• The Reconnaissance Phase
• Actual Attacks
• Malware Creation
• Penetration Testing
• Summary

Industrial Espionage in Cyberspace

• Introduction
• What Is Industrial Espionage?
• Information as an Asset
• Real-World Examples of Industrial Espionage
• How Does Espionage Occur?
• Steganography Used in Industrial Espionage
• Phone Taps and Bugs
• Protecting Against Industrial Espionage
• Industrial Espionage Act
• Spear Phishing
• Summary

Encryption

• Introduction
• Cryptography Basics
• History of Encryption
• Modern Methods
• Public Key (Asymmetric) Encryption
• PGP
• Legitimate Versus Fraudulent Encryption Methods
• Digital Signatures
• Hashing
• MAC and HMAC
• Steganography
• Cryptanalysis
• Cryptography Used on the Internet
• Summary

Computer Security Technology

• Introduction
• Virus Scanners
• Firewalls
• Antispyware
• IDS
• Digital Certificates
• SSL/TLS
• Virtual Private Networks
• Wi-Fi Security
• Summary

Security Policies

• Introduction
• What Is a Policy?
• Defining User Policies
• Defining System Administration Policies
• Defining Access Control
• Developmental Policies
• Standards, Guidelines, and Procedures
• Data Classification
• Disaster Recovery
• Important Laws
• Summary

Network Scanning and Vulnerability Scanning

• Introduction
• Basics of Assessing a System
• Securing Computer Systems
• Scanning Your Network
• Getting Professional Help
• Summary

Cyber Terrorism and Information Warfare

• Introduction
• Actual Cases of Cyber Terrorism
• Weapons of Cyber Warfare
• Economic Attacks
• Military Operations Attacks
• General Attacks
• Supervisory Control and Data Acquisitions (SCADA)
• Information Warfare
• Actual Cases
• Future Trends
• Defense Against Cyber Terrorism
• Terrorist Recruiting and Communication
• TOR and the Dark Web
• Summary

Cyber Detective

• Introduction
• General Searches
• Court Records and Criminal Checks
• Usenet
• Summary

Introduction to Forensics

• Introduction
• General Guidelines
• Finding Evidence on the PC
• Finding Evidence in System Logs
• Getting Back Deleted Files
• Operating System Utilities
• The Windows Registry
• Mobile Forensics: Cell Phone Concepts
• The Need for Forensic Certification
• Expert Witnesses
• Additional Types of Forensics
• Summary

Appendix B. Resources