Free eBook: Security Concepts

This is a free book about computer, network, technical, physical, information and cryptographic security. You can download it as a pdf file or read it online.

Book Description

I wrote this paper to try and examine the typical problems in computer security and related areas, and attempt to extract from them principles for defending systems. To this end I attempt to synthesize various fields of knowledge, including computer security, network security, cryptology, and intelligence. I also attempt to extract the principles and implicit assumptions behind cryptography and the protection of classified information, as obtained through reverse-engineering (that is, informed speculation based on existing regulations and stuff I read in books), where they are relevant to technological security.

Table of Contents

• Metadata
• Security Properties
• Security Models
• Security Concepts
• Economics of Security
• Adversary Modeling
• Threat Modeling
• Physical Security
• Hardware Security
• Distributed Systems
• Identification and Authentication
• Authorization – Access Control
• Secure System Administration
• Logging
• Reporting
• Abuse Detection
• Abuse Response
• Forensics
• Privacy
• Intrusion Response
• Network Security
• Email Security
• Web Security
• Software Security
• Human Factors and Usability
• Attack Patterns
• Trust and Personnel Security
• Cryptography
• Randomness and Unpredictability
• Cryptanalysis
• Lateral Thinking
• Information and Intelligence
• Conflict and Combat
• Security Principles
• Common Arguments
• Editorials, Predictions, Polemics, and Personal Opinions

Download Free PDF / Read Online