Encyclopedia of Information Assurance - 4 Volume Set (Print)

Quantum Cryptography

Access Controls: PKI-Based

Accountability

Adaptable Protocol Framework

Advanced Encryption Standard (AES)

Applets: Network Security

Application Layer Security

Application Layer Security: Network Protocols

Application Security

Application Security: World Wide Web

Application Service Providers: Information Assurance Considerations

Application Service Providers: Secure Relationships

Application Systems Development

Applications: Auditing

Architecture: Biological Cells

Architecture: Firewalls

Architecture: Models

Architecture: Secure

Artificial Intelligence (AI): Intrusion Analysis

Asynchronous Transfer Mode (ATM): Integrity and Security

Auditing: Self-Hacking

Awareness and Training

Awareness and Training: Appendices

Awareness and Training: Briefing for the End User

Awareness and Training: Effective Methods

Awareness and Training: Framework

Awareness and Training: Motivational and Psychological Factors

Awareness and Training: Program Elements

Bally v. Faber

Biometrics: Identification

Biometrics: New Methods

Bluesnarfing

Broadband Internet Access

Buffer Overflows: Attacks

Buffer Overflows: Stack-Based

Business Continuity Management: Maintenance Processes

Business Continuity Management: Metrics

Business Continuity Management: Priorities

Business Continuity Management: Testing

Business Continuity Management: Testing, Maintenance, Training, and Awareness

Business Continuity Planning

Business Continuity Planning: Best Practices and Program Maturity

Business Continuity Planning: Case Study

Business Continuity Planning: Collaborative Approach

Business Continuity Planning: Distributed Environment

Business Continuity Planning: Enterprise Risk Management Structure

Business Continuity Planning: Evolution in Response to Major News Events

Business Continuity Planning: Process Reengineering

Business Continuity Planning: Restoration Component

Business Continuity Planning: Strategy Selection

Business Impact Analysis: Business Process Mapping

Business Impact Analysis: Process

Business Partnerships: Validation

Capability Maturity Model

Career Management

Centralized Authentication Services

Certification and Accreditation: Methodology

Certification Testing

Committee of Sponsoring Organizations (COSO)

Common Criteria

Common Criteria: IT Security Evaluation

Communication Protocols and Services

Compliance Assurance

Computer Abuse

Computer Crime

Computer Crime: Investigations

Configuration Management

Configuration Management: Process Stages

Controls: CISSP and Common Body of Knowledge (CBK)

Cookies and Web Bugs

Corporate Governance

Corporate Security: IT Organization

Covert Channels

Covert Channels: Analysis and Recommendations

Crime Prevention: Environmental Design

Critical Business Functions

Cross-Site Scripting (XSS)

Cryptography

Cryptography: Auditing

Cryptography: Cryptosystems

Cryptography: Elliptic Curve

Cryptography: Encryption and

Cryptography: Key Management: Functions and Principles

Cryptography: Key Management: History and Myths

Cryptography: Quantum

Cryptography: Transitions

Customer Relationship Management (CRM)

Cybercrime: Council of Europe

Cybercrime: Response, Investigation, and Prosecution

Cyber-Risk Management: Enterprise-Level Security

Data Access Controls: Sensitive or Critical

Data at Rest

Data Centers: Security

Data Centers: Site Selection and Facility Design

Data Sanitization: SQL Injection

Data Warehouses: Datamarts and

Data Warehouses: Security and Privacy

Database Integrity

Defense in Depth: Network, Systems, and Applications Controls

Denial-of-Service Attacks

Digital Crime Scene Analysis (DCSA)

Digital Forensics and E-Discovery

Directory Security

Distributed Computing: Grid Environment

DoD Information Assurance Certification and Accreditation Process (DIACAP)

