Contents

1. Access Control     

1.1 Introduction     

1.2 Operating system access controls   

1.3 Hardware protection    

1.4 Security processors    

1.5 Other technical attacks

Summary

2. Cryptography and PKI     

2.1 Introduction     

2.2 How does cryptography work?  

2.3 Symmetric or secret key encryption 

2.4 Public key encryption  

2.5 Principles of public key crypto-systems 

2.6 Public key infrastructure overview 

2.7 Digital signatures     

2.8 Hash functions

3. Distributed systems

3.1 Concurrency

3.2 Fault tolerance and failure recovery     

3.3 Naming     

3.4 Distributed systems

4. Multilevel and Multilateral Security

4.1 Introduction     

4.2 Multilevel and multilateral security     

4.3 The MLS problem  

4.4 Multi-user operating modes   

4.5 Bell-La padula model   

4.6 Compartments     

4.7 MLS and system privileges

4.8 Limitations in MLS mechanisms

5. Electronic Banking 

5.1 Introduction to electronic banking 

5.2 Bookkeeping

5.3 Automatic teller machines    

5.4 Chip cards 

5.5 Online banking   

Summary

6. Monitoring Systems

6.1 Introduction     

6.2 Alarms     

6.3 Prepayment meters

6.4 System level problems  

6.5 Other problems   

Summary

7. Biometrics

7.1 Introduction to biometric computer security, authentication, and identification    

7.2 Biometrics 

7.3 Physiological biometric techniques 

7.4 Behavioral biometric techniques    

7.5 New biometric techniques     

7.6 Biometric systems

Summary

8. Incident Response

8.1 Incident response

8.2 IRT

8.3 Prerequisites to planning an IRT

8.4 Responding to new or unrecognized anomalous events

8.5 Incident response post mortem checklist

9. Network Attack and Defense     

9.1 Introduction     

9.2 The most common attacks

9.3 Skill issues script kiddies and packaged defense     

9.4 Vulnerabilities in network protocols     

9.5 Specific problems detecting network attacks    

9.6 The current state of the industry  

Summary

10. Management Issues: Organizational Issues   

10.1 Introduction     

10.2 Cyber law: Management issues 

10.3 Cyber law: Organizational issues   

10.4 Jurisdictional issues  

10.5 Online Dispute Resolution (ODR)    

10.6 Case studies     

BPO Fraud in Pune (BPO Saffers Hack Bank A/Cs, Steal Rs 1.5 Crore)

Summary

11. Protecting  E-Commerce Systems 

11.1 Introduction     

11.2 History of E-commerce  

11.3 An introduction to credit cards    

11.4 Online credit card frauds    

11.5 Cryptographic protection mechanisms

11.6 Network economics

11.7 Competitive applications and corporate warfare 

Summary

12. Hacking

12.1 Computer hacking 

12.2 What is hacking? 

12.3 What are the different types of hacking? 

12.4 Where is hacking illegal?    

12.5 How do hackers hack?   

12.6 Hacking related issues 

12.7 Ethical hacking  

12.8 Cyber crimes