密码编码学与网络安全_(美)威廉·斯托林斯著_9787121313189

密码编码学与网络安全

定价：¥98

中教价：¥75.46 (7.70折）

库存数： 0

丛书名：国外计算机科学教材系列

购买数量：

     本书系统地介绍了密码编码学与网络安全的原理和应用。全书主要包括五部分：对称密码部分介绍古典密码技术、分组密码和数据加密标准、数论和有限域基本概念、高级加密标准、分组密码运算、伪随机数生成和流密码；非对称密码部分介绍公钥加密和RSA；数据完整性逄法部分介绍哈希函数、消息鉴别码、数据签名；网络和Internet安全部分讨论网络接入控制、传输级安全、无线网络安全、电子邮件安全、IP安全。与前一版相比，新增了云安全、SHA-3、ECDSA、RSA-PSS、PIV、移动设备安全等内容。

In the four years since the sixth edition of this book was published, the field has seen continued innovations and improvements. In this new edition, I try to capture these changes while maintaining a broad and comprehensive coverage of the entire field. To begin this process of revision, the sixth edition of this book was extensively reviewed by a number of professors who teach the subject and by professionals working in the field. The result is that, in many places, the narrative has been clarified and tightened, and illustrations have been improved.

Beyond these refinements to improve pedagogy and user-friendliness, there have been substantive changes throughout the book. Roughly the same chapter organization has been retained, but much of the material has been revised and new material has been added. The most noteworthy changes are as follows:

■■ Fundamental security design principles: Chapter 1 includes a new section discussing the security design principles listed as fundamental by the National Centers of Academic Excellence in Information Assurance/Cyber Defense, which is jointly sponsored by the U.S. National Security Agency and the U.S. Department of Homeland Security.

■■ Attack surfaces and attack trees: Chapter 1 includes a new section describing these two concepts, which are useful in evaluating and classifying security threats.

■■ Number theory coverage: The material on number theory has been consolidated into a single chapter, Chapter 2. This makes for a convenient reference. The relevant portions of Chapter 2 can be assigned as needed.

■■ Finite fields: The chapter on finite fields has been revised and expanded with additional text and new figures to enhance understanding.

■■ Format-preserving encryption: This relatively new mode of encryption is enjoying increasing commercial success. A new section in Chapter 7 covers this method.

■■ Conditioning and health testing for true random number generators: Chapter 8 now provides coverage of these important topics.

■■ User authentication model: Chapter 15 includes a new description of a general model for user authentication, which helps to unify the discussion of the various approaches to user authentication.

■■ Cloud security: The material on cloud security in Chapter 16 has been updated and expanded to reflect its importance and recent developments.

■■ Transport Layer Security (TLS): The treatment of TLS in Chapter 17 has been updated, reorganized to improve clarity, and now includes a discussion of the new TLS version 1.3.

■■ Email Security: Chapter 19 has been completely rewritten to provide a comprehensive and up-to-date discussion of email security. It includes:

—— New: discussion of email threats and a comprehensive approach to email security.

—— New: discussion of STARTTLS, which provides confidentiality and authentication for SMTP.

—— Revised: treatment of S/MIME has been updated to reflect the latest version 3.2.

—— New: discussion of DNSSEC and its role in supporting email security.

—— New: discussion of DNS-based Authentication of Named Entities (DANE) and the use of this approach to enhance security for certificate use in SMTP and S/MIME.

—— New: discussion of Sender Policy Framework (SPF), which is the standardized way for a sending domain to identify and assert the mail senders for a given domain.

—— Revised: discussion of DomainKeys Identified Mail (DKIM) has been revised.

—— New: discussion of Domain-based Message Authentication, Reporting, and Conformance (DMARC) allows email senders to specify policy on how their mail should be handled, the types of reports that receivers can send back, and the frequency those reports should be sent.

It is the purpose of this book to provide a practical survey of both the principles and practice of cryptography and network security. In the first part of the book, the basic issues to be addressed by a network security capability are explored by providing a tutorial and survey of cryptography and network security technology. The latter part of the book deals with the practice of network security: practic

你还可能感兴趣

我要评论

您的姓名	验证码：
留言内容