Table Of ContentThis is an electronic version of the print textbook. Due to electronic rights restrictions,
some third party content may be suppressed. Editorial review has deemed that any suppressed
content does not materially affect the overall learning experience. The publisher reserves the right
to remove content from this title at any time if subsequent rights restrictions require it. For
valuable information on pricing, previous editions, changes to current editions, and alternate
formats, please visit www.cengage.com/highered to search by ISBN#, author, title, or keyword for
materials in your areas of interest.
This page intentionally left blank
Security+ Guide
to Network Security
Fundamentals
Fourth Edition
Mark Ciampa, Ph.D.
Security+GuidetoNetworkSecurity ©2012,2009,2005,2003CourseTechnology,CengageLearning
Fundamentals,FourthEdition
ALLRIGHTSRESERVED.Nopartofthisworkcoveredbythecopyright
MarkCiampa hereinmaybereproduced,transmitted,storedorusedinanyformorby
anymeansgraphic,electronic,ormechanical,includingbutnotlimitedto
VicePresident,Editorial:DaveGarza
photocopying,recording,scanning,digitizing,taping,Webdistribution,
ExecutiveEditor:StephenHelba
informationnetworks,orinformationstorageandretrievalsystems,except
ManagingEditor:MarahBellegarde aspermittedunderSection107or108ofthe1976UnitedStatesCopyright
SeniorProductManager:MichelleRuelos Act,withoutthepriorwrittenpermissionofthepublisher.
Cannistraci
DevelopmentalEditor:DebKaufmann Forproductinformationandtechnologyassistance,contactusat
CengageLearningCustomer&SalesSupport,1-800-354-9706
EditorialAssistant:JenniferWheaton
VicePresident,Marketing:JenniferAnn Forpermissiontousematerialfromthistextorproduct,
Baker submitallrequestsonlineatcengage.com/permissions
Furtherpermissionsquestionscanbeemailedto
MarketingDirector:DeborahS.Yarnell
[email protected]
AssociateMarketingManager:Erica
Ropitzky
LibraryofCongressControlNumber:2011931202
ProductionDirector:WendyTroeger
ProductionManager:AndrewCrouth ISBN-13:978-1-111-64012-5
SeniorContentProjectManager:Andrea ISBN-10:1-111-64012-2
Majot
CourseTechnology
SeniorArtDirector:JackPendleton
20ChannelCenterStreet
Boston,MA02210
USA
CengageLearningisaleadingproviderofcustomizedlearningsolutions
withofficelocationsaroundtheglobe,includingSingapore,theUnited
Kingdom,Australia,Mexico,Brazil,andJapan.Locateyourlocalofficeat:
international.cengage.com/region
CengageLearningproductsarerepresentedinCanadaby
NelsonEducation,Ltd.
Foryourlifelonglearningsolutions,visit
www.cengage.com/coursetechnology
Purchaseanyofourproductsatyourlocalcollegestoreoratour
preferredonlinestorewww.cengagebrain.com
Visitourcorporatewebsiteatwww.cengage.com
Someoftheproductnamesandcompanynamesusedinthisbookhavebeenusedforidentificationpurposesonlyandmaybetrademarksorregistered
trademarksoftheirrespectivemanufacturersandsellers.
Anyfictionaldatarelatedtopersons,companiesorURLsusedthroughoutthisbookisintendedforinstructionalpurposesonly.Atthetimethisbookwas
printed,anysuchdatawasfictionalandnotbelongingtoanyrealpersonsorcompanies.
CourseTechnologyandtheCourseTechnologylogoareregisteredtrademarksusedunderlicense.
CourseTechnology,apartofCengageLearning,reservestherighttorevisethispublicationandmakechangesfromtimetotimeinitscontent
withoutnotice.
Theprogramsinthisbookareforinstructionalpurposesonly.Theyhavebeentestedwithcare,butarenotguaranteedforanyparticularintentbeyondeducational
purposes.Theauthorandthepublisherdonotofferanywarrantiesorrepresentations,nordotheyacceptanyliabilitieswithrespecttotheprograms.
Printed in the United States of America
1 2 3 4 5 6 7 12 11
Brief Contents
INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
CHAPTER 1
Introductionto Security... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. 1
CHAPTER 2
MalwareandSocialEngineeringAttacks... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . 41
CHAPTER 3
ApplicationandNetworkAttacks .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . 81
CHAPTER 4
Vulnerability AssessmentandMitigating Attacks . ... .. ... .. ... ... .. ... ... .. ... ... .. ... 123
CHAPTER 5
Host,Application,andDataSecurity ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 161
CHAPTER 6
NetworkSecurity.. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 205
CHAPTER 7
Administering aSecureNetwork. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 249
CHAPTER 8
WirelessNetwork Security. .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 291
CHAPTER 9
AccessControl Fundamentals. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 331
CHAPTER 10
AuthenticationandAccountManagement.. .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 365
CHAPTER 11
BasicCryptography ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 405
CHAPTER 12
AdvancedCryptography... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 449
CHAPTER 13
BusinessContinuity ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 487
CHAPTER 14
RiskMitigation.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 533
APPENDIX A
CompTIASY0-301 CertificationExamObjectives .. ... .. ... .. ... ... .. ... ... .. ... ... .. ... 567
APPENDIX B
DownloadsandToolsforHands-On Projects.. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 579
APPENDIX C
SecurityWebSites. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 581
APPENDIX D
SelectedTCP/IPPortsandTheirThreats. ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 585
APPENDIX E
SampleInternetandE-Mail AcceptableUse Policies... .. ... .. ... ... .. ... ... .. ... ... .. ... 589
APPENDIX F
InformationSecurityCommunitySite .. ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 595
GLOSSARY .. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 597
INDEX. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 609
iii
This page intentionally left blank
