Handbook of Information and Communication Security

1. Front Matter

   Pages i-xvi

   PDF

2. Fundamentals and Cryptography

   1. Front Matter

      Pages 1-1

      PDF

   2. A Framework for System Security

      • Clark Thomborson

      Pages 3-20

   3. Public-Key Cryptography

      • Jonathan Katz

      Pages 21-34

   4. Elliptic Curve Cryptography

      • David Jao

      Pages 35-57

   5. Cryptographic Hash Functions

      • Praveen Gauravaram, Lars R. Knudsen

      Pages 59-79

   6. Block Cipher Cryptanalysis

      • Christopher Swenson

      Pages 81-89

   7. Chaos-Based Information Security

      • Jerzy Pejaś, Adrian Skrobek

      Pages 91-128

   8. Bio-Cryptography

      • Kai Xi, Jiankun Hu

      Pages 129-157

   9. Quantum Cryptography

      • Christian Monyk

      Pages 159-174

3. Intrusion Detection and Access Control

   1. Front Matter

      Pages 175-175

      PDF

   2. Intrusion Detection and Prevention Systems

      • Karen Scarfone, Peter Mell

      Pages 177-192

   3. Intrusion Detection Systems

      • Bazara I. A. Barry, H. Anthony Chan

      Pages 193-205

   4. Intranet Security via Firewalls

      • Inderjeet Pabla, Ibrahim Khalil, Jiankun Hu

      Pages 207-219

   5. Distributed Port Scan Detection

      • Himanshu Singh, Robert Chun

      Pages 221-234

   6. Host-Based Anomaly Intrusion Detection

      • Jiankun Hu

      Pages 235-255

   7. Security in Relational Databases

      • Neerja Bhatnagar

      Pages 257-272

   8. Anti-bot Strategies Based on Human Interactive Proofs

      • Alessandro Basso, Francesco Bergadano

      Pages 273-291

   9. Access and Usage Control in Grid Systems

      • Maurizio Colombo, Aliaksandr Lazouski, Fabio Martinelli, Paolo Mori

      Pages 293-308

   10. ECG-Based Authentication

       • Fahim Sufi, Ibrahim Khalil, Jiankun Hu

       Pages 309-331

At its core, information security deals with the secure and accurate transfer of information. While information security has long been important, it was, perhaps, brought more clearly into mainstream focus with the so-called “Y2K” issue. Te Y2K scare was the fear that c- puter networks and the systems that are controlled or operated by sofware would fail with the turn of the millennium, since their clocks could lose synchronization by not recognizing a number (instruction) with three zeros. A positive outcome of this scare was the creation of several Computer Emergency Response Teams (CERTs) around the world that now work - operatively to exchange expertise and information, and to coordinate in case major problems should arise in the modern IT environment. Te terrorist attacks of 11 September 2001 raised security concerns to a new level. Te - ternational community responded on at least two fronts; one front being the transfer of reliable information via secure networks and the other being the collection of information about - tential terrorists. As a sign of this new emphasis on security, since 2001, all major academic publishers have started technical journals focused on security, and every major communi- tions conference (for example, Globecom and ICC) has organized workshops and sessions on security issues. In addition, the IEEE has created a technical committee on Communication and Information Security. Te ?rst editor was intimately involved with security for the Athens Olympic Games of 2004.

• Access
• Quality of Service
• Quality of Service (QoS)
• Routing
• communication
• database
• firewall
• information
• intrusion detection
• monitoring
• relational database
• security
• wireless sensor networks

Aus den Rezensionen: “... Besonderes Augenmerk gilt dabei dem Wechselspiel zwischen Kommunikation und dem Bereich der Informationssicherheit. ... herausgegriffene Themen illustrieren die Relevanz des Buchs. … Verschiedene HIPs werden vorgestellt und verglichen Weitere Beitrage befassen sich mit Phishing Attacken bzw mit Authentifikationen mittels biometrischer Methoden. ... Die Beitrage sind theoretisch fundiert und oft praxisbezogen. … Das Buch eignet sich deshalb gut als Einstiegslektüre für Studierende oder für Informatiker, die sich nur am Rande für die Sicherheitsthematik interessieren. Für Experten ist das Buch eine wertvolle, vielseitige Inspirationsquelle.“ (in: Bulletin electrosuisse, 2/July/2010, Issue 7, S. 121)

• Technical University of Crete, Chania, Greece

  Peter Stavroulakis

• Dept. Computer Science, San Jose State University, San Jose, USA

  Mark Stamp

Policies and ethics