ÐÅÏ¢°²È«Ô­ÀíÓë¼¼Êõ

µÚ1Õ ½éÉÜIntroduction 1.1 ʲôÊǼÆËã»ú°²È«?What Is Computer Security? 1.1.1 ×ÊÔ´µÄ¼ÛÖµValues of Assets 1.1.2 ©¶´-Íþв-¿ØÖÆ·¶Ê½The Vulnerability-Threat-Control Paradigm 1.2 ÍþвThreats 1.2.1 »úÃÜÐÔConfidentiality 1.2.2 ÍêÕûÐÔIntegrity 1.2.3 ¿ÉÓÃÐÔAvailability 1.2.4 ÍþвÀàÐÍTypes of Threats 1.2.5 ¹¥»÷ÕßÀàÐÍTypes of Attackers 1.3 Σº¦Harm 1.3.1 ·çÏÕ¼°³£Ê¶Risk and Common Sense 1.3.2 ·½·¨-ʱ»ú-¶¯»úMethod-Opportunity-Motive 1.4 ©¶´Vulnerabilities 1.5 ¿ØÖÆControls 1.6 С½áConclusion 1.7 ºóÐøÄÚÈݽéÉÜWhat's Next? 1.8 Ï°ÌâExercises µÚ2Õ ¹¤¾ßÏ䣺Éí·ÝÈÏÖ¤¡¢·ÃÎÊ¿ØÖÆÓë¼ÓÃÜToolbox£ºAuthentication£¬Access Control£¬and Cryptography 2.1 Éí·ÝÈÏÖ¤Authentication 2.1.1 ±êʶÓëÉí·ÝÈÏÖ¤Identification VS.Authentication 2.1.2 »ùÓÚ¿ÚÁîºÍÊÂʵµÄÉí·ÝÈÏÖ¤£ºÓû§ÖªµÀµÄÊÂÇéAuthentication Based on Phrases and Facts£ºSomething You Know 2.1.3 »ùÓÚÉúÎïÌØÕ÷µÄÉí·ÝÈÏÖ¤£ºÓû§µÄÉúÎïÌØÕ÷Authentication Based on Biometrics£ºSomething You Are 2.1.4 »ùÓÚÁîÅƵÄÉí·ÝÈÏÖ¤£ºÓû§ÓµÓеĶ«Î÷Authentication Based on Tokens£ºSomething You Have 2.1.5 ÁªºÏÉí·Ý¹ÜÀí»úÖÆFederated Identity Management 2.1.6 ¶àÒòËØÉí·ÝÈÏÖ¤Multifactor Authentication 2.1.7 Ñ¡ÔñºÏÊʵÄÈÏÖ¤·½·¨Fitting Authentication to the Situation 2.2 ·ÃÎÊ¿ØÖÆAccess Control 2.2.1 ·ÃÎÊ¿ØÖƲßÂÔAccess Policies 2.2.2 ·ÃÎÊ¿ØÖÆʵʩImplementing Access Control 2.2.3 ÃæÏò³ÌÐòµÄ·ÃÎÊ¿ØÖÆProcedure-Oriented Access Control 2.2.4 »ùÓÚ½ÇÉ«µÄ·ÃÎÊ¿ØÖÆRole-Based Access Control 2.3 ÃÜÂëѧCryptography 2.3.1 ¼ÓÃܼ¼Êõ´¦ÀíµÄÎÊÌâProblems Addressed by Encryption 2.3.2 ÊõÓïºÍ¸ÅÄîTerms and Concepts 2.3.3 Êý¾Ý¼ÓÃܱê×¼DES DES£ºThe Data Encryption Standard 2.3.4 ¼ÓÃܱê×¼AES AES£ºAdvanced Encryption System 2.3.5 ¹«Ô¿ÃÜÂëÌåÖÆPublic Key Cryptography 2.3.6 ʹÓù«Ô¿ÃÜÂëËã·¨½»»»ÃÜÔ¿Using Public Key Cryptography to Exchange Secret Keys 2.3.7 ¼ì´íÂëError Detecting Codes 2.3.8 Ç©ÃûSignatures 2.3.9 ÐÅÈζÈTrust ¡­¡­ µÚ3Õ ³ÌÐòºÍ±à³ÌPrograms and Programming µÚ4Õ »¥ÁªÍø¡ª¡ªÓû§¶ËThe Internet--User Side µÚ5Õ ²Ù×÷ϵͳOpreating Systems µÚ6Õ ÍøÂçNetworks µÚ7Õ Êý¾ÝºÍÊý¾Ý¿âData and Databases µÚ8Õ ÐÂÁìÓòNew Territory µÚ9Õ Òþ˽Privacy