Introduction to Computer Security

Author: (USA) Bishop, M. (Author), Wang Libin, Huang Zheng, et al. (Translators)
Publisher:
Publish Date: 2005-11-01
Features: In this authoritative textbook, author Matt Bishop provides readers with valuable information about information security technologies. With Bishop's deep understanding of information security and real-world examples, this book will help information security professionals and students understand the relationship between security theory and the increasingly prevalent security challenges in today's IT environment. In this book, the authors elaborate on the foundation of information security—various types of widely used security policies; the security mechanisms used to implement these policies; security principles under policies and mechanisms; how attackers exploit tools to carry out attacks; and how to defend against these attacks. Each chapter's exercises focus on how to apply these policies and mechanisms to real-world corporate environments. The main content of the book includes: confidentiality, integrity, and availability; operational issues, cost-benefit analysis, and risk analysis, legal factors, and human factors; planning and implementing effective access control; defining security policies, confidentiality policies, and integrity policies; utilizing cryptography and public key systems, recognizing their limitations; security design principles: Principle of Least Privilege, Principle of Default Denial, Open Design Principle, Principle of Mechanism Simplicity, etc.; understanding and using authentication mechanisms from passwords to biometrics; utilizing system and network control information flow; ensuring security throughout the entire system lifecycle; methods for defending against Trojans, boot sector viruses, executable viruses, rabbits, bacteria, logic bombs, etc.; vulnerability analysis, penetration testing,, intrusion detection, and protection; applying security principles to networks, systems, users, and programs. This book is an authoritative textbook that comprehensively and systematically introduces the basic principles and application technologies of computer security. The entire book consists of 29 chapters, primarily exploring the most fundamental and common issues in the field of computer security. In addition to briefly introducing cryptographic theory, it provides detailed explanations of non-cryptographic security mechanisms, including security design principles, identity expression, access control mechanisms, and information flow control. Additionally, it introduces the principles and technologies of malicious code, vulnerability analysis, system auditing, and intrusion detection in a thematic format. The book also provides in-depth discussions on security policy models and security assurance systems, such as various security models, the construction of trusted systems, and the theory and technology of evaluating secure systems. This book can serve as a textbook for graduate students and senior undergraduate students and can also be referenced by professionals working in the fields of information security, computer science, and communications.