Computer Security : Art and Science (Hardcover)

This book provides a thorough and comprehensive introduction to computer security. It covers both the theoretical foundations and practical aspects of secure systems. The theory demonstrates what is possible; the practical shows what is feasible. The book also discusses policy, because policy ultimately defines what is and is not “secure.” Throughout, the well-known author reveals the multiplex interrelationships among the many subdisciplines of computer security, and provides numerous examples to illustrate the principles and techniques discussed. This long-awaited book has been thoroughly class-tested at both the advanced undergraduate level, with an emphasis on its more applied coverage, and at the introductory graduate level, where theory and practice are covered more equally.

Table of Contents

Preface.

I. INTRODUCTION.

1. An Overview of Computer Security.
2. Access Control Matrix.
3. Foundational Results.

III. POLICY.

4. Security Policies.
5. Confidentiality Policies.
6. Integrity Policies.
7. Hybrid Policies.
8. Noninterference and Policy Composition.

IV. IMPLEMENTATION I: CRYPTOGRAPHY.

9. Basic Cryptography.
10. Key Management.
11. Cipher Techniques.
12. Authentication.

V. IMPLEMENTATION II: SYSTEMS.

13. Design Principles.
14. Representing Identity.
15. Access Control Mechanisms.
16. Information Flow.
17. Confinement Problem.

VI. ASSURANCE.

18. Introduction to Assurance.
19. Building Systems with Assurance.
20. Formal Methods.
21. Evaluating Systems.

VII. SPECIAL TOPICS.

22. Malicious Logic.
23. Vulnerability Analysis.
24. Auditing.
25. Intrusion Detection.

VIII. PRACTICUM.

26. Network Security.
27. System Security.
28. User Security.
29. Program Security.