Network Security Design (Second Edition)

Author: [USA] Kevin
Publisher:
Publish Date: 2005-09-01
Features: This book is a practical guide that helps you understand the fundamental principles of ensuring the security of your enterprise network infrastructure. It comprehensively introduces basic security technologies, the process of creating security policies, and the practical requirements for implementing enterprise security policies. You will gain a thorough understanding of basic cryptography—a common security technology—as well as emerging key security technologies. By learning about potential threats and vulnerabilities and understanding the steps required to implement a risk management assessment, you will be able to guide the construction and implementation of security policies in an enterprise environment. Through specific configuration examples, you can explore the performance required for network infrastructure devices to achieve a given security policy, ensuring the security of the enterprise internal infrastructure, internet access, and remote access environments. This new edition covers new security features, including SSH and PIX firewall configurations for routers and switches; enhancements to L2TP and IPSEC; CISCO LEAP for wireless networks; digital certificates, advanced AAA functionality; performance and products of the CISCO Intrusion Detection System; and more. Additionally, it provides practical examples of current security trends, including VPN, wireless, and VoIP network examples.
This book was previously translated into Chinese in 2000 and was widely well-received by readers. Building on the previous edition, this book has been enriched with many new developments in computer network security technologies. It has also added chapters to address practical issues in VPN, wireless, and VoIP networks, as well as a dedicated chapter on routing protocol security. Furthermore, the book has been supplemented with additional content on topics such as firewalls and intrusion detection systems.
The book is divided into four parts:
- Part I covers basic cryptography, network security technologies, the application of security technologies in actual networks, and routing protocol security, providing readers with a technical foundation.
- Part II discusses threats in enterprise and business networks, considerations for network site security policies, the design and implementation of enterprise and business network security policies, and the handling of security incidents, helping readers gain the knowledge needed to create security policies.
- Part III focuses on ensuring the security of enterprise network infrastructure, ensuring the security of internet access, ensuring the security of remote access, and ensuring the security of VPN, wireless, and VoIP networks, showcasing a comprehensive design approach and practical examples using Cisco devices to build network security.
- Part IV is a set of appendices, listing resources for more technical information on network security design, including handling security incidents and steps to mitigate Distributed Denial of Service (DDoS) attacks.
Additionally, the book includes a glossary and solutions to chapter exercises for reference at the end. This book is suitable for engineers, designers, and architects involved in the design, management, and maintenance of computer network security. It can also serve as a textbook or reference for undergraduate and graduate students in computer and communication disciplines studying courses on computer network information security.