Computer Security Principles and Practice, 5th edition

For courses in computer/network security.

Balance principles and standards with current practice

Computer Security incorporates broad and comprehensive coverage of computer and network security with current developments and topics in the field. Principles, design approaches, standards, and real-world examples give students an understanding of the unifying theory and application of important concepts. Hands-on hacking, programming, firewall and lab exercises, real-world case studies and security assessments reinforce understanding of the material.

The 5th Edition is an updated survey of the fast-moving world of computer and network security, with new coverage of important topics.

Hallmark features of this title

• Hacking exercises help students gain an understanding of issues in intrusion detection and prevention.
• Laboratory exercises involve programming and experimenting with concepts from the book. Programming projects cover a broad range of topics that can be implemented in any language on any platform.
• Security education projects cover a range of security topics. Practical security assessment exercises examine current infrastructure and practices of an existing organization.
• Firewall projects include a portable network firewall visualization simulator with exercises for teaching the fundamentals of firewalls.
• Real-world case studies include learning objectives, case descriptions and discussion questions.
• Visit the companion website at www.pearsonhighered.com/stallings to view all resources for this title.

New and updated features of this title

• NEW: Multi-factor authentication (MFA) and mobile authentication discussions in Chapter 3.
• UPDATED: Lists provide current information on the most dangerous software errors, essential controls, and security controls. New information discusses the recent exploited code injection attack on the Apache Log4j package (Ch. 11); the Australian Signals Directorate's “Essential Eight” (Ch. 12); and NIST security controls (Ch. 15).
• UPDATED: Mandatory access control (MAC) discussions cover ways in which MACs are now included as part of the underlying security enhancements in recent releases of some Linux, MacOSX and Windows systems (Ch. 4).
• UPDATED: Social engineering and ransomware attack discussions reflect the growing incidence of such attacks, and the need to defend against them (Chs. 6 and 8). These defenses include improved security awareness training, as discussed in Ch. 17.
• NEW: Supply-chain and business email compromise (BEC) attacks discussions include the recent SolarWinds attack, which has been used to compromise many commercial and government organizations in recent years.
• NEW: Section on the ChaCha20 stream cipher replaces the now depreciated RC4 cipher (Ch. 20).