Books in Security

OS X Incident Response

1st Edition
May 6, 2016
Jaron Bradley
English
Paperback
9 7 8 0 1 2 8 0 4 4 5 6 8
eBook
9 7 8 0 1 2 8 0 4 5 0 3 9

OS X Incident Response: Scripting and Analysis is written for analysts who are looking to expand their understanding of a lesser-known operating system. By mastering the forensic artifacts of OS X, analysts will set themselves apart by acquiring an up-and-coming skillset. Digital forensics is a critical art and science. While forensics is commonly thought of as a function of a legal investigation, the same tactics and techniques used for those investigations are also important in a response to an incident. Digital evidence is not only critical in the course of investigating many crimes but businesses are recognizing the importance of having skilled forensic investigators on staff in the case of policy violations. Perhaps more importantly, though, businesses are seeing enormous impact from malware outbreaks as well as data breaches. The skills of a forensic investigator are critical to determine the source of the attack as well as the impact. While there is a lot of focus on Windows because it is the predominant desktop operating system, there are currently very few resources available for forensic investigators on how to investigate attacks, gather evidence and respond to incidents involving OS X. The number of Macs on enterprise networks is rapidly increasing, especially with the growing prevalence of BYOD, including iPads and iPhones. Author Jaron Bradley covers a wide variety of topics, including both the collection and analysis of the forensic pieces found on the OS. Instead of using expensive commercial tools that clone the hard drive, you will learn how to write your own Python and bash-based response scripts. These scripts and methodologies can be used to collect and analyze volatile data immediately. For online source codes, please visit: https://github.com/j...

Protecting Patient Information

1st Edition
April 7, 2016
Paul Cerrato
English
Paperback
9 7 8 0 1 2 8 0 4 3 9 2 9
eBook
9 7 8 0 1 2 8 0 4 4 1 1 7

Protecting Patient Information: A Decision-Maker's Guide to Risk, Prevention, and Damage Control provides the concrete steps needed to tighten the information security of any healthcare IT system and reduce the risk of exposing patient health information (PHI) to the public. The book offers a systematic, 3-pronged approach for addressing the IT security deficits present in healthcare organizations of all sizes. Healthcare decision-makers are shown how to conduct an in-depth analysis of their organization’s information risk level. After this assessment is complete, the book offers specific measures for lowering the risk of a data breach, taking into account federal and state regulations governing the use of patient data. Finally, the book outlines the steps necessary when an organization experiences a data breach, even when it has taken all the right precautions.

Building a Travel Risk Management Program

1st Edition
March 31, 2016
Charles Brossman
English
Paperback
9 7 8 0 1 2 8 0 1 9 2 5 2
eBook
9 7 8 0 1 2 8 0 1 9 3 8 2

Building a Travel Risk Management Program: Traveler Safety and Duty of Care for Any Organization helps business and security professionals effectively manage traveler risk by showing them how to build a complete travel risk program. While global corporate travel risks are increasing exponentially, many security and business managers are not well-versed in the rapidly changing global landscape of travel risk, nor do they fully realize the multitude of risks their companies face if they don’t comply with their legal obligations—“duty of care"—for protecting their employees from foreseeable harm, which can cost a company in the form of extensive fines, productivity loss, business interruptions, stock price loss, litigation, and even potential bankruptcy. This book is the first to bridge the gap between the topics of travel management, security, and risk management. It serves as a reference point for working with other departments, including human resources and legal, paving the way for better internal cooperation for travel managers and security managers. In addition, it helps organizations craft a travel risk management program for their unique needs that incorporates the most important policies and procedures that help them comply with legal obligations.

Maritime Security

2nd Edition
March 19, 2016
Michael McNicholas
English
Paperback
9 7 8 0 1 2 8 0 3 6 7 2 3
eBook
9 7 8 0 1 2 8 0 3 6 7 3 0

Maritime Security: An Introduction, Second Edition, provides practical, experience-based, and proven knowledge - and a "how-to-guide" - on maritime security. McNicholas explains in clear language how commercial seaports and vessels function; what threats currently exist; what security policies, procedures, systems, and measures must be implemented to mitigate these threats; and how to conduct ship and port security assessments and plans. Whether the problem is weapons of mass destruction or cargo theft, Maritime Security provides invaluable guidance for the professionals who protect our shipping and ports. New chapters focus on whole government maritime security, UN legal conventions and frameworks, transnational crime, and migration. Updates throughout will provide the latest information in increasingly important field.

Network Performance and Security

1st Edition
March 9, 2016
Chris Chapman
English
Paperback
9 7 8 0 1 2 8 0 3 5 8 4 9
eBook
9 7 8 0 1 2 8 0 3 6 0 1 3

Network Performance Security: Testing and Analyzing Using Open Source and Low-Cost Tools gives mid-level IT engineers the practical tips and tricks they need to use the best open source or low cost tools available to harden their IT infrastructure. The book details how to use the tools and how to interpret them. Network Performance Security: Testing and Analyzing Using Open Source and Low-Cost Tools begins with an overview of best practices for testing security and performance across devices and the network. It then shows how to document assets—such as servers, switches, hypervisor hosts, routers, and firewalls—using publicly available tools for network inventory. The book explores security zoning the network, with an emphasis on isolated entry points for various classes of access. It shows how to use open source tools to test network configurations for malware attacks, DDoS, botnet, rootkit and worm attacks, and concludes with tactics on how to prepare and execute a mediation schedule of the who, what, where, when, and how, when an attack hits. Network security is a requirement for any modern IT infrastructure. Using Network Performance Security: Testing and Analyzing Using Open Source and Low-Cost Tools makes the network stronger by using a layered approach of practical advice and good testing practices.

