Principles and Practice of Information Security

Description:

For introductory courses in Security; as well as courses in Corporate, Computer and Network Security.

This text provides students and professionals with the necessary managerial, technical, and legal background to support investment decisions in security technology. It discusses security from the perspective of hackers (i.e., technology issues and defenses) and lawyers (i.e., legal issues and defenses). This cross-disciplinary text is designed to help users quickly become current on what has become a fundamental business issue.

Table of Contents:

I. DIGITAL LIABILITIES AND RISK MANAGEMENT.

 1. Security in a Globally Connected Economy.

 2. Sources of Digital Liability.

 3. Threats, Vulnerabilities, and Risk Exposure.

 4. An Affirmative Model of Defense: Digital Liability Management.

 5. Models for Estimating Risk and Optimizing the Return on Security Investment.

II. POLICIES, PRACTICES, AND DEFENSIVE TECHNOLOGY.

 6. Acceptable Use Policies: Human Defenses.

 7. Secure Use Practices: Defensive Best Practices.

 8. Technology and Auditing Systems: Hardware and Software Defenses.

III. COMPUTER FORENSICS, ELECTRONIC EVIDENCE, FRAUD, AND COMPUTER CRIME LAWS.

 9. Electronic Evidence, Electronic Records Management, and Computer Forensics.

10. Computer Crime, Computer Fraud, and Cyber Terrorism.

Appendix: USA PATRIOT Act.

IV. PRIVACY.

11. Privacy and Data Protection.

 

Appendix: HIPAA.

Glossary of Technology and Legal Terms.

Abbreviations and Acronyms.

 

References.

 

Online References.

Subject Index.