Introduction to Security and Network Forensics

Keeping up with the latest developments in cyber security requires ongoing commitment, but without a firm foundation in the principles of computer security and digital forensics, those tasked with safeguarding private information can get lost in a turbulent and shifting sea. Providing such a foundation, Introduction to Security and Network Forensics covers the basic principles of intrusion detection systems, encryption, and authentication, as well as the key academic principles related to digital forensics. Starting with an overview of general security concepts, it addresses hashing, digital certificates, enhanced software security, and network security. The text introduces the concepts of risk, threat analysis, and network forensics, and includes online access to an abundance of ancillary materials, including labs, Cisco challenges, test questions, and web-based videos. The author provides readers with access to a complete set of simulators for routers, switches, wireless access points (Cisco Aironet 1200), PIX/ASA firewalls (Version 6.x, 7.x and 8.x), Wireless LAN Controllers (WLC), Wireless ADUs, ASDMs, SDMs, Juniper, and much more, including: More than 3,700 unique Cisco challenges and 48,000 Cisco Configuration Challenge Elements 60,000 test questions, including for Certified Ethical Hacking and CISSP 350 router labs, 180 switch labs, 160 PIX/ASA labs, and 80 Wireless labs Rounding out coverage with a look into more advanced topics, including data hiding, obfuscation, web infrastructures, and cloud and grid computing, this book provides the fundamental understanding in computer security and digital forensics required to develop and implement effective safeguards against ever-evolving cyber security threats. Along with this, the text includes a range of online lectures and related material, available at: http: //asecuritybook.com. Front Cover 1 Contents 9 Preface 15 Author 17 Chapter 1: Introduction to Security 19 Chapter 2: Intrusion Detection Systems 53 Chapter 3: Encryption 103 Chapter 4: Authentication, Hashing, and Digital Certificates 151 Chapter 5: Enhanced Software Security 193 Chapter 6: Network Security Elements 223 Chapter 7: Introduction to Risk 259 Chapter 8: Threat Analysis 293 Chapter 9: Network Forensics 331 Chapter 10: Data Hiding and Obfuscation 373 Chapter 11: Web Infrastructures 413 Chapter 12: Cloud/Grid Computing 457 Appendix A 487 Back Cover 495 Keeping up with the latest developments in cyber security requires ongoing commitment, but without a firm foundation in the principles in computer security and digital forensics, those tasked with safeguarding our most private information will be lost in a turbulent and shifting sea. Providing such an introductory text, Introduction to Security and Network Forensics covers the basic principles of intrusion detection systems, encryption, and authentication, as well as the key academic principles related to digital forensics Presents information in forensic computing and IT security. This volume offers practical insight to security and its importance in design, implementation, and the maintenance of systems. It provides guidance on creating systems that allow data to be gathered for future investigation of an event.