Computer Security Principles and Practice (Third Edition)

The objective of this book is to provide an up-to-date survey of developments in computer security. Central problems that confront security designers and security administrators include defining the threats to computer and network systems, evaluating the relative risks of these threats, and developing cost-effective and user friendly countermeasures.
The following basic themes unify the discussion:
• Principles: Although the scope of this book is broad, there are a number of basic prin- ciples that appear repeatedly as themes and that unify this field. Examples are issues relating to authentication and access control. The book highlights these principles and examines their application in specific areas of computer security.
• Design approaches: The book examines alternative approaches to meeting specific computer security requirements.
• Standards: Standards have come to assume an increasingly important, indeed domi- nant, role in this field. An understanding of the current status and future direction of technology requires a comprehensive discussion of the related standards.
• Real-world examples: A number of chapters include a section that shows the practical application of that chapter’s principles in a real-world environment.