Information Security Science: Measuring the Vulnerability to Data Compromises provides the scientific background and analytic techniques to understand and measure the risk associated with information security threats. This is not a traditional IT security book since it includes methods of information compromise that are not typically addressed in textbooks or journals.
In particular, it explores the physical nature of information security risk, and in so doing exposes subtle, yet revealing, connections between information security, physical security, information technology, and information theory. This book is also a practical risk management guide, as it explains the fundamental scientific principles that are directly relevant to information security, specifies a structured methodology to evaluate a host of threats and attack vectors, identifies unique metrics that point to root causes of technology risk, and enables estimates of the effectiveness of risk mitigation.
This book is the definitive reference for scientists and engineers with no background in security, and is ideal for security analysts and practitioners who lack scientific training. Importantly, it provides security professionals with the tools to prioritize information security controls and thereby develop cost-effective risk management strategies.
1. Cover - p. i 2. Title page - p. iii 3. Table of Contents - p. iii 4. Copyright - p. ii 5. Dedication - p. iv 6. Biography - p. v 7. Foreword - p. xi 8. Preface - p. xiii 9. Acknowledgments - p. xviii 10. Part I: Threats, risk and risk assessments - p. xx 11. Chapter 1: Information Security Threats and Risk - p. xx 12. Chapter 2: Modeling Information Security Risk - p. 27 13. Part II: Scientific fundamentals - p. 52 14. Chapter 3: Physics and Information Security - p. 52 15. Chapter 4: Electromagnetic Waves - p. 75 16. Chapter 5: Noise, Interference, and Emanations - p. 102 17. Part III: The compromise of signals - p. 122 18. Chapter 6: Signals and Information Security - p. 122 19. Chapter 7: The Compromise of Electromagnetic Signals - p. 157 20. Chapter 8: Countermeasures to Electromagnetic Signal Compromises - p. 184 21. Chapter 9: Visual Information Security - p. 202 22. Chapter 10: Audible Information Security - p. 217 23. Part IV: Information technology risk - p. 247 24. Chapter 11: Information Technology Risk Factors - p. 247 25. Chapter 12: Information Technology Risk Measurements and Metrics - p. 261 26. Chapter 13: Special Information Technology Risk Measurements and Metrics - p. 285 27. Part V: The physical security of information assets - p. 314 28. Chapter 14: Physical Security Controls - p. 314 29. Chapter 15: Data Centers: A Concentration of Information Security Risk - p. 338 30. Epilogue - p. 357 31. Appendix A: The Divergence and Curl Operators - p. 360 32. Appendix B: Common Units of Electricity and Magnetism - p. 363 33. Appendix C: Capacitive and Inductive Coupling in Circuits - p. 365 34. Appendix D: Intermediate Frequency (IF) Filtering of Signals - p. 369 35. Appendix E: An Indicative Table of Contents for an Information Security Policy - p. 372 36. Index - p. 376
Information Security Science: Measuring the Vulnerability to Data Compromises provides the scientific background and analytic techniques to understand and measure the risk associated with information security threats. This is not a traditional IT security book since it includes methods of information compromise that are not typically addressed in textbooks or journals.
In particular, it explores the physical nature of information security risk, and in so doing exposes subtle, yet revealing, connections between information security, physical security, information technology, and information theory. This book is also a practical risk management guide, as it explains the fundamental scientific principles that are directly relevant to information security, specifies a structured methodology to evaluate a host of threats and attack vectors, identifies unique metrics that point to root causes of technology risk, and enables estimates of the effectiveness of risk mitigation.
This book is the definitive reference for scientists and engineers with no background in security, and is ideal for security analysts and practitioners who lack scientific training. Importantly, it provides security professionals with the tools to prioritize information security controls and thereby develop cost-effective risk management strategies.
1. Cover - p. i 2. Title page - p. iii 3. Table of Contents - p. iii 4. Copyright - p. ii 5. Dedication - p. iv 6. Biography - p. v 7. Foreword - p. xi 8. Preface - p. xiii 9. Acknowledgments - p. xviii 10. Part I: Threats, risk and risk assessments - p. xx 11. Chapter 1: Information Security Threats and Risk - p. xx 12. Chapter 2: Modeling Information Security Risk - p. 27 13. Part II: Scientific fundamentals - p. 52 14. Chapter 3: Physics and Information Security - p. 52 15. Chapter 4: Electromagnetic Waves - p. 75 16. Chapter 5: Noise, Interference, and Emanations - p. 102 17. Part III: The compromise of signals - p. 122 18. Chapter 6: Signals and Information Security - p. 122 19. Chapter 7: The Compromise of Electromagnetic Signals - p. 157 20. Chapter 8: Countermeasures to Electromagnetic Signal Compromises - p. 184 21. Chapter 9: Visual Information Security - p. 202 22. Chapter 10: Audible Information Security - p. 217 23. Part IV: Information technology risk - p. 247 24. Chapter 11: Information Technology Risk Factors - p. 247 25. Chapter 12: Information Technology Risk Measurements and Metrics - p. 261 26. Chapter 13: Special Information Technology Risk Measurements and Metrics - p. 285 27. Part V: The physical security of information assets - p. 314 28. Chapter 14: Physical Security Controls - p. 314 29. Chapter 15: Data Centers: A Concentration of Information Security Risk - p. 338 30. Epilogue - p. 357 31. Appendix A: The Divergence and Curl Operators - p. 360 32. Appendix B: Common Units of Electricity and Magnetism - p. 363 33. Appendix C: Capacitive and Inductive Coupling in Circuits - p. 365 34. Appendix D: Intermediate Frequency (IF) Filtering of Signals - p. 369 35. Appendix E: An Indicative Table of Contents for an Information Security Policy - p. 372 36. Index - p. 376
