Information Security: The Complete Reference, Second Edition

Develop and implement an effective end-to-end security programToday s complex world of mobile platforms, cloud computing, and ubiquitous data access puts new security demands on every IT professional. Information Security: The Complete Reference, Second Edition (previously titled Network Security: The Complete Reference) is the only comprehensive book that offers vendor-neutral details on all aspects of information protection, with an eye toward the evolving threat landscape. Thoroughly revised and expanded to cover all aspects of modern information security from concepts to details this edition provides a one-stop reference equally applicable to the beginner and the seasoned professional.Find out how to build a holistic security program based on proven methodology, risk analysis, compliance, and business needs. You ll learn how to successfully protect data, networks, computers, and applications. In-depth chapters cover data protection, encryption, information rights management, network security, intrusion detection and prevention, Unix and Windows security, virtual and cloud security, secure application development, disaster recovery, forensics, and real-world attacks and countermeasures. Included is an extensive security glossary, as well as standards-based references. This is a great resource for professionals and students alike. Understand security concepts and building blocksIdentify vulnerabilities and mitigate riskOptimize authentication and authorizationUse IRM and encryption to protect unstructured dataDefend storage devices, databases, and softwareProtect network routers, switches, and firewallsSecure VPN, wireless, VoIP, and PBX infrastructureDesign intrusion detection and prevention systemsDevelop secure Windows, Java, and mobile applicationsPerform incident response and forensic analysis