Title type

Computer Security: Principles and Practice, Global Edition (4e)

In stock
Product is in stock and will be despatched within 1-2 working days.
 Add to shortlist
Published date

For courses in computer/network security

Computer Security: Principles and Practice, 4th Edition, is ideal for courses in Computer/Network Security. The need for education in computer security and related topics continues to grow at a dramatic rate—and is essential for anyone studying Computer Science or Computer Engineering. Written for both an academic and professional audience, the 4th Edition continues to set the standard for computer security with a balanced presentation of principles and practice. The new edition captures the most up-to-date innovations and improvements while maintaining broad and comprehensive coverage of the entire field. The extensive offering of projects provides students with hands-on experience to reinforce concepts from the text. The range of supplemental online resources for instructors provides additional teaching support for this fast-moving subject.

The new edition covers all security topics considered Core in the ACM/IEEE Computer Science Curricula 2013, as well as subject areas for CISSP (Certified Information Systems Security Professional) certification. This textbook can be used to prep for CISSP Certification and is often referred to as the ‘gold standard’ when it comes to information security certification. The text provides in-depth coverage of Computer Security, Technology and Principles, Software Security, Management Issues, Cryptographic Algorithms, Internet Security and more.

Product details
Published date
Published by
Pearson Higher Ed USA
Table of contents
  • Chapter 1 Overview
  • Chapter 2 Cryptographic Tools
  • Chapter 3 User Authentication
  • Chapter 4 Access Control
  • Chapter 5 Database and Data Center Security
  • Chapter 6 Malicious Software
  • Chapter 7 Denial-of-Service Attacks
  • Chapter 8 Intrusion Detection
  • Chapter 9 Firewalls and Intrusion Prevention Systems
  • Chapter 10 Buffer Overflow
  • Chapter 11 Software Security
  • Chapter 12 Operating System Security
  • Chapter 13 Cloud and IoT Security
  • Chapter 14 IT Security Management and Risk Assessment
  • Chapter 15 IT Security Controls, Plans and Procedures
  • Chapter 16 Physical and Infrastructure Security
  • Chapter 17 Human Resources Security
  • Chapter 18 Security Auditing
  • Chapter 19 Legal and Ethical Aspects
  • Appendix 19A: Information Privacy Standard of Good Practice
  • Chapter 20 Symmetric Encryption and Message Confidentiality
  • Chapter 21 Public-Key Cryptography and Message Authentication
  • Chapter 22 Internet Security Protocols and Standards
  • Chapter 23 Internet Authentication Applications
  • Chapter 24 Wireless Network Security
  • Chapter 25 Linux Security
  • Chapter 26 Windows and Windows Vista Security
New to this edition

Content updates

·    Data center security discussion in Chapter 5 covers data center security and  the TIA-492 specification of reliability tiers.

·    Malware material in Chapter 6 includes additional material on macro viruses and their structure, as they are now the most common form of virus malware.

·    Virtualization security material in Chapter 12 has been extended, given the rising use of such systems by organizations and in cloud computing environments. A discussion of virtual firewalls, which may be used to help secure these environments, has also been added.

·    Cloud security discussion inChapter 13 includes an introduction to cloud computing, key cloud security concepts, an analysis of approaches to cloud security, and an open-source example.

·    IoT security indiscussion Chapter 13 covers security for the Internet of Things (IoT). The discussion includes an introduction to IoT, an overview of IoT security issues, and an open-source example.

·    SEIM discussion in Chapter 18 is updated for Security Information and Event Management (SIEM) Systems.

·    Privacy section covers privacy issues and its management in Chapter 19. The section has been extended with additional discussion of moral and legal approaches, and the privacy issues related to big data.

·    Authenticated encryption has become an increasingly widespread cryptographic tool in a variety of applications and protocols. Chapter 21 includes a new discussion of authenticated description and describes an important authenticated encryption algorithm known as offset codebook (OCB) mode.

Features & benefits
  • Current developments and topics in computer and network security
  • Capture the most recent changes in the field while maintaining a broad and comprehensive coverage of the entire field.
  • The content in the book is unified by four basic themes.
  • Principles: Although the scope of this book is broad, there are a number of basic principles that appear repeatedly as themes and that unify this field, for example, authentication and access control. The book highlights these principles and examines their application in specific areas of computer security.
  • Design approaches: The book examines alternative approaches to meeting specific computer security requirements.
  • Standards: Standards have come to assume an increasingly important, indeed dominant, role in this field. An understanding of the current status and future direction of technology requires a comprehensive discussion of the related standards.
  • Real-world examples: A number of chapters include a section that shows the practical application of that chapter’s principles in a real-world environment.
  • Hands-on projects reinforce concepts from the textbook
  • Hacking exercises: Two projects that enable students to gain an understanding of the issues in intrusion detection and prevention.
  • Laboratory exercises: A series of projects that involve programming and experimenting with concepts from the book.
  • Security education (SEED) projects: The SEED projects are a set of hands-on exercises, or labs, covering a wide range of security topics.
  • Research projects: A series of research assignments that instruct the student to research a particular topic on the Internet and write a report.
  • Programming projects: A series of programming projects that cover a broad range of topics and that can be implemented in any suitable language on any platform.
  • Practical security assessments: A set of exercises to examine current infrastructure and practices of an existing organisation.
  • Firewall projects: A portable network firewall visualisation simulator is provided, together with exercises for teaching the fundamentals of firewalls.
  • Case studies: A set of real-world case studies, including learning objectives, case description, and a series of case discussion questions.
  • Reading/report assignments: A list of papers that can be assigned for reading and writing a report, plus suggested assignment wording.
  • Writing assignments: A list of writing assignments to facilitate learning the material.
  • Webcasts for teaching computer security: A catalog of webcast sites that can be used to enhance the course. An effective way of using this catalogue is to select, or allow the student to select, one or a few videos to watch, and then to write a report/analysis of the video.