Product Description
The world's #1 book on network and Internet security has been thoroughly updated to reflect today's latest threats, techniques, and technologies. The long-awaited Network Security, Second Edition brings together definitive, accessible, even entertaining explanations of every key facet of information security. The authors begin by reviewing the challenges of network security, and introducing basic concepts such as authorization and the "military model" of security. They present an easy-to-understand introduction to cryptography, including secret and public keys, hashes, and message digests. A detailed section on authentication addresses the challenge of proving identity across the network; handshakes; and common attacks that must be addressed in designing authentication systems. The authors address core Internet security standards including Kerberos 4/5, PKI, IPSec, and SSL; as well as e-mail security via PEM, S/MIME, and PGP. They offer practical introductions to the Web security issues associated with URLs, HTTP, HTML, and cookies; concluding with overviews of security in environments ranging from Windows to NetWare.
From the Back Cover
The classic guide to network security—now fully updated!"Bob and Alice are back!"
Widely regarded as the most comprehensive yet comprehensible guide to network security, the first edition of Network Security received critical acclaim for its lucid and witty explanations of the inner workings of network security protocols. In the second edition, this most distinguished of author teams draws on hard-won experience to explain the latest developments in this field that has become so critical to our global network-dependent society.
Network Security, Second Edition brings together clear, insightful, and clever explanations of every key facet of information security, from the basics to advanced cryptography and authentication, secure Web and email services, and emerging security standards. Coverage includes:
- All-new discussions of the Advanced Encryption Standard (AES), IPsec, SSL, and Web security
- Cryptography: In-depth, exceptionally clear introductions to secret and public keys, hashes, message digests, and other crucial concepts
- Authentication: Proving identity across networks, common attacks against authentication systems, authenticating people, and avoiding the pitfalls of authentication handshakes
- Core Internet security standards: Kerberos 4/5, IPsec, SSL, PKIX, and X.509
- Email security: Key elements of a secure email system-plus detailed coverage of PEM, S/MIME, and PGP
- Web security: Security issues associated with URLs, HTTP, HTML, and cookies
- Security implementations in diverse platforms, including Windows, NetWare, and Lotus Notes
The authors go far beyond documenting standards and technology: They contrast competing schemes, explain strengths and weaknesses, and identify the crucial errors most likely to compromise secure systems. Network Security will appeal to a wide range of professionals, from those who design or evaluate security systems to system administrators and programmers who want a better understanding of this important field. It can also be used as a textbook at the graduate or advanced undergraduate level.
Prentice Hall Series in Computer Networking and Distributed Systems
by Behrouz A Forouzan
by Rachid Guerraoui
