The Basics of Information Security: Understanding the Fundamentals of Infosec in Theory and Practice

ISBN-13: 9780128007440 / Angielski / Miękka / 2014 / 240 str.

Jason Andress

Opis

As part of the Syngress Basics series, The Basics of Information Security provides you with fundamental knowledge of information security in both theoretical and practical aspects. Author Jason Andress gives you the basic knowledge needed to understand the key concepts of confidentiality, integrity, and availability, and then dives into practical applications of these ideas in the areas of operational, physical, network, application, and operating system security. The Basics of Information Security gives you clear-non-technical explanations of how infosec works and how to apply these principles whether you're in the IT field or want to understand how it affects your career and business. The new Second Edition has been updated for the latest trends and threats, including new material on many infosec subjects.

• Learn about information security without wading through a huge textbook
• Covers both theoretical and practical aspects of information security
• Provides a broad view of the information security field in a concise manner
• All-new Second Edition updated for the latest information security trends and threats, including material on incident response, social engineering, security awareness, risk management, and legal/regulatory issues

Recenzje

"...can best serve as a precursor to the issue of information security, as it introduces various threat perceptions and related topics in a manner that is easy to understand." --Computing Reviews, 2014

Spis treści

1. What is Information Security? 2. Identification and Authentication 3. Authorization and Access Control 4. Auditing and Accountability 5. Cryptography 6. Legal and Regulatory Issues 7. Operations Security 8. Human Element Security 9. Physical Security 10. Network Security 11. Operating System Security 12. Application Security

O autorze

Jason Andress (CISSP, ISSAP, CISM, GPEN) is a seasoned security professional with a depth of experience in both the academic and business worlds. Presently he carries out information security oversight duties, performing penetration testing, risk assessment, and compliance functions to ensure that critical assets are protected. Jason has taught undergraduate and graduate security courses since 2005 and holds a doctorate in computer science, researching in the area of data protection. He has authored several publications and books, writing on topics including data security, network security, penetration testing, and digital forensics.