Cyberspace and Cybersecurity (Hardcover)

Based on related courses and research on the cyber environment in Europe, the United States, and Asia, Cyberspace and Cybersecurity supplies complete coverage of cyberspace and cybersecurity. It not only emphasizes technologies but also pays close attention to human factors and organizational perspectives.

Detailing guidelines for quantifying and measuring vulnerabilities, the book also explains how to avoid these vulnerabilities through secure coding. It covers organizational-related vulnerabilities, including access authorization, user authentication, and human factors in information security. Providing readers with the understanding required to build a secure enterprise, block intrusions, and handle delicate legal and ethical issues, the text:

• Examines the risks inherent in information system components, namely hardware, software, and people
• Explains why asset identification should be the cornerstone of any information security strategy
• Identifies the traits a CIO must have to address cybersecurity challenges
• Describes how to ensure business continuity in the event of adverse incidents, including acts of nature
• Considers intrusion detection and prevention systems (IDPS), focusing on configurations, capabilities, selection, management, and deployment

Explaining how to secure a computer against malware and cyber attacks, the text’s wide-ranging coverage includes security analyzers, firewalls, antivirus software, file shredding, file encryption, and anti-loggers. It reviews international and U.S. federal laws and legal initiatives aimed at providing a legal infrastructure for what transpires over the Internet. The book concludes by examining the role of the U.S. Department of Homeland Security in our country’s cyber preparedness.

基於對歐洲、美國和亞洲網絡環境相關課程和研究的基礎上，《網絡空間與網絡安全》全面涵蓋了網絡空間和網絡安全的內容。它不僅強調技術，還密切關注人為因素和組織角度。

該書詳細介紹了量化和測量漏洞的指南，並解釋了如何通過安全編碼來避免這些漏洞。它涵蓋了與組織相關的漏洞，包括訪問授權、用戶身份驗證和信息安全中的人為因素。通過提供讀者所需的理解，以建立一個安全的企業，阻止入侵，處理敏感的法律和道德問題，本書：

- 檢查信息系統組件（硬件、軟件和人員）固有的風險
- 解釋為什麼資產識別應該是任何信息安全策略的基石
- 確定CIO應該具備的應對網絡安全挑戰的特質
- 描述如何在不利事件（包括自然災害）發生時確保業務連續性
- 考慮入侵檢測和預防系統（IDPS），重點放在配置、功能、選擇、管理和部署上

本書還解釋了如何保護計算機免受惡意軟件和網絡攻擊，其廣泛的內容包括安全分析器、防火牆、防病毒軟件、文件碎片化、文件加密和反記錄器。它還回顧了國際和美國聯邦法律以及旨在為互聯網上發生的事情提供法律基礎的法律倡議。本書最後還探討了美國國土安全部在我們國家的網絡準備工作中的角色。

該書附有練習題及解答、更新的參考資料、電子演示、項目評估標準、項目準備指南和教學建議，適用於合格的課程採用。