Author: Leonard I. Krauss
Publisher:
Published:
Total Pages: 320
ISBN-13: 9780608129686
DOWNLOAD EBOOK →Author: S. Rao Vallabhaneni
Publisher:
Published: 1989-05-11
Total Pages: 376
ISBN-13:
DOWNLOAD EBOOK →This manual provides practical guidelines on how to perform internal and external audit functions concerning computer security. There is also discussion of what to audit and why. All procedures are illustrated by means of the work programs given in each chapter. This is the first systematic audit guide for auditing computer security, covering methodology, mainframes, mini's, micro's, related audit concerns, and control guidelines.
Author: Amjad Umar
Publisher: nge solutions, inc
Published: 2003-12
Total Pages: 552
ISBN-13: 9780972741477
DOWNLOAD EBOOK →This book provides a recent and relevant coverage based on a systematic approach. Especially suitable for practitioners and managers, the book has also been classroom tested in IS/IT courses on security. It presents a systematic approach to build total systems solutions that combine policies, procedures, risk analysis, threat assessment through attack trees, honeypots, audits, and commercially available security packages to secure the modern IT assets (applications, databases, hosts, middleware services and platforms) as well as the paths (the wireless plus wired network) to these assets. After covering the security management and technology principles, the book shows how these principles can be used to protect the digital enterprise assets. The emphasis is on modern issues such as e-commerce, e-business and mobile application security; wireless security that includes security of Wi-Fi LANs, cellular networks, satellites, wireless home networks, wireless middleware, and mobile application servers; semantic Web security with a discussion of XML security; Web Services security, SAML (Security Assertion Markup Language)and .NET security; integration of control and audit concepts in establishing a secure environment. Numerous real-life examples and a single case study that is developed throughout the book highlight a case-oriented approach. Complete instructor materials (PowerPoint slides, course outline, project assignments) to support an academic or industrial course are provided. Additional details can be found at the author website (www.amjadumar.com)
Author: Leighton Johnson
Publisher: Academic Press
Published: 2019-11-21
Total Pages: 790
ISBN-13: 0128206241
DOWNLOAD EBOOK →Security Controls Evaluation, Testing, and Assessment Handbook, Second Edition, provides a current and well-developed approach to evaluate and test IT security controls to prove they are functioning correctly. This handbook discusses the world of threats and potential breach actions surrounding all industries and systems. Sections cover how to take FISMA, NIST Guidance, and DOD actions, while also providing a detailed, hands-on guide to performing assessment events for information security professionals in US federal agencies. This handbook uses the DOD Knowledge Service and the NIST Families assessment guides as the basis for needs assessment, requirements and evaluation efforts. Provides direction on how to use SP800-53A, SP800-115, DOD Knowledge Service, and the NIST Families assessment guides to implement thorough evaluation efforts Shows readers how to implement proper evaluation, testing, assessment procedures and methodologies, with step-by-step walkthroughs of all key concepts Presents assessment techniques for each type of control, provides evidence of assessment, and includes proper reporting techniques