Updates
Latest Tweet
What's New?
Check out for latest innovation, a computer based training video collection
Like this Page
Computer Security Basics Review by Thomas Duff
Get your favorite clueless techie up to speed on security...
It still surprises me how many of my information technology colleagues still have no clue when it comes to computer security. This particular book is one I'd feel really good about when it comes to a recommendation to get them up to speed on the subject... Computer Security Basics (2nd Edition) by Rick Lehtinen, Deborah Russell, and G. T. Gangemi Sr.
Contents:
Part 1 - Security for Today: Introduction; Some Security History
Part 2 - Computer Security: Computer System Security and Access Controls; Viruses and Other Wildlife; Establishing and Maintaining a Security Policy; Web Attacks and Internet Vulnerabilities
Part 3 - Communications Security: Encryption; Communications and Network Security
Part 4 - Other Types of Security: Physical Security and Biometrics; Wireless Network Security
Part 5 - Appendixes: OSI Model; TEMPEST; The Orange Book, FIPS PUBS, and the Common Criteria
Index
While not a technical "how to" manual, this book does a great job in dealing with technical issues and concepts. Pretty much all the significant issues surrounding computer and technology security these days is covered in sufficient detail to allow for a functional understanding of the topics. For instance, the chapter on viruses would allow even the most clueless techie to grasp the problems. The authors distinguish between viruses, worms, trojan horses, bombs, and other various nasty surprises. The history is valuable to understand how we got into this condition, and by the end of the chapter you'll know what you need to do to start to combat the problem. From there, you can dive into the more technical details of any one of the areas that pertain to your particular situation.
For a subject that could be painfully dry without much effort, Lehtinen et al. do an admirable job in keeping the reader engaged and involved. If you're trying to educate someone who hasn't kept up with the topic of computer security, this would be a very good starting point...