Security In Computing 5ed

Security in Computing, 5th Edition by Charles P. Pfleeger is a comprehensive textbook that covers all key areas of computer security, from foundational concepts to advanced topics. Written for students and professionals, the book explains the principles of security and then applies them to various components of a computing system, including users, software, operating systems, networks, and data.
The book takes a layered approach, starting with basic security concepts before moving on to more complex subjects. It helps readers “think like an attacker” to identify vulnerabilities and then provides defensive strategies and countermeasures. The 5th edition updates the classic text to include modern topics like cloud computing, the Internet of Things (IoT), and cyber warfare, making it relevant to today’s evolving digital landscape.
________________________________________
Key Topics Covered
• Foundational Concepts: Introduces core ideas like the Confidentiality, Integrity, and Availability (CIA) triad and the relationships between vulnerabilities, threats, and controls.
• Security Toolbox: Explores fundamental tools and techniques, including authentication, access control, and a detailed look at cryptography.
• System Components: Dedicates separate chapters to securing specific parts of a system, such as:
o Programs and Programming: Discusses common programming oversights and malicious code (malware).
o The Web: Covers browser attacks, web-based threats, and email security.
o Operating Systems: Examines security features, design principles, and threats like rootkits.
o Networks: Explains network security attacks, wireless security, and countermeasures like firewalls and Intrusion Detection Systems (IDS).
• Emerging Technologies & Broader Issues: Provides timely coverage on topics that are critical in the current security environment:
o Cloud Computing: A full chapter on the unique risks and security tools for cloud environments.
o Privacy: A primer on privacy principles, policies, and the impact of technologies like data mining.
o Management and Legal Issues: Addresses security planning, incident handling, risk analysis, and legal and ethical considerations in cybersecurity.
o The Internet of Things (IoT): Discusses the security risks and techniques for safeguarding connected devices.
o Cyber Warfare and Electronic Voting: Explores recent attacks and the security challenges in these critical areas.