Domain Name Service (DNS) Attacks

Downsizing: Maintaining Information Security

Due Care: Minimum Security Standards

Electronic Commerce: Auditing

E-Mail and Data Communications: Dial-In Hazards

E-Mail Retention Policy: Legal Requirements

E-Mail: Pretty Good Privacy

E-Mail: Security

E-Mail: Spam

Enclaves: Enterprise as Extranet

Encryption Key Management

End Node Security and Network Access Management

Enterprise Information Assurance: Framework

Enterprise Information Assurance: Key Components

Enterprise Information Security: Architectural Design and Deployment

Enterprise Security Capability: Common Models

Enterprise Security Information

Espionage: Counter-Economic

Ethics

Ethics: Internet

Event Management

External Networks: Secured Connections

Extranet Access Control

Fax Machines

Firewall Architectures

Firewall Architectures: Other Issues

Firewall Architectures: Platforms

Firewall Architectures: Viruses and Worms

Firewall Technologies: Comparison

Firewalls: Checkpoint Security Review

Firewalls: Internet Security

Forensics

Forensics and Legal Proceedings

Forensics: Computer Crime Investigation

Forensics: Non-Liturgical Examinations

Forensics: Operational

Forensics: Rules of Evidence

Format String Vulnerabilities

Fraud: Employee Identification

FTP: Secured Data Transfers

Global Transmissions: Jurisdictional Issues

Hackers: Attacks and Defenses

Hackers: Hiring Ex-Criminal

Hackers: Tools and Techniques

Halon Fire Suppression Systems

Hash Algorithms

Health Insurance Portability and Accountability Act (HIPAA)

Health Insurance Portability and Accountability Act (HIPAA): Requirements

Health Insurance Portability and Accountability Act (HIPAA): Security Readiness

Health Insurance Portability and Accountability Act (HIPAA): Security Requirements

Healthcare Industry

High-Tech Trade Secrets

Honeypots and Honeynets

Host-Based Firewalls: Case Study

Human Resources: Issues

Identity Management

Identity Management Systems: Components

Identity Theft

Identity-Based Self-Defending Network: 5W Network

Incident Response: Evidence Handling

Incident Response: Exercises

Incident Response: Management

Incident Response: Managing

Incident Response: Privacy Breaches

Information Classification

Information Flow

Information Flow: Emerging and Potential Techniques and Covert Channels

Information Flow: Selecting Countermeasures

Information Protection

Information Security Basics: Effective Practices

Information Security Controls: Types

Information Security Governance: Basic Corporate Organization

Information Security Governance: Corporate Organization, Frameworks, and Reporting

Information Security Management Systems (ISMSs)

Information Security Management Systems (ISMSs): Risk Diagnosis and Treatment

Information Security Management: Purpose

Information Security Policies

Information Systems Security Engineering Professional (ISSEP)

Information Systems Security Officer: Roles and Responsibilities

Information Technology Infrastructure Library (ITIL®)

Information Warfare

Information Warfare: Tactics

Insider Threats

Insider Threats: System and Application Weaknesses

Inspection Technologies: Deep Packets

Instant Messaging

Integrated Threat Management

Intelligent Agents: Network Security

International Issues

Internet Mobile Code

Internet Security

Internet Service Providers (ISPs): Accountability

Intranets: Risk

Intrusion Detection Systems (IDSs)

Intrusion Detection Systems (IDSs): Implementation

Intrusion Prevention Systems

IP Security Protocol Working Group (IPSec)

IPv6: Expanding Internet Support

ISO Standards and Certification

IT Governance Institute (ITGI)

Java

Kerberos™

Kerberos™: Management

Kerberos™: Ongoing Development

Kerberos™: Services and Functions

LAN/WAN Security

Laws and Regulations: e-Discovery

Malicious Code

Malicious Code: Fast-Scanning Worms

Malicious Code: Organized Crime

Malicious Code: Quasi-Intelligence

Malicious Code: Rootkits

Managed Security Service Providers (MSSPs)

Management Commitment

Management Commitment: Security Councils

Management Compliance: Confidential Information

Management Support of IT: Survey

Mashups and Composite Applications

Mergers and Acquisitions

Message Digests

Mobile Data Security

NERC Corporation: Compliance

Network and Telecommunications: Media

Network Content Filtering and Leak Prevention

Network Layer Security

Network Router Security

Network Security

Network Security: Trapping Intruders

Network Technologies

Neural Networks and Information Assurance Uses

Next-Generation Security Application Development

Object-Based Applications: Testing

Object-Oriented Databases: Security Models

Object-Oriented Programming

Offshore Development

Open Source

Open Standards

Operations Security: Abuses

Operations Security: Controls

Operations Security: Support and Control

Organization Culture

Outsourcing

Ownership and Custody of Data

Packet Sniffers

Passwords and Policy Threat Analysis

Patch Management

Patch Management: Process

PBX Firewalls

Penetration Testing

Penetration Testing: Policies

PeopleSoft Security

Perimeter Security

Personal Accountability: Corporate Information Security Policy

Personnel: Practices

Personnel: Security Roles

Personnel: Security Screening

Phishing

Physical Access Control

Physical Layer Security: Networks

Physical Layer Security: Wired and Wireless Connections

Physical Security

Physical Security: Controlled Access and Layered Defense

Physical Security: Facilities

Physical Security: Mantraps and Turnstiles

Physical Security: Melding with Information Systems Security

Physical Security: Mission-Critical Facilities and Data Centers

Physical Security: Threat after September 11th, 2001

Planning for the Future: Challenges

Pod Slurping: Concepts

Pod-Slurping: Other Vulnerabilities

Policy Development: Needs

Portable Computing Environments

Privacy Breaches: Policies, Procedures, and Notification

Privacy Governance: Effective Methods

Privacy: Healthcare Industry

Privacy: Legal Issues

Privacy: Policy Formation

Proxy Servers

Public Key Hierarchy

Public Key Infrastructure (PKI)

