Executive Management Overview
A Need for Security
What is Security?
Attaining a Level of Security
The Importance of Checks and Balances
Access Controls
Communication and Training
Attaining a Level of Security
Identifying Risks
Physical Security
Logical Security
Employee or Human Resources Security
Assessing Risk
Establishing Controls
Monitoring Controls
Responsibility and Accountability
Internal Systems Control Structures
General Process for Change Management
Operations Control Log
System Work Log
What is a Security Policy?
Steps to a Security Policy
Why is a Security Policy Needed?
What Does a Security Policy Do?
Implementing the Security Policy
Involving and Informing Management
Communication of the Security Policy
Internal Controls
Scenario Example
Sample Security Policies
Security Return on Investment
Perimeter Security Scenarios
Basic Bastion Host (Dual-Homed Host)
Multi-Homed Bastion Host
Hybrid Multi-Homed Bastion Host
Directions in Security
Perimeter Security
Trusted Systems
Intrusion Detection Systems
Intrinsic Security
Honey Pots
Corporate Security Requirements for Conducting Business over the Internet
Internal Corporate VPNs
Business Partner VPNs
The Mobile Workforce and VPNs
Systems Management and Security
The Virtual Workforce
Implementing Check Point FireWall-1/VPN-1 with Windows NT and Windows 2000
Performing Background Preparation
Assembling the Hardware
Materials List
Network Settings
Password Selection
Documentation
Software Patches
Communications and Protocol Selections
Registry Tuning
System Policies
Installing the Operating System
Microsoft Windows NT 4.0 Server
Installing Check Point FireWall-1
Configuration for a Multi-Homed Host or DMZ Configuration
Defining the VPN
SecuRemote
Windows 2000 Server Setup, Installation, and Configuration for Check Point FireWall-1/VPN-1
Check Point FireWall-1/VPN-1 Operating Notes
Enhancing the Security Infrastructure
Virus Protection
Fault Tolerance and Load Balancing
Reporting and Management
Encryption Acceleration
Public Key Infrastructure
Authentication
Intrusion Detection
Backup and Recovery
Appendices
DoD Security Classifications
Asset Inventory List
Windows NT 4.0 SP6a Post Security Rollup Patch List
Letter Issued to Customers of the Egghead E-Commerce Site and Press Release
Virus Memo
Sample Systems Operations Procedures Manual
Systems Policies and Guidelines
Computer Security and Usage Policy
References
Index

Michael A. Simonyi