Information Security Management Handbook, 6th ed.最新文献_第3页

Wireless Penetration Testing 无线渗透测试

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch164

Christopher A. Pilewski

引用次数: 1

End Node Security and Network Access Management 结束节点安全与网络接入管理

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch65

Franjo Majstor

引用次数: 0

Application Service Provider Security 应用程序服务提供商安全性

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch170

S. Fried

引用次数: 0

Types of Information Security Controls 信息安全控制的类型

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch102

Harold F. Tipton

{"title":"Types of Information Security Controls","authors":"Harold F. Tipton","doi":"10.1201/9781439833032.ch102","DOIUrl":"https://doi.org/10.1201/9781439833032.ch102","url":null,"abstract":"edom from danger or as the condition of safety. Computer security, a in a system against unauthorized disclosure, modification, or e specifically, is the protection of dat destruction and protection of the computer system itself against unauthorized use, modification, or denial of service. Because certain computer security controls inhibit productivity, security is typically a compromise toward which security practitioners, system users, and system operations and administrative personnel work to achieve a satisfactory balance between security and productivity. Controls for providing information security can be physical, technical, or administrative. These three categories of controls can be further classified as either preventive or detective. Preventive controls attempt to avoid the occurrence of unwanted events, whereas detective controls attempt to identify unwanted events after they have occurred. Preventive controls inhibit the free use of computing resources and therefore can be applied only to the degree that the users are willing to accept. Effective security awareness programs can help increase users’ level of tolerance for preventive controls by helping them understand how such controls enable them to trust their computing systems. Common detective controls include audit trails, intrusion detection methods, and checksums. Three other types of controls supplement preventive and detective controls. They are usually described as deterrent, corrective, and recovery. Deterrent controls are intended to discourage individuals from intentionally violating information security policies or procedures. These usually take the form of constraints that make it difficult or undesirable to perform unauthorized activities or threats of consequences that influence a potential intruder to not violate security (e.g., threats ranging from embarrassment to severe punishment). Corrective controls either remedy the circumstances that allowed the unauthorized activity or return conditions to what they were before the violation. Execution of corrective controls could result in changes to existing physical, technical, and administrative controls. Recovery controls restore lost computing resources or capabilities and help the organization recover monetary losses caused by a security violation. Deterrent, corrective, and recovery controls are considered to be special cases within the major categories of physical, technical, and administrative controls; they do not clearly belong in either","PeriodicalId":407371,"journal":{"name":"Information Security Management Handbook, 6th ed.","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-05-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131164265","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Security Considerations in Distributed Computing 分布式计算中的安全考虑

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch194

S. Hamidi

引用次数: 0

Social Engineering 社会工程

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch219

M. Rogers

引用次数: 0

Patch Management 101 补丁管理101

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch16

Lynda L. McGhie

引用次数: 0

Application Layer 应用程序层

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch153

Keith Pasley

引用次数: 0

Toward Enforcing Security Policy 实施安全策略

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch32

J. Wylder

引用次数: 1

When Trust Goes Beyond the Border 当信任超越国界

Information Security Management Handbook, 6th ed. Pub Date : 2007-05-14 DOI: 10.1201/9781439833032.ch50

S. Fried

引用次数: 0