<p><strong>The New State of the Art in Information Security: From Cloud to Crypto, AI-Driven Security to Post-Quantum Computing</strong></p><p>Now extensively updated throughout,&nbsp;<em><strong>Security in Computing, Sixth Edition,</strong></em>&nbsp;is today's one-stop, primary text for everyone teaching, learning, and practicing information cybersecurity. It defines core principles associated with modern security policies, processes, and protection; illustrates them with up-to-date sidebars and examples; and shows how to apply them in practice. Modular and flexibly organized, it supports a wide array of courses, strengthens professionals' knowledge of foundational principles; and imparts a more expansive understanding of modern security.</p><p>This edition adds or expands coverage of artificial intelligence and machine learning tools; app and browser security; security by design; securing cloud, IoT, and embedded systems; privacy-enhancing technologies; protecting vulnerable individuals and groups; strengthening security culture; cryptocurrencies and blockchain; offensive cyberwarfare; post-quantum computing; and more. It contains many new diagrams, exercises, sidebars, and examples, and is mapped to two leading frameworks: the US NIST National Initiative for Cybersecurity Education (NICE) and the UK Cyber Body of Knowledge (CyBOK).</p><ul><li>Core security concepts: Assets, threats, vulnerabilities, controls, confidentiality, integrity, availability, attackers, and attack types</li><li>The security practitioner's toolbox: Identification, authentication, access control, and encryption</li><li>Areas of practice: Securing programs, user–internet interaction, operating systems, networks, data, databases, and cloud computing</li><li>Cross-cutting disciplines: Privacy, management, law, and ethics</li><li>Using cryptography: Solve real problems, and explore its formal and mathematical underpinnings</li><li>Emerging topics and risks: AI and adaptive cybersecurity, blockchains and cryptocurrencies, computer-assisted offensive warfare, and quantum computing</li></ul>

