A Practical Guide to Security Engineering and Information Assurance

ISBN-13: 9780849311635 / Angielski / Twarda / 2001 / 408 str.

Debra S. Herrmann

Opis

Today the vast majority of the world's information resides in, is derived from, and is exchanged among multiple automated systems. Critical decisions are made, and critical action is taken based on information from these systems. Therefore, the information must be accurate, correct, and timely, and be manipulated, stored, retrieved, and exchanged safely, reliably, and securely. In a time when information is considered the latest commodity, information security should be top priority. A Practical Guide to Security Engineering and Information Assurance gives you an engineering approach to information security and information assurance (IA). The book examines the impact of accidental and malicious intentional action and inaction on information security and IA. Innovative long-term vendor, technology, and application-independent strategies show you how to protect your critical systems and data from accidental and intentional action and inaction that could lead to system failure or compromise. The author presents step-by-step, in-depth processes for defining information security and assurance goals, performing vulnerability and threat analysis, implementing and verifying the effectivene

Spis treści

Introduction. What is Information Assurance, How Does It Relate to Information Security, and Why Are Both Needed? Historical Approaches to Information Security and Information Assurance. Define the System Boundaries. Perform Vulnerability and Threat Analyses. Implement Threat Control Measures. Verify Effectiveness of Threat Control Measures. Conduct Accident/Incident Investigations. Glossary of Terms. Glossary of Techniques. Additional Resources. Summary of the Components, Activities, and Tasks of an Effective Information Security/IA Program. Index.

O autorze

Herrmann, Debra S.