,Computer Security
Fundamentals
Third Edition
Chuck Easttom
800 East 96th Street, Indianapolis, Indiana 46240 USA
,Computer Security Fundamentals, Third Edition Executive Editor
Brett Bartow
Copyright © 2016 by Pearson Education, Inc.
All rights reserved. No part of this book shall be reproduced, stored in a retrieval system, or Acquisitions Editor
transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, Betsy Brown
without written permission from the publisher. No patent liability is assumed with respect
Development Editor
to the use of the information contained herein. Although every precaution has been taken in
Christopher Cleveland
the preparation of this book, the publisher and author assume no responsibility for errors or
omissions. Nor is any liability assumed for damages resulting from the use of the information
Managing Editor
contained herein.
Sandra Schroeder
ISBN-13: 978-0-7897-5746-3
ISBN-10: 0-7897-5746-X Senior Project Editor
Tonya Simpson
Library of Congress control number: 2016940227
Copy Editor
Printed in the United States of America
Gill Editorial Services
First Printing: May 2016
Indexer
Brad Herriman
Trademarks
All terms mentioned in this book that are known to be trademarks or service marks have Proofreader
been appropriately capitalized. Pearson IT Certification cannot attest to the accuracy of this Paula Lowell
information. Use of a term in this book should not be regarded as affecting the validity of any
trademark or service mark. Technical Editor
Dr. Louay Karadsheh
Warning and Disclaimer Publishing Coordinator
Every effort has been made to make this book as complete and as accurate as possible, but Vanessa Evans
no warranty or fitness is implied. The information provided is on an “as is” basis. The author
and the publisher shall have neither liability nor responsibility to any person or entity with Cover Designer
respect to any loss or damages arising from the information contained in this book. Chuti Prasertsith
Compositor
Special Sales
Mary Sudul
For information about buying this title in bulk quantities, or for special sales opportunities
(which may include electronic versions; custom cover designs; and content particular to your
business, training goals, marketing focus, or branding interests), please contact our corporate
sales department at or (800) 382-3419.
For government sales inquiries, please contact .
For questions about sales outside the U.S., please contact .
, Contents at a Glance
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1 Introduction to Computer Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
2 Networks and the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
3 Cyber Stalking, Fraud, and Abuse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
4 Denial of Service Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
5 Malware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
6 Techniques Used by Hackers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
7 Industrial Espionage in Cyberspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
8 Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
9 Computer Security Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
10 Security Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
11 Network Scanning and Vulnerability Scanning . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
12 Cyber Terrorism and Information Warfare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310
13 Cyber Detective . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338
14 Introduction to Forensics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
A Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388
B Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394
C Answers to the Multiple Choice Questions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 396
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400
iii
Fundamentals
Third Edition
Chuck Easttom
800 East 96th Street, Indianapolis, Indiana 46240 USA
,Computer Security Fundamentals, Third Edition Executive Editor
Brett Bartow
Copyright © 2016 by Pearson Education, Inc.
All rights reserved. No part of this book shall be reproduced, stored in a retrieval system, or Acquisitions Editor
transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, Betsy Brown
without written permission from the publisher. No patent liability is assumed with respect
Development Editor
to the use of the information contained herein. Although every precaution has been taken in
Christopher Cleveland
the preparation of this book, the publisher and author assume no responsibility for errors or
omissions. Nor is any liability assumed for damages resulting from the use of the information
Managing Editor
contained herein.
Sandra Schroeder
ISBN-13: 978-0-7897-5746-3
ISBN-10: 0-7897-5746-X Senior Project Editor
Tonya Simpson
Library of Congress control number: 2016940227
Copy Editor
Printed in the United States of America
Gill Editorial Services
First Printing: May 2016
Indexer
Brad Herriman
Trademarks
All terms mentioned in this book that are known to be trademarks or service marks have Proofreader
been appropriately capitalized. Pearson IT Certification cannot attest to the accuracy of this Paula Lowell
information. Use of a term in this book should not be regarded as affecting the validity of any
trademark or service mark. Technical Editor
Dr. Louay Karadsheh
Warning and Disclaimer Publishing Coordinator
Every effort has been made to make this book as complete and as accurate as possible, but Vanessa Evans
no warranty or fitness is implied. The information provided is on an “as is” basis. The author
and the publisher shall have neither liability nor responsibility to any person or entity with Cover Designer
respect to any loss or damages arising from the information contained in this book. Chuti Prasertsith
Compositor
Special Sales
Mary Sudul
For information about buying this title in bulk quantities, or for special sales opportunities
(which may include electronic versions; custom cover designs; and content particular to your
business, training goals, marketing focus, or branding interests), please contact our corporate
sales department at or (800) 382-3419.
For government sales inquiries, please contact .
For questions about sales outside the U.S., please contact .
, Contents at a Glance
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1 Introduction to Computer Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
2 Networks and the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
3 Cyber Stalking, Fraud, and Abuse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
4 Denial of Service Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
5 Malware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
6 Techniques Used by Hackers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
7 Industrial Espionage in Cyberspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
8 Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
9 Computer Security Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
10 Security Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
11 Network Scanning and Vulnerability Scanning . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
12 Cyber Terrorism and Information Warfare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310
13 Cyber Detective . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338
14 Introduction to Forensics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
A Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388
B Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394
C Answers to the Multiple Choice Questions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 396
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400
iii