Public Key Infrastructure (PKI): E-Business

Public Key Infrastructure (PKI): Registration

Quantum Computing

Radio Frequency Identification (RFID)

RADIUS: Access Control

Reduced Sign-On

Redundant Arrays of Independent Disks (RAID)

Relational Database Access Controls: SQL

Relational Database Security

Remote Access: Secure

Return on Investment (ROI)

Risk Analysis and Assessment: Risk Assessment Tasks

Risk Analysis and Assessment: Risk Management Tasks

Risk Analysis and Assessment: Terms and Definitions

Risk Assessment

Risk Management

Risk Management and Analysis

Risk Management Model: Technology Convergence

Risk Management: Enterprise

Risk Management: Trends

Role-Based Access Control

Sarbanes-Oxley Act of 2002 (SOX)

Sarbanes-Oxley Act of 2002 (SOX): Compliance

Secure Socket Layer (SSL)

Security Breaches: Reporting

Security Controls: Dial-Up

Security Development Lifecycle

Security Incident Response

Security Information and Event Management (SIEM)

Security Information Management: Myths and Facts

Security Management Program: Prioritization

Security Management Team Organization

Security Policy Development and Distribution: Web-Based

Security Policy Lifecycle: Functions and Responsibilities

Security Risk: Goals Assessment

Security Teams: Effective Methods

Security Test and Evaluation

Server Security Policies

Service Level Agreements

Service Oriented Architecture (SOA)

Simple Network Management Protocol (SNMP)

Single Sign-On: Enterprise

Smartcards

Social Engineering: Mitigation

Software Development Lifecycles: Security Assessments

Software Piracy

Sploits

Spoofing and Denial of Service Attacks

Spyware

Spyware: Ethical and Legal Concerns

Standards

State of Washington v. Heckel

Steganography

Steganography: Detection

Storage Area Networks

Surveillance: Closed-Circuit Television and Video

System Design Flaws

System Development Security: Methodology

Systems Development: Object-Oriented Security Model

Systems Integrity Engineering: Distributed Processing Concepts and Corresponding Security-Relevant Issues

Systems Integrity Engineering: Interoperable Risk Accountability Concepts

Systems Integrity Engineering: Methodology and Motivational Business Values and Issues

Systems Management: Third-Party Applications and Systems

Tape Backups: Validation

Technology Convergence: People, Process and Technology

Technology Convergence: Security

Telephony Systems: Auditing

Tokens: Authentication

Tokens: Evaluation

Tokens: Role and Authentication

Transformation: Department-Level

Transport Layer Security (TLS)

Uniform Resource Locators (URLs): Obscuring

UNIX Security

Virtual Network Computing (VNC) Systems

Virtual Private Networks (VPNs)

Virtual Private Networks (VPNs): Deployment and Evaluation Strategy

Virtual Private Networks (VPNs): Leverage

Virtual Private Networks (VPNs): Perspectives

Virtual Private Networks (VPNs): Remote Access

Virtualization and Digital Investigations

Voice Communications: Voice-over-Internet (VoI)

Voice Communications: Voice-over-IP (VoIP) Protocols

Voice Communications: Voice-over-IP (VoIP) Security

Voice over WLAN

Voice Security

Web Applications: Firewalls

Web Applications: Security

Web Services

Wireless Internet Security: Portable Internet Devices

Wireless Local Area Networks (WLANs)

Wireless Local Area Networks (WLANs): Challenges

Wireless Local Area Networks (WLANs): Security

Wireless Local Area Networks (WLANs): Vulnerabilities

Wireless Penetration Testing

Workplace Violence

World Wide Web

XML

XML and Other Metadata Languages

Binary Gravitational Search Algorithm (BGSA): Improved Efficiency

Information Lifecycle: Approach to Governance, Risk, and Compliance Management

Principle of Least Privilege (PLP): Implementation

Chaos-Based Cryptosystems: Optimized Neural Network Models

Virtual Team Management: Perspective and Guidelines

Artificial Neural Network Models for Intrusion Detection

Access Controls: Implementation

Chaotic-Based Communication Systems

Fuzzy Models for Intrusion Detection

Cryptographic Hash Functions

Authentication Methods