Network Security Evaluation Using the NSA IEM (eBook)
450 Seiten
Elsevier Science (Verlag)
978-0-08-048943-8 (ISBN)
Ten baseline areas for evaluation are covered in detail. The tools and examples detailed within this book include both Freeware and Commercial tools that provide a detailed analysis of security vulnerabilities on the target network. The book ends with guidance on the creation of customer roadmaps to better security and recommendations on the format and delivery of the final report.
* There is no other book currently on the market that covers the National Security Agency's recommended methodology for conducting technical security evaluations
* The authors are well known in the industry for their work in developing and deploying network security evaluations using the NSA IEM
* The authors also developed the NSA's training class on this methodology
Network Security Evaluation provides a methodology for conducting technical security evaluations of all the critical components of a target network. The book describes how the methodology evolved and how to define the proper scope of an evaluation, including the consideration of legal issues that may arise during the evaluation. More detailed information is given in later chapters about the core technical processes that need to occur to ensure a comprehensive understanding of the network's security posture. Ten baseline areas for evaluation are covered in detail. The tools and examples detailed within this book include both Freeware and Commercial tools that provide a detailed analysis of security vulnerabilities on the target network. The book ends with guidance on the creation of customer roadmaps to better security and recommendations on the format and delivery of the final report.* There is no other book currently on the market that covers the National Security Agency's recommended methodology for conducting technical security evaluations* The authors are well known in the industry for their work in developing and deploying network security evaluations using the NSA IEM* The authors also developed the NSA's training class on this methodology
Cover 1
Contents 13
Prologue Why the IEM? 27
Chapter 1 Introducing the INFOSEC Evaluation Methodology 33
Chapter 2 Before the Evaluation Starts 49
Chapter 3 Setting Expectations 77
Chapter 4 Scoping the Evaluation 97
Chapter 5 Legal Principles for Information Security Evaluations1 125
Chapter 6 Building the Technical Evaluation Plan 173
Chapter 7 Starting Your On-Site Efforts 197
Chapter 8 Network Discovery Activities 225
Chapter 9 Collecting the Majority of Vulnerabilities 271
Chapter 10 Fine-Tuning the Evaluation 303
Chapter 11 The Onsite Closing Meeting 323
Chapter 12 Post-Evaluation Analysis 341
Chapter 13 Creating Measurements and Trending Results 361
Chapter 14 Trending Metrics 383
Chapter 15 Final Reporting 401
Chapter 16 Summing Up 421
Appendix A Examples of INFOSEC Tools by Baseline Activity 427
Technical Evaluation Plan Outline and Sample 443
Index 453
Related Titles 464
| Erscheint lt. Verlag | 26.8.2005 |
|---|---|
| Sprache | englisch |
| Themenwelt | Sachbuch/Ratgeber |
| Informatik ► Netzwerke ► Sicherheit / Firewall | |
| Informatik ► Theorie / Studium ► Kryptologie | |
| Wirtschaft ► Betriebswirtschaft / Management | |
| ISBN-10 | 0-08-048943-5 / 0080489435 |
| ISBN-13 | 978-0-08-048943-8 / 9780080489438 |
| Haben Sie eine Frage zum Produkt? |
PDF (Adobe DRM)Kopierschutz: Adobe-DRM
Adobe-DRM ist ein Kopierschutz, der das eBook vor Mißbrauch schützen soll. Dabei wird das eBook bereits beim Download auf Ihre persönliche Adobe-ID autorisiert. Lesen können Sie das eBook dann nur auf den Geräten, welche ebenfalls auf Ihre Adobe-ID registriert sind.
Details zum Adobe-DRM
Dateiformat: PDF (Portable Document Format)
Mit einem festen Seitenlayout eignet sich die PDF besonders für Fachbücher mit Spalten, Tabellen und Abbildungen. Eine PDF kann auf fast allen Geräten angezeigt werden, ist aber für kleine Displays (Smartphone, eReader) nur eingeschränkt geeignet.
Systemvoraussetzungen:
PC/Mac: Mit einem PC oder Mac können Sie dieses eBook lesen. Sie benötigen eine
eReader: Dieses eBook kann mit (fast) allen eBook-Readern gelesen werden. Mit dem amazon-Kindle ist es aber nicht kompatibel.
Smartphone/Tablet: Egal ob Apple oder Android, dieses eBook können Sie lesen. Sie benötigen eine
Geräteliste und zusätzliche Hinweise
Buying eBooks from abroad
For tax law reasons we can sell eBooks just within Germany and Switzerland. Regrettably we cannot fulfill eBook-orders from other countries.
aus dem Bereich
