Network Security Evaluation Using the NSA IEM (eBook)

Bryan Cunningham, Ed Fuller, Greg Miles, Russ Rogers (Autoren)

eBook Download: PDF

2005 | 1. Auflage
450 Seiten
Elsevier Science (Verlag)
978-0-08-048943-8 (ISBN)

Infos

Network Security Evaluation provides a methodology for conducting technical security evaluations of all the critical components of a target network. The book describes how the methodology evolved and how to define the proper scope of an evaluation, including the consideration of legal issues that may arise during the evaluation. More detailed information is given in later chapters about the core technical processes that need to occur to ensure a comprehensive understanding of the network's security posture.

Ten baseline areas for evaluation are covered in detail. The tools and examples detailed within this book include both Freeware and Commercial tools that provide a detailed analysis of security vulnerabilities on the target network. The book ends with guidance on the creation of customer roadmaps to better security and recommendations on the format and delivery of the final report.

* There is no other book currently on the market that covers the National Security Agency's recommended methodology for conducting technical security evaluations
* The authors are well known in the industry for their work in developing and deploying network security evaluations using the NSA IEM
* The authors also developed the NSA's training class on this methodology

Inhalt

Cover 1
Contents 13
Prologue Why the IEM? 27
Chapter 1 Introducing the INFOSEC Evaluation Methodology 33
Chapter 2 Before the Evaluation Starts 49
Chapter 3 Setting Expectations 77
Chapter 4 Scoping the Evaluation 97
Chapter 5 Legal Principles for Information Security Evaluations1 125
Chapter 6 Building the Technical Evaluation Plan 173
Chapter 7 Starting Your On-Site Efforts 197
Chapter 8 Network Discovery Activities 225
Chapter 9 Collecting the Majority of Vulnerabilities 271
Chapter 10 Fine-Tuning the Evaluation 303
Chapter 11 The Onsite Closing Meeting 323
Chapter 12 Post-Evaluation Analysis 341
Chapter 13 Creating Measurements and Trending Results 361
Chapter 14 Trending Metrics 383
Chapter 15 Final Reporting 401
Chapter 16 Summing Up 421
Appendix A Examples of INFOSEC Tools by Baseline Activity 427
Technical Evaluation Plan Outline and Sample 443
Index 453
Related Titles 464

Produkt-Details

• Erscheint lt. Verlag: 26.8.2005
• Sprache: englisch
• Themenwelt: Sachbuch/Ratgeber
• Themenwelt: Informatik ► Netzwerke ► Sicherheit / Firewall
• Themenwelt: Informatik ► Theorie / Studium ► Kryptologie
• Themenwelt: Wirtschaft ► Betriebswirtschaft / Management
• ISBN-10: 0-08-048943-5 / 0080489435
• ISBN-13: 978-0-08-048943-8 / 9780080489438