TY - BOOK AU - Stamp, Mark. TI - Information security: principles and practice SN - 9781119505907 [hardbound] U1 - 005.8 St23 2022 PY - 2022/// CY - Hoboken, NJ PB - John Wiley & Sons, Inc. KW - Computer security N1 - Includes bibliographical references and index; Contents: I Crypto -- 1 Introductions -- 2 Classic crypto -- 3 Symmetric ciphers -- 4 Public key crypto -- 5 Crypto has functions++ -- II Access control -- 6 Authentication -- 7 Authorization -- III Topics in network security -- 8 Network security basics -- 9 Simple authentication protocols -- 10 Real-world security protocols -- IV Software -- 11 Software flaws and malware -- 12 Insecurity in software N2 - Summary: "Information security is a rapidly evolving field. As businesses and consumers become increasingly dependent on complex multinational information systems, it is more imperative than ever to protect the confidentiality and integrity of data. Working knowledge is required of aspects of cryptography such as classic cryptosystems, symmetric key cryptography, public key cryptography, hash functions, random numbers, information hiding, and cryptanalysis. Experts must also use access control techniques like authentication and authorization, password-based security, ACLs and capabilities, multilevel security and compartments, covert channels and inference control. Among the various protocols used in information security are simple authentication protocols, session keys, perfect forward secrecy, timestamps, SSH, SSL, IPSec, Kerberos, WEP, and GSM. Software can create problems including flaws and malware, buffer overflows, viruses and worms, and also solve them using tools such as malware detection, digital rights management, secure software development, and operating systems security"-- ER -