Appropriate for courses in Computer Security.

This sweeping revision of the classic computer security book provides an overview of all types of computer security from centralized systems to distributed networks. The Second Edition has been updated to make the most current information in the field available and accessible to today's professionals.

• NEW - Features new coverage of network security (firewalls, privacy enhancements for e-mail—PEM and PGP, secure network management, address spoofing, authentication and authorization in distributed systems, Kerberos, DCE, SESAME, CORBA, virtual private networks).

• NEW - Includes new coverage of security in programs (viruses, worms, the Morris/Internet worm, Trojan horses, other malicious code, covert leakage channels, program development and management controls).

• NEW - Presents new coverage of trust (security policies, models, security enforcement mechanisms, secure design, assurance, evaluation criteria, the U.S. "Orange Book" or TCSEC, the European ITSEC, the harmonized Common Criteria, evaluation).

• NEW - Offers new coverage of management/administration of security (security administration for PCs, UNIX systems, and networks, security plans, organizational security policies, physical security management, risk management/analysis, contingency planning).

• Provides coverage that is extremely up to date.

• Offers extended coverage of network security issues.

• Explains cryptology in depth.

• Brings together core computer science concepts of operating systems, networks, database management systems, and program development techniques, while making accessible the mathematical and formal topics of computation complexity, number theory, cryptography, and protocols.

• Contains pedagogical aids, such as an overview of key points to be learned in the chapter, a review of what the chapter has covered, a list of new terms and concepts, notes on key bibliographic references, and exercises to check understanding.

• Offers a layered presentation and comprehensive coverage of all aspects of security, allowing instructors to decide which topics to cover and how deeply to cover them.

• Covers key topics—vulnerabilities and controls—to the security of today’s information systems, including Firewalls, Privacy enhanced e-mail (PEM, PGP), Viruses, worms, Trojan horses, other malicious code, Cryptographic key escrow (e.g., "Clipper" /Fortezza), Risks in the World Wide Web and the Internet, Software quality, including ISO 9000 and the SEI CMM, Password security, Contingency planning, Digital signatures, including DSS, Public key cryptosystems, including RSA and El Gamal, Assurance evaluation—the Common Criteria, the ITSEC, the U.S. "Orange Book", Management and administration of secure installations, Security for the PC user—standalone and networked, and Risk analysis.

• Offers over 175 exercises and six case studies.

• Features new coverage of network security (firewalls, privacy enhancements for e-mail—PEM and PGP, secure network management, address spoofing, authentication and authorization in distributed systems, Kerberos, DCE, SESAME, CORBA, virtual private networks).

• Includes new coverage of security in programs (viruses, worms, the Morris/Internet worm, Trojan horses, other malicious code, covert leakage channels, program development and management controls).

• Presents new coverage of trust (security policies, models, security enforcement mechanisms, secure design, assurance, evaluation criteria, the U.S. "Orange Book" or TCSEC, the European ITSEC, the harmonized Common Criteria, evaluation).

• Offers new coverage of management/administration of security (security administration for PCs, UNIX systems, and networks, security plans, organizational security policies, physical security management, risk management/analysis, contingency planning).

Preface.


1. Is There a Security Problem in Computing?

Appropriate for beginning to intermediate courses in computer security.

This sweeping revision of the classic computer security book provides an authoritative overview of computer security for every type of system, from traditional centralized systems to distributed networks and the Internet. The Third Edition has been updated to reflect the state-of-the-art in networking; cryptography; program and operating system security; administration; legal, privacy, and ethical issues, and much more. It combines core computer science concepts related to operating systems, networks, data bases, and programming, with accessible discussions of the use of cryptography and protocols. The book describes each important area from a developer's or user's point of view, lays out the security vulnerabilities and threats, and follows countermeasures to address them. Their book's layered approach is ideal for instructors who wish to customize courses based on their unique requirements. They also provide extensive pedagogical resources–including overviews, end-of-chapter reviews, lists of key terms, and updated exercises and references.

The authors are recognized experts in their fields. Lead author Dr. Charles P. Pfleeger, CISSP, is currently Master Security Architect for Cable & Wireless, one of the world's leading providers of Internet and secure infrastructure services. Co-author Dr. Shari Lawrence Pfleeger is a Senior Researcher at RAND Corporation, a not-for-profit company providing strategy and decision-making support in the public interest. They are the authors of more than a dozen previous books on computer security, software engineering, software measurement, software quality, and programming.

Supplements including a solutions manual, PowerPoints and a companion website are available.  In the "Resources" box above, please click on "Instructor."

• Security in Computing, 3/E
  Pfleeger & Pfleeger
  © 2003 | Prentice Hall | Cloth; 746 pages | Instock
  ISBN-10: 0130355488 | ISBN-13: 9780130355485
  Brief Description
  
• Instructor's Manual, 4/E
  Pfleeger & Pfleeger
  © 2007 | Prentice Hall | Paper; 96 pages | Instock
  ISBN-10: 0132342596 | ISBN-13: 9780132342599
  
  

Charles P. Pfleeger is a master security architect at Exodus Communications, Inc. He has worked on security projects in Europe and Australia as well as in the USA. He has also spent 14 years as a professor of computer science at the University of Tennessee. Dr. Pfleeger is a graduate of Ohio Wesleyan University, and holds a Ph. D. in Computer Science from Pennsylvania State University.

33748-5

Every day, more and more critical information is created, transmitted, and archived by computers. This ever-growing reliance on technology has made computer security a higher priority than ever before, yet the pace of computer development has far outstripped the improvements in computer security. Today's computer professionals need a comprehensive understanding of all aspects of security in computing.

Security in Computing is the most complete and up-to-date college textbook now available. Enlivened by actual case studies and supported by more than 175 exercises, the book covers:

• Viruses, worms, Trojan horses, and other forms of malicious code
• Firewalls and the protection of networked systems
• E-mail privacy, including PEM, PGP, key management, and certificates
• Key escrow—both as a technology and in the “Clipper” program
• Evaluation of trusted systems, including the Common Criteria, the ITSEC, and the Orange Book
• Standards for program development and quality, including ISO9000 and SEI CMM
• Administering secure installations of PCs, UNIX¨, and networked environments
• Ethical and legal issues in computing

A modular, layered structure makes Security in Computing ideal for classroom use as well as a reference for professionals. Once the basic tools have been covered, the remaining chapters can be studied in any order, and to any depth desired.

Since the publication of the first edition in 1989, the number of threats to secure computing have increased, but so have the available countermeasures. This second edition has been thoroughly revised to reflect teaching experiences with the first edition and to incorporate all the latest information on computer security.

View a Sample Chapter PDF:

Pearson Higher Education offers special pricing when you choose to package your text with other student resources. If you're interested in creating a cost-saving package for your students, contact your Pearson Higher Education representative for pricing and ordering information.

Pearson Higher Education offers special pricing when you choose to package your text with other student resources. If you're interested in creating a cost-saving package for your students contact your Pearson Higher Education representative.