加密与网络安全：第七版革新与全面解读

需积分: 9 178 浏览量更新于2024-07-18 收藏 8.83MB PDF 举报

《加密与网络安全应用与实践》第七版是一部全面涵盖网络安全领域的权威著作，自第六版发布以来，随着技术的不断创新和提升，作者在本新版中力求捕捉这些变化，提供最新且深入的教育内容。修订过程充分考虑了教学教授和行业专家的意见，使得书中的叙述更为清晰、紧凑，插图也进行了优化，提高了读者的阅读体验。虽然章节结构大体保持一致，但内容上进行了大量的修订和新知识的加入。书中涵盖了以下主要变化： 1. **加密技术更新**：鉴于密码学领域的快速发展，新的加密算法和技术可能被纳入，包括更安全的对称加密、非对称加密（如RSA和ECC）以及量子加密等前沿概念。 2. **网络安全威胁与防护**：新的网络威胁，如零日攻击、勒索软件、AI驱动的攻击手段，以及最新的防御策略和防火墙技术，都可能被详细阐述。 3. **网络架构和协议的演变**：随着云计算、物联网（IoT）和边缘计算的兴起，网络架构和通信协议可能有所调整，例如IPv6、SDN/NFV和TLS/SSL版本升级。 4. **隐私保护和法规遵从**：随着数据保护法如GDPR的实施，本书可能探讨了如何在合规的前提下处理个人数据加密和隐私保护。 5. **网络操作系统的安全增强**：对于操作系统如Windows、Linux等的安全更新，以及安全操作系统的实践应用，都有可能进行了详尽介绍。 6. **物联网安全**：针对物联网设备的安全问题，如智能设备的固件更新、身份验证机制和数据传输安全，进行了扩展讨论。 7. **区块链与加密货币安全**：随着区块链技术的普及，涉及其安全模型、共识算法和应用案例的安全问题也被纳入书中。 8. **教育和职业发展**：新版可能包含了最新的网络安全职业发展路径、认证考试指南以及行业趋势分析，帮助读者跟上行业发展。第七版《加密与网络安全应用与实践》不仅保留了原有的框架，还深入剖析了最新技术和实践，为读者提供了全面、实用的网络安全知识，无论是在教育领域还是专业实践中，都具有很高的参考价值。

PREFACE 15

PROJECTS AND OTHER STUDENT EXERCISES

For many instructors, an important component of a cryptography or network security course

is a project or set of projects by which the student gets hands-on experience to reinforce

concepts from the text. This book provides an unparalleled degree of support, including a

projects component in the course. The IRC not only includes guidance on how to assign and

structure the projects, but also includes a set of project assignments that covers a broad range

of topics from the text:

■ Sage projects: Described in the next section.

■ Hacking project: Exercise designed to illuminate the key issues in intrusion detection

and prevention.

■ Block cipher projects: A lab that explores the operation of the AES encryption algo-

rithm by tracing its execution, computing one round by hand, and then exploring the

various block cipher modes of use. The lab also covers DES. In both cases, an online

Java applet is used (or can be downloaded) to execute AES or DES.

■ Lab exercises: A series of projects that involve programming and experimenting with

concepts from the book.

■ Research projects: A series of research assignments that instruct the student to research

a particular topic on the Internet and write a report.

■ Programming projects: A series of programming projects that cover a broad range of

topics and that can be implemented in any suitable language on any platform.

■ Practical security assessments: A set of exercises to examine current infrastructure and

practices of an existing organization.

■ Firewall projects: A portable network firewall visualization simulator, together with

exercises for teaching the fundamentals of firewalls.

■ Case studies: A set of real-world case studies, including learning objectives, case

description, and a series of case discussion questions.

■ Writing assignments: A set of suggested writing assignments, organized by chapter.

■ Reading/report assignments: A list of papers in the literature—one for each chapter—

that can be assigned for the student to read and then write a short report.

This diverse set of projects and other student exercises enables the instructor to use

the book as one component in a rich and varied learning experience and to tailor a course

plan to meet the specific needs of the instructor and students. See Appendix A in this book

for details.

THE SAGE COMPUTER ALGEBRA SYSTEM

One of the most important features of this book is the use of Sage for cryptographic examples

and homework assignments. Sage is an open-source, multiplatform, freeware package that

implements a very powerful, flexible, and easily learned mathematics and computer algebra

system. Unlike competing systems (such as Mathematica, Maple, and MATLAB), there are

16 PREFACE

no licensing agreements or fees involved. Thus, Sage can be made available on computers

and networks at school, and students can individually download the software to their own

personal computers for use at home. Another advantage of using Sage is that students learn

a powerful, flexible tool that can be used for virtually any mathematical application, not

justcryptography.

The use of Sage can make a significant difference to the teaching of the mathematics

of cryptographic algorithms. This book provides a large number of examples of the use of

Sage covering many cryptographic concepts in Appendix B, which is included in this book.

Appendix C lists exercises in each of these topic areas to enable the student to gain

hands-on experience with cryptographic algorithms. This appendix is available to instruc-

tors at the IRC for this book. Appendix C includes a section on how to download and get

started with Sage, a section on programming with Sage, and exercises that can be assigned to

students in the following categories:

■ Chapter 2—Number Theory and Finite Fields: Euclidean and extended Euclidean

algorithms, polynomial arithmetic, GF(2

), Euler’s Totient function, Miller–Rabin, fac-

toring, modular exponentiation, discrete logarithm, and Chinese remainder theorem.

■ Chapter 3—Classical Encryption: Affine ciphers and the Hill cipher.

■ Chapter 4—Block Ciphers and the Data Encryption Standard: Exercises based

onSDES.

■ Chapter 6—Advanced Encryption Standard: Exercises based on SAES.

