راهنمای مدیریت امنیت اطلاعات، جلد ۲ ۲۰۰۸
Information Security Management Handbook, Volume 2 2008

1. Front cover

2. Contents

3. Preface

4. Editors

5. Contributors

6. DOMAIN 1. INFORMATION SECURITY AND RISK MANAGEMENT: Security Management Concepts and Principles

7. Chapter 1. Integrated Threat Management

8. Chapter 2. Understanding Information Security Management Systems

9. Chapter 3. Planning for a Privacy Breach

10. Chapter 4. Using Quasi-Intelligence Resources to Protect the Enterprise

11. Chapter 5. Information Risk Management: A Process Approach to Risk Diagnosis and Treatment

12. Chapter 6. Department-Level Transformation

13. Chapter 7. Setting Priorities in Your Security Program

14. Chapter 8. Why and How Assessment of Organization Culture Shapes Security Strategies

15. Chapter 9. A Look Ahead

16. DOMAIN 2. ACCESS CONTROL: Access Control Techniques

17. Chapter 10. Authentication Tokens

18. Chapter 11. Authentication and the Role of Tokens

19. Chapter 12. Accountabilitty

20. Chapter 13. Rootkits: The Ultimate Malware Threat

21. DOMAIN 3. CRYPTOGRAPHY

22. Chapter 14. Encryption Key Management in Large-Scale Network Deployments

23. DOMAIN 4. PHYSICAL SECURITY: Elements of Physical Security

24. Chapter 15. Mantraps and Turnstiles

25. DOMAIN 5. SECURITY ARCHITECTURE AND DESIGN: Principles of Computer and Network Organizations, Architectures, and Designs

26. Chapter 16. Service-Oriented Architecture and Web Services Security

27. Chapter 17. Analysis of Covert Channels

28. Chapter 18. Security Architecture of Biological Cells: An Example of Defense in Depth*

29. Chapter 19. ISO Standards Draft Content

30. Chapter 20. Security Frameworks

31. DOMAIN 6. TELECOMMUNICATIONS AND NETWORK SECURITY: Communications and Network Security

32. Chapter 21. Facsimile Security

33. Chapter 22. Network Contents Filtering and Leak Prevention

34. Chapter 23. The Ocean Is Full of Phish

35. DOMAIN 7. APPLICATION SECURITY: Application Issues

36. Chapter 24. Neural Networks and Information Assurance Uses

37. Chapter 25. Information Technology Infrastructure Library and Security Management Overview

38. Chapter 26. Adaption: A Concept for Next-Generation Security Application Development

39. Chapter 27. Quantum Computing: Implications for Security

40. DOMAIN 8. LEGAL, REGULATIONS, COMPLIANCE, AND INVESTIGATION: Information Law

41. Chapter 28. Compliance Assurance: Taming the Beast

42. Chapter 29. Enterprise Incident Response and Digital Evidence Management and Handling

43. Chapter 30. Security Information Management Myths and Facts

44. Index

45. Back cover