计算机安全：艺术与科学

Preface Goals Philosophy Organization Roadmap Special Acknowledgment AcknowledgmentsPART 1:INTRODUCTION Chapter 1 An Overview of Computer SecurityPART 2:FOUNDATIONS Chapter 2 Access Control Matrix Chapter 3 Foundational ResultsPART 3:POLICY Chapter 4 Security Policies Chapter 5 Confidentiality Policies

Preface Goals Philosophy Organization Roadmap Special Acknowledgment AcknowledgmentsPART 1:INTRODUCTION Chapter 1 An Overview of Computer SecurityPART 2:FOUNDATIONS Chapter 2 Access Control Matrix Chapter 3 Foundational ResultsPART 3:POLICY Chapter 4 Security Policies Chapter 5 Confidentiality Policies Chapter 6 Integrity Policies Chapter 7 Hybrid Policies Chapter 8 Noninterference and Policy CompositionPART 4:IMPLEMENTATION I:CRYPTOGRAPHY Chapter 9 Basic Cryptography Chapter 10 Key Management Chapter 11 Cipher Techniques Chapter 12 AuthenticationPART 5:IMPLEMENTATION II:SYSTEMS Chapter 13 Design Principles Chapter 14 Representing Identity Chapter 15 Access Control Mechanisms Chapter 16 Information Flow Chapter 17 Confinement ProblemPART 6:ASSURANCE Contributed by Elisabeth Sullivan Chapter 18 Introduction to Assurance Chapter 19 Building Systems with Assurance Chapter 20 Formal Methods Chapter 21 Evaluating SystemsPART 7:SPECIAL TOPICS Chapter 22 Malicious Logic Chapter 23 Vulnerability Analysis Chapter 24 Auditing Chapter 25 Intrusion DetectionPART 8:PRACTICUM Chapter 26 Network Security Chapter 27 System Security Chapter 28 User Security Chapter 29 Program SecurityPART 9:END MATTER Chapter 30 Lattices Chapter 31 The Extended Euclidean Algorithm Chapter 32 Entropy and Uncertainty Chapter 33 Virtual Machines Chapter 34 Symbolic Logic Chapter 35 Example Academic Security PolicyBibliographyIndex

《计算机安全：艺术与科学》是一本综合教科书，详尽地介绍了计算机安全的理论与实践，阐释了该领域最基本和最普遍的知识，包括计算机安全的本质和面临的挑战，策略与安全的关系，密码学的角色与应用，策略实现机制，保障技术和方法学，脆弱性分析和入侵检测等。同时把计算机系统、网络、人为因素和密码学等概念融为一体，有效地阐明了计算机安全不仅是一门科学，同时也是一门艺术。 本书可作为信息安全、计算机等相关专业本科生、研究生的教科书和学习参考书，也可人秋维护网络和计算机系统安全的管理人员、信息安全技术开发人员和研究人员的工具书和参考书。