Overview

You will gain a thorough understanding of basic cryptography, the most widely deployed security technologies, and key emerging security technologies. You will be able to guide the architecture and implementation of a security policy for a corporate environment by knowing possible threats and vulnerabilities and understanding the steps required to perform a risk management assessment. Through the use of specific configuration examples, you will learn about the features required in network infrastructure equipment to implement the given security policy, including securing the internal corporate infrastructure, Internet access, and the remote access environment. This new edition includes coverage of new security features.

Full Product Details

Author:   Merike Kaeo
Publisher:   Pearson Education (US)
Imprint:   Cisco Press
Edition:   2nd edition
Dimensions:   Width: 23.90cm , Height: 5.00cm , Length: 20.30cm
Weight:   1.492kg
ISBN:  

9781587051173

ISBN 10:   1587051176
Pages:   768
Publication Date:   13 November 2003
Audience:   Professional and scholarly ,  Professional & Vocational
Format:   Hardback
Publisher's Status:   Out of Print
Availability:   Out of stock  

Table of Contents

Introduction. I. SECURITY FUNDAMENTALS. 1. Basic Cryptography. Cryptography. Authentication and Authorization. Namespace. Key Management. Key Escrow. Summary. Review Questions. 2. Security Technologies. Identity Technologies. Application Layer Security Protocols. Transport Layer Security Protocols. Network Layer Security. Link-Layer Security Technologies. Public Key Infrastructure and Distribution Models. Summary. Review Questions. 3. Applying Security Technologies to Real Networks. Virtual Private Networks (VPNs). Wireless Networks. Voice over IP (VoIP) Networks. Summary. Review Questions. 4. Routing Protocol Security. Routing Basics. Routing Protocol Security Details. Summary. Review Questions. II. THE CORPORATE SECURITY POLICY. 5. Threats in an Enterprise Network. Types of Threats. Motivation of Threat. Common Protocol Vulnerabilities. Common Network Scenario Threats and Vulnerabilities. Routing Protocols. Social Engineering. Summary. Review Questions. 6. Considerations for a Site Security Policy. Where to Begin. Risk Management. A Security Policy Framework. Summary. Review Questions. 7. Design and Implementation of the Corporate Security Policy. Physical Security Controls. Logical Security Controls. Infrastructure and Data Integrity. Data Confidentiality. Security Policy Verification and Monitoring. Policies and Procedures for Staff. Security Awareness Training. Summary. Review Questions. 8. Incident Handling. Building an Incident Response Team. Detecting an Incident. Handling an Incident. Incident Vulnerability Mitigation. Responding to the Incident. Recovering from an Incident. Summary. Review Questions. III. PRACTICAL IMPLEMENTATION. 9. Securing the Corporate Network Infrastructure. Identity - Controlling Network Device Access. Integrity. Data Confidentiality. Network Availability. Audit. Implementation Examples. Summary. Review Questions. 10. Securing Internet Access. Internet Access Architecture. External Screening Router Architecture. Advanced Firewall Architecture. Implementation Examples. Summary. Review Questions. 11. Securing Remote Dial-In Access. Dial-In Security Concerns. Authenticating Dial-In Users and Devices. Authorization. Accounting and Billing. Using AAA with Specific Features. Encryption for Virtual Dial-In Environments. Summary. Review Questions. 12. Securing VPN, Wireless, and VoIP Networks. Virtual Private Networks. Wireless Networks. Voice over IP Networks. Summary. Review Questions. IV. APPENDIXES. Appendix A: Sources of Technical Information. Appendix B: Reporting and Prevention Guidelines: Industrial Espionage and Network Intrusions. Appendix C: Port Numbers. Appendix D: Mitigating Distributed Denial-of-Service Attacks. Appendix E: Answers to Review Questions. Glossary. Index.

Reviews

Author Information

Merike Kaeo, CCIE No. 1287, is currently a consultant focusing primarily on security-related products and network design solutions. She has been in the networking industry more than 15 years, starting out at the National Institutes of Health in Bethesda, MD, from 1988 to 1993, designing and implementing the original FDDI backbone for the NIH campus using Cisco routers. From 1993 to 2000, Merike was employed by Cisco Systems, Inc., where she worked primarily on technical issues relating to router performance, network routing protocols, network design, and network security. She was a lead member of the Cisco security initiative, has acted as a technical advisor for security startup companies, and has been an instructor and speaker in a variety of security-related conferences. Merike received her BSEE from Rutgers University in 1987 and completed her MSEE degree from George Washington University in 1998.

Tab Content 6

Author Website:  

Customer Reviews

Recent Reviews

No review item found!

Add your own review!

Countries Available

All regions