<p><em>Foreword xix</em><br><em>Preface xxv</em><br><em>Acknowledgments xxxi</em><br><em>About the Authors xxxiii</em></p> <p><strong>Chapter 1: Introduction 1</strong><br>1.1 What Is Computer Security? 3<br>1.2 Threats 6<br>1.3 Harm 24<br>1.4 Vulnerabilities 30<br>1.5 Controls 30<br>1.6 Conclusion 33<br>1.7 What's Next? 34<br>1.8 Exercises 36</p> <p><strong>Chapter 2: Toolbox: Authentication, Access Control, and Cryptography 38</strong><br>2.1 Authentication 40<br>2.2 Access Control 78<br>2.3 Cryptography 93<br>2.4 Conclusion 137<br>2.5 Exercises 138</p> <p><strong>Chapter 3: Programs and Programming 141</strong><br>3.1 Unintentional (Nonmalicious) Programming Oversights 143<br>3.2 Malicious Code--Malware 178<br>3.3 Countermeasures 211<br>3.4 Conclusion 245<br>3.5 Exercises 245</p> <p><strong>Chapter 4: The Internet--User Side 248</strong><br>4.1 Browser Attacks 251<br>4.2 Attacks Targeting Users 265<br>4.3 Obtaining User or Website Data 280<br>4.4 Mobile Apps 289<br>4.5 Email and Message Attacks 310<br>4.6 Conclusion 320<br>4.7 Exercises 321</p> <p><strong>Chapter 5: Operating Systems 323</strong><br>5.1 Security in Operating Systems 323<br>5.2 Security in the Design of Operating Systems 351<br>5.3 Rootkits 371<br>5.4 Conclusion 382<br>5.5 Exercises 382</p> <p><strong>Chapter 6: Networks 385</strong><br>6.1 Network Concepts 386<br><em>Part I--War on Networks: Network Security Attacks 399</em><br>6.2 Threats to Network Communications 400<br>6.3 Wireless Network Security 421<br>6.4 Denial of Service 443<br>6.5 Distributed Denial of Service 468<br><em>Part II--Strategic Defenses: Security Countermeasures 479</em><br>6.6 Cryptography in Network Security 479<br>6.7 Firewalls 497<br>6.8 Intrusion Detection and Prevention Systems 522<br>6.9 Network Management 536<br>6.10 Conclusion 545<br>6.11 Exercises 545</p> <p><strong>Chapter 7: Data and Databases 549</strong><br>7.1 Introduction to Databases 550<br>7.2 Security Requirements of Databases 555<br>7.3 Reliability and Integrity 561<br>7.4 Database Disclosure 566<br>7.5 Data Mining and Big Data 585<br>7.6 Conclusion 599<br>7.7 Exercises 599</p> <p><strong>Chapter 8: New Territory 601</strong><br>8.1 Introduction 601<br>8.2 Cloud Architectures and Their Security 605<br>8.3 IoT and Embedded Devices 627<br>8.4 Cloud, IoT, and Embedded Devices--The Smart Home 638<br>8.5 Smart Cities, IoT, Embedded Devices, and Cloud 643<br>8.6 Cloud, IoT, and Critical Services 648<br>8.7 Conclusion 657<br>8.8 Exercises 658</p> <p><strong>Chapter 9: Privacy 659</strong><br>9.1 Privacy Concepts 660<br>9.2 Privacy Principles and Policies 671<br>9.3 Authentication and Privacy 688<br>9.4 Data Mining 694<br>9.5 Privacy on the Internet 698<br>9.6 Email and Message Security 713<br>9.7 Privacy Impacts of Newer Technologies 717<br>9.8 Conclusion 724<br>9.9 Exercises 725</p> <p><strong>Chapter 10: Management and Incidents 727</strong><br>10.1 Security Planning 727<br>10.2 Business Continuity Planning 738<br>10.3 Handling Incidents 742<br>10.4 Risk Analysis 749<br>10.5 Physical Threats to Systems 767<br>10.6 New Frontiers in Security Management 776<br>10.7 Conclusion 778<br>10.8 Exercises 779</p> <p><strong>Chapter 11: Legal Issues and Ethics 781</strong><br>11.1 Protecting Programs and Data 783<br>11.2 Information and the Law 800<br>11.3 Rights of Employees and Employers 805<br>11.4 Redress for Software Failures 808<br>11.5 Computer Crime 814<br>11.6 Ethical Issues in Computer Security 822<br>11.7 An Ethical Dive into Artificial Intelligence 828<br>11.8 Incident Analyses with Ethics 830<br>11.9 Conclusion 846<br>11.10 Exercises 847</p> <p><strong>Chapter 12: Details of Cryptography 850</strong><br>12.1 Cryptology 851<br>12.2 Symmetric Encryption Algorithms 863<br>12.3 Asymmetric Encryption 877<br>12.4 Message Digests 883<br>12.5 Digital Signatures 888<br>12.6 Quantum Key Distribution 889<br>12.7 Conclusion 894</p> <p><strong>Chapter 13: Emerging Topics 895</strong><br>13.1 AI and Cybersecurity 896<br>13.2 Blockchains and Cryptocurrencies 908<br>13.3 Offensive Cyber and Cyberwarfare 924<br>13.4 Quantum Computing and Computer Security 936<br>13.5 Conclusion 937</p> <p><em>Bibliography 939</em><br><em>Index 963</em></p>

Lizzie Coles-Kemp

Charles Pfleeger

Shari Lawrence Pfleeger

A digital version of the text you can personalize and read online or offline.

eTextbook

Security in Computing

A digital version of the text you can personalize and read online or offline. If your instructor has invited you to join a specific Pearson eTextbook course for your class, you will need to purchase your eText through the course invite link they provide.

Now available on

This product is a bound, printed text book.

Print

Paperback

uCertify

Security in Computing Pearson uCertify Course Access Code Card, Sixth Edition

Access code

Security in Computing Pearson uCertify Course Online Access Code (OASIS), Sixth Edition

Security in Computing Pearson uCertify Labs Access Code Card

Security in Computing Pearson uCertify Course and Labs Access Code Card, Sixth Edition

Security in Computing Pearson uCertify Labs Online Access Code (OASIS)

Security in Computing Pearson uCertify Course and Labs Online Access Code (OASIS), Sixth Edition

Security in Computing Pearson uCertify Course and Labs Card and Textbook Bundle, Sixth Edition

Bundle

Security in Computing, 6th edition

eTextbook features

Pearson+