信息安全原理與技術（第五版 英文版 中文評注）

Chapter 1 Introduction
概論001
1．1 What is Computer Security
什么是計算機安全？002
1．2 Threats
威脅006
1．3 Harm
危害021
1．4 Vulnerabilities
脆弱點028
1．5 Controls
控制028
1．6 Conclusion
總結031
1．7 What’s Next
下一步是什么？032
1．8 Exercises
習題034
Chapter 2 Toolbox： Authentication， Access Control， and Cryptography
工具箱：鑒別、訪問控制與加密036
2．1 Authentication
鑒別038
2．2 Access Control
訪問控制072
2．3 Cryptography
密碼編碼學086
2．4 Exercises
練習127
Chapter 3 Programs and Programming
程序和編程130
3．1 Unintentional (Nonmalicious) Programming Oversights
無意的（非惡意的）程序漏洞132
3．2 Malicious Code―Malware
惡意代碼――惡意軟件165
3．3 Countermeasures
對策195
3．4 Conclusion
總結228
3．5 Exercises
練習228
Chapter 4 Operating Systems
操作系統(tǒng)230
4．1 Security in Operating Systems
操作系統(tǒng)的安全性230
4．2 Security in the Design of Operating Systems
安全操作系統(tǒng)的設計258
4．3 Rootkit
Rootkit279
4．4 Conclusion
總結288
4．5 Exercises
習題289
Chapter 5 Databases
數(shù)據(jù)庫291
5．1 Introduction to Databases
數(shù)據(jù)庫簡介292
5．2 Security Requirements of Databases
數(shù)據(jù)庫的安全需求297
5．3 Reliability and Integrity
可靠性和完整性303
5．4 Database Disclosure
數(shù)據(jù)庫泄露308
5．5 Data Mining and Big Data
數(shù)據(jù)挖掘和大數(shù)據(jù)325
5．6 Conclusion
總結339
5．7 Exercises
習題339
Chapter 6 Networks
網(wǎng)絡341
6．1 Network Concepts
網(wǎng)絡的概念342
6．2 Threats to Network Communications
網(wǎng)絡通信的威脅354
6．3 Wireless Network Security
無線網(wǎng)絡安全374
6．4 Denial of Service
拒絕服務396
6．5 Distributed Denial-of-Service
分布式拒絕服務421
6．6 Cryptography in Network Security
網(wǎng)絡安全中的密碼學432
6．7 Firewalls
防火墻451
6．8 Intrusion Detection and Prevention Systems
入侵檢測和防御系統(tǒng)474
6．9 Network Management
網(wǎng)絡管理489
6．10 Conclusion
總結496
6．11 Exercises
習題496
Chapter 7 Management and Incidents
安全管理和事件501
7．1 Security Planning
安全計劃501
7．2 Business Continuity Planning
業(yè)務持續(xù)計劃512
7．3 Handling Incidents
事件處理516
7．4 Risk Analysis
風險分析522
7．5 Dealing with Disaster
處理災難540
7．6 Conclusion
總結553
7．7 Exercises
練習554
Chapter 8 Details of Cryptography
密碼學精講555
8．1 Cryptology
密碼學556
8．2 Symmetric Encryption Algorithms
對稱加密算法566
8．3 Asymmetric Encryption with RSA
RSA非對稱加密582
8．4 Message Digests
消息摘要586
8．5 Digital Signatures
數(shù)字簽名589
8．6 Quantum Cryptography
量子密碼學594
8．7 Conclusion
總結598
Chapter 9 Privacy
計算機中的隱私600
9．1 Privacy Concepts
隱私的概念601
9．2 Privacy Principles and Policies
隱私的原理和政策610
9．3 Authentication and Privacy
鑒別和隱私624
9．4 Data Mining
數(shù)據(jù)挖掘630
9．5 Privacy on the Web
網(wǎng)站上的隱私633
9．6 Email Security
電子郵件安全性646
9．7 Privacy Impacts of Emerging Technologies
對新技術的影響650
9．8 Where the Field is Headed
領域前沿658
9．9 Conclusion
總結659
9．10 Exercises
習題659
Chapter 10 The Web―User Side
Web和用戶661
10．1 Browser Attacks
針對瀏覽器的攻擊663
10．2 Web Attacks Targeting Users
針對用戶的Web攻擊674
10．3 Obtaining User or Website Data
獲取用戶或網(wǎng)站的數(shù)據(jù)689
10．4 Email Attacks
電子郵件攻擊696
10．5 Conclusion
總結706
10．6 Exercises
習題707
Chapter 11 Cloud Computing
云計算708
11．1 Cloud Computing Concepts
云計算的概念708
11．2 Moving to the Cloud
遷移到云端710
11．3 Cloud Security Tools and Techniques
云安全工具與技術717
11．4 Cloud Identity Management
云認證管理725
11．5 Securing IaaS
加固IaaS736
11．6 Conclusion
總結740
11．7 Exercises
習題741
Chapter 12 Emerging Topics
新興問題743
12．1 The Internet of Things
物聯(lián)網(wǎng)744
12．2 Economics
網(wǎng)絡安全經(jīng)濟學751
12．3 Electronic Voting
電子投票764
12．4 Cyber Warfare
網(wǎng)絡戰(zhàn)爭771
12．5 Conclusion
總結780
Bibliography
參考文獻781