Security in Computing (3rd ed)

The classic guide to information security - fully updated for the latest attacks and countermeasures. "Security in Computing, Third Edition" systematically demonstrates how to control failures of confidentiality, integrity, and availability in applications, databases, operating systems, and networks alike.

This sweeping revision of the field's classic guide to computer security reflects today's entirely new generation of network- and Internet-based threats and vulnerabilities, and offers practical guidance for responding to them.

This book is updated to cover wireless security, intrusion detection, AES, DRM, biometrics, honeypots, online privacy, and more. It covers: security in Internet-based, distributed, desktop and traditional centralized applications; new attacks, including scripted vulnerability probing, denial of service, and buffer overflows - with symptoms and cures; clear, accessible introduction to cryptography - without sophisticated math; up-to-the-minute explanations of digital signatures, certificates, and leading-edge quantum cryptography; thoroughly revamped coverage of software engineering practices designed to enhance program security; expanded coverage of risk management, contingency planning, and security policies; detailed presentation of protection in general-purpose and trusted operating systems; extensive pedagogical resources: end-of-chapter reviews and exercises, lists of key terms, and authoritative references.

Exceptionally clear and easy to understand, the book covers not only technical issues, but also law, privacy, ethics, and the physical and administrative aspects of security.