Wiki Page, Advanced Information Security: Optional Materials

Wiki Page
2014-07-03T12:40:56-06:00

Optional Materials

Overview Video

this is a media comment

Books, Professional Journals

Please use the following author’s names, book/article titles, Web sites, and/or keywords to search for supplementary information to augment your learning in this subject.

Sandy Bacik, Building an Effective Information Security Policy Architecture (Chapter 3)

Michael Howard, et al., The Security Development Lifecycle: SDL: A Process for Developing Demonstrably More Secure Software (Chapter 1)

Maura A. van der Linden, Testing Code Security (Chapters 5 and 8)

Thomas R. Peltier, Information Security Risk Analysis, 2nd ed. (Chapter 2)

John Wylder, Strategic Information Security (Chapter 13)

Eric A. Fisch, et al., Secure Computers and Networks; analysis, design, and implementation (Chapters 1, 2, 5, 6, 10, 13, 14, and 15)

William Stepka, “Profiling Hackers: The Science of Criminal Profiling as Applied to the World of Hacking,” Security Management, Mar 2010, Vol. 54 Issue 3, (Page 80)

Xin Luo, et al., “Awareness Education as the Key to Ransomware Prevention,” Information Systems Security, Jul/Aug 2007, Vol. 16 Issue 4, (Pages 95-202), (AN 26520074)

Avinash W. Kadam, “Information Security Policy Development and Implementation,” Information Systems Security, Sep/Oct 2007, Vol. 16 Issue 5, (Pages 246-256) (AN 27625696)

Peter O. Okenyi, et al., “On the Anatomy of Human Hacking,” Information Systems Security, Nov 2007, Vol. 16 Issue 6, (Pages 302-314) (AN 27979547)

Patricia A. Bonner, “Quick Reference to HIPAA Compliance,” Benefits Quarterly, 2010 First Quarter, Vol. 26 Issue 1, (Page 58) (AN 47616062)

Chris Nowell, “Regulatory Compliance - the Wonderful World of FISMA,” Information Systems Security, Sep/Oct 2007, Vol. 16 Issue 5, (Pages 278-280) (AN 27625693)

Mimi Herrmann, “Security Strategy: From Soup to Nuts,” Information Security Journal: A Global Perspective, Jan 2009, Vol. 18 Issue 1, (Pages 26-32) (AN 36353502)

Ryan Sherstobitoff, et al., “You Installed Internet Security on Your Network: Is Your Company Safe?” Information Systems Security, Jul/Aug 2007, Vol. 16 Issue 4 (Pages 188-194) (AN 26520075)

Professional Associations

The following is a list of vendor-neutral professional organizations and their respective certifications:

CISA, CISM, CGEIT, CRISC Certifications, http://www.isaca.org/

CISSP® and SSCP® Information Systems Security Certifications, http://www.isc2.org/

CSIH Certification, http://www.cert.org/

FISMA Training and Certification, http://www.fismacenter.com/

SANS GIAC Certifications ' http://www.sans.org/

Security+ Certification, http://www.comptia.org/

The following is a list of vendor-specific professional certifications:

CCSP Certification

Check Point Firewall Specialist Certifications

MSCE Security Certification

RSA Training and Certifications

Symantec Security Specialist Certifications

Other References

CVE List, http://cve.mitre.org/

National Cyber Alert System, http://www.us-cert.gov/cas/alldocs.html

National Vulnerability Database, http://nvd.nist.gov/

SANS Top 20 Threats/Vulnerabilities, http://www.sans.org/top-cyber-security-risks/?ref=top20

CERT® Coordination Center, http://www.cert.org/

US Computer Emergency Readiness Team, http://www.us-cert.gov/

US Department of Homeland Security, http://www.dhs.gov/

US National Institute of Standards & Technology, http://www.nist.gov/

Professional Portals:

US-CERT: Publications http://www.us-cert.gov/reading_room/

Internet Systems Consortium (ISC) http://www.isc.org/

Information Search

Use the following keywords to search for additional online resources that may be used for supporting your work on the course assignments:

Availability

Business Continuity

Business Impact Analysis

Compliance Laws

Confidentiality

Cryptography

Disaster Recovery

Incident Response

Information Security

Information Systems Security

Integrity

IT Risks, Threats, Vulnerabilities

IT Security Assessment

IT Security Audit

Malicious Code

Malware

Network Security

Risk Management

Security Breaches

Security Controls

Security Countermeasures

Security Incidents

Security Management

Security Monitoring

Security Operations

Security Testing

Telecommunications Security

Unauthorized Access