Publisher Description

High-level overview of the information security field. Covers key concepts like confidentiality, integrity, and availability, then dives into practical applications of these ideas in the areas of operational, physical, network, application, and operating system -level overview of the information security field. Covers key concepts like confidentiality, integrity, and availability, then dives into practical applications of these ideas in the areas of operational, physical, network, application, and operating system this high-level survey of the information security field, best-selling author Jason Andress covers the basics of a wide variety of topics, from authentication and authorization to maintaining confidentiality and performing penetration real-world security breaches as examples, Foundations of Information Security explores common applications of these concepts, such as operations security, network design, hardening and patching operating systems, securing mobile devices, as well as tools for assessing the security of hosts and 'll also learn the basics of topics like-Multifactor authentication and how biometrics and hardware tokens can be used to harden the authentication processThe principles behind modern cryptography, including symmetric and asymmetric algorithms, hashes, and certificatesThe laws and regulations that protect systems and dataAnti-malware tools, firewalls, and intrusion detection systemsVulnerabilities such as buffer overflows and race conditionsA valuable resource for beginning security professionals, network systems administrators, or anyone new to the field, Foundations of Information Security is a great place to start your journey into the dynamic and rewarding field of information security.

Table of Contents

Introduction

Chapter 1: What is Information Security?
Chapter 2: Indentification and Authentication
Chapter 3: Authorization and Access Control
Chapter 4: Auditing and Accountability
Chapter 5: Cryptography
Chapter 6: Compliance, Laws, and Regulations
Chapter 7: Operations Security
Chapter 8: Human Element Security
Chapter 9: Physical Security
Chapter 10: Network Security
Chapter 11: Operating System Security
Chapter 12: Mobile, Embedded, and Internet of Things Security
Chapter 13: Application Security
Chapter 14: Assessing Security

Notes

Review

"This book is an excellent starting point for future security professionals but also network and system administrators."
—Help Net Security

"A thorough overview for many different areas within security. The author explains what and more importantly why, then illustrates each concept with concrete, realistic examples. Definitely a great addition to any security engineer's library, but also less technical people who want to learn more about common topics like defense in depth."
—Seth Foley

"If you're new to info security or are looking to refresh your knowledge, then this is an ideal book. It's easy to read and makes the information fun to consume."
—HaXez, Blogger and r

Promotional

High-level overview of the information security field. Covers key concepts like confidentiality, integrity, and availability, then dives into practical applications of these ideas in the areas of operational, physical, network, application, and operating system security.

Review Quote

"This book is an excellent starting point for future security professionals but also network and system administrators." --Help Net Security "A thorough overview for many different areas within security. The author explains what and more importantly why, then illustrates each concept with concrete, realistic examples. Definitely a great addition to any security engineer's library, but also less technical people who want to learn more about common topics like defense in depth." --Seth Foley "If you're new to info security or are looking to refresh your knowledge, then this is an ideal book. It's easy to read and makes the information fun to consume." --HaXez, Blogger and r

Promotional "Headline"

High-level overview of the information security field. Covers key concepts like confidentiality, integrity, and availability, then dives into practical applications of these ideas in the areas of operational, physical, network, application, and operating system security.

Description for Sales People

Jason Andress is an expert in the information security field with experience in the business and academic sectors. He has authored several academic texts on the subject, including The Basics of Information Security (Syngress, 2014) No Starch Press is recognised as a leading publisher of information security titles. fills the need for a text that offers a broad overview of the security field. This is a fully updated edition of the Syngress title.

Details