The Virtual Bookcase : Shelf Computer security
Security of computer systems
Shelf parts : First Previous Next Last
Review:
I have learned to beware of books with titles like this, which
generally indicate a hastily compiled set of old vulnerabilities,
benefitting nobody save the author. This work, however, turns out to
have a lot of value for those interested in security of software.
Although it does not deal with the factors inherent in software that
almost ensure problems, chapter one outlines the fact of bugs in
software, the relative rate and increasing prevalence, and future
developments that may exacerbate the issue. Chapter two provides
taxonomies of general types of software problems (distinguishing, for
example, between a bug and a flaw), patterns of attack activities
(pointing out that most exploits are used in combination), and types
of system sc...
Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Exploiting Software : How to Break Code
Book descriptionTraditional security toolkits have concentrated mostly on defining a programming interface (API) and left the internals up to individual implementors. This book presents a design for a portable, flexible security architecture based on traditional security models involving a security kernel that controls access to security-relevant objects and attributes based on a configurable security policy. Layered on top of the kernel are various objects that abstract core functionality, such as encryption and digital signature capabilities, certificate management, and secure sessions and data enveloping (email encryption) in a manner that allows them to be easily moved into cryptographic devices, such as smart cards and crypto accelerators for extra pe...
Rest of this review on the detail page
I want to add the first review for this book!
Reviews (1) and details of Cryptographic Security Architecture: Design and Verification
Book descriptionWritten by an information security specialist, this second edition of Investigating Computer-Related Crime discusses cybercrime, its investigation, and the difficulties encountered by both public law enforcement officials and private corporate investigators. The book offers insights into collecting evidence, interrogating suspects and witnesses, handling crime in progress, issues involving the authorities, and helpful case studies. Updated chapters incorporate new kinds of attacks, current work of the Digital Forensic Research Workshop and their investigative model, new operating systems, the impact of the Patriot Act, and new ways of analyzing computer media.
I want to add the first review for this book!
Reviews (1) and details of Investigating Computer-Related Crime, Second Edition
Review:
The existence of this book is a bit odd, particularly in view of the
fact that it shares so much material with Stallings' "Cryptography and
Network Security." The (clear and structured) preface, however,
states that the intent is to provide a practical survey of network
security applications and standards, particularly those in widespread
use. As with the earlier work, this book is intended to serve both as
a textbook for an academic course of study, and as a self-study and
reference guide for practicing professionals. There is reduced detail
in regard to cryptography.
Chapter one is an introduction, and provides a good list of basic
concepts and vocabulary. It may not be completely apparent to all
readers that the emphasis is on thre...
Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Network Security Essentials: Applications and Standards
Shelf parts : First Previous Next Last