Phu Xuan University Library
|
PXU E-LIB
Sign in
Information Security

External

Information Security

Engineering
Author
Patrick McClanahan
Publisher
San Joaquin Delta College
Source
LibreTexts
License
CC BY-SA
Language
EN
Read online Download PDF (open licence)
Contents· 104 sections
  1. 01: Information Security Defined
  2. 1.1 Information Security
  3. 1.1.1 Information Security vs Cybersecurity
  4. 1.1.2 Information Security vs Network Security
  5. 1.2 Threats to Information Security
  6. 1.3 Models of Security - CIA Parkerian Hexad
  7. 1.4 Attacks - Types of Attacks
  8. 1.5: Vulnerabilities
  9. 1.6: Risk
  10. 1.4.1: Risk and Vulnerabilities
  11. 1.7: Incidence Response
  12. 1.8: Defense in Depth
  13. 02: Authenticate and Identify
  14. 2.1: Identification
  15. 2.2: Authentication
  16. 2.3: Authentication Methods - Password
  17. 2.3.1: Authentication Methods - Password (continued)
  18. 2.3.2: Authentication Methods - Biometrics
  19. 2.3.3: Authentication Methods - Security Tokens
  20. 03: Authorize and Access Control
  21. 3.1: What are access controls
  22. 3.2: Access Control - ACL
  23. 3.3: Access Control - Models
  24. 3.4: Physical Controls
  25. 3.4.1: Physical Controls (continued)
  26. 04: Auditing and Accountability
  27. 4.1: Accountability
  28. 4.2: Auditing
  29. 4.2.1: Information Security Audit
  30. 4.2.2: Information Security Audit (continued)
  31. 4.2.3: Information Security Audit (continued)
  32. 4.3: Audited Systems
  33. 4.4: Types of Audits
  34. 4.5: Auditing Application Security
  35. 5: Cryptography
  36. 5.1: Introduction
  37. 5.2: Terminology
  38. 5.3: A Bit of History
  39. 5.4: Computers and Cryptography
  40. 5.5: Modern Cryptography
  41. 5.6: Crytography and Legal Rights
  42. 5.7: Cryptography Applications
  43. 06: Compliance Laws and Regulations
  44. 6.1: Introduction
  45. 6.2: Laws and Regulations
  46. 6.3: Compliance
  47. 6.3.1: Regulatory Compliance
  48. 6.3.2: Industry Compliance
  49. 6.4: Privacy
  50. 6.4.1: Information Privacy in the U.S.
  51. 6.4.2: Information Privacy in the U.S. (continued)
  52. 07: Operations Security
  53. 7.1: Introduction
  54. 7.2: OSI and TCP IP Models
  55. 7.2.1: OSI Model
  56. 7.2.2: Transmission Control Protocol Internet Protocol Model
  57. 7.3: Network Protocols
  58. 7.3: Networking Security Concepts
  59. 08: Human Element Security
  60. 8.1: Web Application Attacks
  61. 8.1.1: Web Applications Vulnerabilities
  62. 8.1.1.1: Injection Vulnerabilities
  63. 8.1.1.2: Weak Authentication
  64. 8.1.1.3: Cross Site Scripting (XSS)
  65. 8.1.1.4: Sensitive Data Exposure
  66. redirects:
  67. 8.1.1.6: Directory Traversal Attack
  68. 8.2: Wireless Networks Attacks
  69. 8.2.1: Bluetooth
  70. 8.2.2: Wireless Local Area Network (WLAN) attacks
  71. 8.2.2.1: Rogue Access Points
  72. 8.2.2.2: Evil Twins
  73. 8.2.2.3: Intercepting the Wireless Data
  74. 8.2.2.4: Replay Attacks
  75. 8.2.2.5 Denial of Service
  76. 8.2.2.6: War Driving and Chalking
  77. 09: Physical Security
  78. 9.1 Malicious Attacks
  79. 9.2: What we are trying to Protect
  80. 9.3: Types of Active Threats
  81. 9.4: Wireless Networks and Web Application attacks
  82. 9.5: Recommendations for Avoidance
  83. 10: Social Engineering
  84. 10.1: What is Social Engineering
  85. 10.2: Techniques of Social Engineering
  86. 10.3: Social Engineering in Action
  87. 10.4: Social Engineering in Hollywood
  88. 10.5 Preventing Social Engineering
  89. Further Investigation
  90. 11: Secure Software Design
  91. 11.1: Introduction to Software Security
  92. 11.2: Using Other Software as Building Blocks
  93. 11.3 Privacy
  94. 11.4 Software Design
  95. 11.5 Updating Software
  96. 11.6 Deployed Applications and Web Applications
  97. 11.7 Common Programming Errors
  98. 12: Mobile Embedded and Internet of Things Security
  99. 12.1 Introduction to Malware
  100. 12.2 Viruses and Threats
  101. 12.3 Other Malware
  102. 12.4 Staying Safe
  103. 13: Application Security
  104. 14: Assessing Security