Implementing Digital Forensic Readiness

1st Edition
February 26, 2016
Jason Sachowski
English
Paperback
9 7 8 0 1 2 8 0 4 4 5 4 4
eBook
9 7 8 0 1 2 8 0 4 5 0 1 5

Implementing Digital Forensic Readiness: From Reactive to Proactive Process shows information security and digital forensic professionals how to increase operational efficiencies by implementing a pro-active approach to digital forensics throughout their organization. It demonstrates how digital forensics aligns strategically within an organization’s business operations and information security’s program. This book illustrates how the proper collection, preservation, and presentation of digital evidence is essential for reducing potential business impact as a result of digital crimes, disputes, and incidents. It also explains how every stage in the digital evidence lifecycle impacts the integrity of data, and how to properly manage digital evidence throughout the entire investigation. Using a digital forensic readiness approach and preparedness as a business goal, the administrative, technical, and physical elements included throughout this book will enhance the relevance and credibility of digital evidence. Learn how to document the available systems and logs as potential digital evidence sources, how gap analysis can be used where digital evidence is not sufficient, and the importance of monitoring data sources in a timely manner. This book offers standard operating procedures to document how an evidence-based presentation should be made, featuring legal resources for reviewing digital evidence.

Biosecurity and Bioterrorism

2nd Edition
February 12, 2016
Jeffrey Ryan
English
Paperback
9 7 8 0 1 2 8 0 2 0 2 9 6
eBook
9 7 8 0 1 2 8 0 2 0 5 7 9

Biosecurity and Bioterrorism, Second Edition, takes a holistic approach to biosecurity, with coverage of pathogens, prevention, and response methodology. It addresses these hazards in the context of vulnerability assessments and the planning strategies government and industry can use to prepare for and respond to such events. The book is organized into four thematic sections: Part I provides a conceptual understanding of biowarfare, bioterrorism and the laws we have to counteract this; Part II investigates known bioagents and the threat from emerging diseases; Part III focuses on agricultural terrorism and food security; and Part IV outlines international, US, and local initiatives for biodefense and biosecurity. Case studies illustrate biodefense against both intentional terrorism and natural outbreaks.

The Information Systems Security Officer's Guide

3rd Edition
January 12, 2016
Gerald L. Kovacich
English
Paperback
9 7 8 0 1 2 8 0 2 1 9 0 3
eBook
9 7 8 0 1 2 8 0 2 3 7 9 2

The Information Systems Security Officer's Guide: Establishing and Managing a Cyber Security Program, Third Edition, provides users with information on how to combat the ever-changing myriad of threats security professionals face. This entirely updated edition presents practical advice on establishing, managing, and evaluating a successful information protection program in a corporation or government agency, covering everything from effective communication to career guidance for the information security officer. The book outlines how to implement a new plan or evaluate an existing one, and is especially targeted to those who are new to the topic. It is the definitive resource for learning the key characteristics of an effective information systems security officer (ISSO), and paints a comprehensive portrait of an ISSO's duties, their challenges, and working environments, from handling new technologies and threats, to performing information security duties in a national security environment.

Automated Security Analysis of Android and iOS Applications with Mobile Security Framework

1st Edition
December 10, 2015
Henry Dalziel + 1 more
English
eBook
9 7 8 0 1 2 8 0 5 1 0 5 4

Risky Behaviours in the Top 400 iOS and Android Apps is a concise overview of the security threats posed by the top apps in iOS and Android apps. These apps are ubiquitous on a phones and other mobile devices, and are vulnerable to a wide range digital systems attacks, This brief volume provides security professionals and network systems administrators a much-needed dive into the most current threats, detection techniques, and defences for these attacks.

Essential Skills for Hackers

1st Edition
December 9, 2015
Kevin Cardwell + 1 more
English
eBook
9 7 8 0 1 2 8 0 5 1 1 1 5

Essential Skills for Hackers is about the skills you need to be in the elite hacker family. The book will mainly about two things: TCP/IP 101, and Protocol Analysis. The better the hacker, the more we will be able to master TCP/IP. Once the reader understands what TCP/IP is, what it looks like, the book will go into Protocol Analysis and how analyzing the protocol or, in a more general sense, looking at packets on the wire, we will be able to determine what exactly is taking place on a network. By doing this, readers can identify when something on the network doesn’t match what it should and, more importantly, can create any type of sequence of events or packets that they want on the network and see how the defenses or the machines that we send them to react.

Related subjects

Computer security

Electronic security

Fraud and white collar crime

Investigation

National security

Physical security and crime prevention

Security management

Security training

Life Sciences

Physical Sciences & Engineering

Social Sciences & Humanities

Health