■ Chapter 8—Pseudorandom Number Generation and Stream Ciphers: Blum Blum

Shub, linear congruential generator, and ANSI X9.17 PRNG.

■ Chapter 9—Public-Key Cryptography and RSA: RSA encrypt/decrypt and signing.

■ Chapter 10—Other Public-Key Cryptosystems: Diffie–Hellman, elliptic curve.

■ Chapter 11—Cryptographic Hash Functions: Number-theoretic hash function.

■ Chapter 13—Digital Signatures: DSA.

ONLINE DOCUMENTS FOR STUDENTS

For this new edition, a tremendous amount of original supporting material for students has

been made available online.

Purchasing this textbook new also grants the reader six months of access to the

Companion Website, which includes the following materials:

■ Online chapters: To limit the size and cost of the book, four chapters of the book are

provided in PDF format. This includes three chapters on computer security and one on

legal and ethical issues. The chapters are listed in this book’s table of contents.

■ Online appendices: There are numerous interesting topics that support material found

in the text but whose inclusion is not warranted in the printed text. A total of 20 online

appendices cover these topics for the interested student. The appendices are listed in

this book’s table of contents.

PREFACE 17

■ Homework problems and solutions: To aid the student in understanding the material,

aseparate set of homework problems with solutions are available.

■ Key papers: A number of papers from the professional literature, many hard to find,

are provided for further reading.

■ Supporting documents: A variety of other useful documents are referenced in the text

and provided online.

■ Sage code: The Sage code from the examples in Appendix B is useful in case the student

wants to play around with the examples.

To access the Companion Website, follow the instructions for “digital resources for

students” found in the front of this book.

ACKNOWLEDGMENTS

This new edition has benefited from review by a number of people who gave generously

of their time and expertise. The following professors reviewed all or a large part of the

manuscript: Hossein Beyzavi (Marymount University), Donald F. Costello (University of

Nebraska–Lincoln), James Haralambides (Barry University), Anand Seetharam (California

State University at Monterey Bay), Marius C. Silaghi (Florida Institute of Technology),

Shambhu Upadhyaya (University at Buffalo), Zhengping Wu (California State University

at San Bernardino), Liangliang Xiao (Frostburg State University), Seong-Moo (Sam) Yoo

(The University of Alabama in Huntsville), and Hong Zhang (Armstrong State University).

Thanks also to the people who provided detailed technical reviews of one or more

chapters: Dino M. Amaral, Chris Andrew, Prof. (Dr). C. Annamalai, Andrew Bain, Riccardo

Bernardini, Olivier Blazy, Zervopoulou Christina, Maria Christofi, Dhananjoy Dey, Mario

Emmanuel, Mike Fikuart, Alexander Fries, Pierpaolo Giacomin, Pedro R. M. Inácio,

Daniela Tamy Iwassa, Krzysztof Janowski, Sergey Katsev, Adnan Kilic, Rob Knox, Mina

Pourdashty, Yuri Poeluev, Pritesh Prajapati, Venkatesh Ramamoorthy, Andrea Razzini,

Rami Rosen, Javier Scodelaro, Jamshid Shokrollahi, Oscar So, and David Tillemans.

In addition, I was fortunate to have reviews of individual topics by “subject-area

gurus,” including Jesse Walker of Intel (Intel’s Digital Random Number Generator), Russ

Housley of Vigil Security (key wrapping), Joan Daemen (AES), Edward F. Schaefer of

Santa Clara University (Simplified AES), Tim Mathews, formerly of RSA Laboratories

(S/MIME), Alfred Menezes of the University of Waterloo (elliptic curve cryptography),

William Sutton, Editor/Publisher of The Cryptogram (classical encryption), Avi Rubin of

Johns Hopkins University (number theory), Michael Markowitz of Information Security

Corporation (SHA and DSS), Don Davis of IBM Internet Security Systems (Kerberos),

Steve Kent of BBN Technologies (X.509), and Phil Zimmerman (PGP).

Nikhil Bhargava (IIT Delhi) developed the set of online homework problems and

solutions. Dan Shumow of Microsoft and the University of Washington developed all of

the Sage examples and assignments in Appendices B and C. Professor Sreekanth Malladi of

Dakota State University developed the hacking exercises. Lawrie Brown of the Australian

Defence Force Academy provided the AES/DES block cipher projects and the security

assessment assignments.

18 PREFACE

Sanjay Rao and Ruben Torres of Purdue University developed the laboratory exercises

that appear in the IRC. The following people contributed project assignments that appear in

the instructor’s supplement: Henning Schulzrinne (Columbia University); Cetin Kaya Koc

(Oregon State University); and David Balenson (Trusted Information Systems and George

Washington University). Kim McLaughlin developed the test bank.

Finally, I thank the many people responsible for the publication of this book, all of

whom did their usual excellent job. This includes the staff at Pearson, particularly my editor

Tracy Johnson, program manager Carole Snyder, and production manager Bob Engelhardt.

Thanks also to the marketing and sales staffs at Pearson, without whose efforts this book

would not be in front of you.

ACKNOWLEDGMENTS FOR THE GLOBAL EDITION

Pearson would like to thank and acknowledge Somitra Kumar Sanadhya (Indraprastha

Institute of Information Technology Delhi), and Somanath Tripathy (Indian Institute of

Technology Patna) for contributing to the Global Edition, and Anwitaman Datta (Nanyang

Technological University Singapore), Atul Kahate (Pune University), Goutam Paul (Indian

Statistical Institute Kolkata), and Khyat Sharma for reviewing the Global Edition.

ABOUT THE AUTHOR

Dr. William Stallings has authored 18 titles, and counting revised editions, over 40 books

on computer security, computer networking, and computer architecture. His writings have

appeared in numerous publications, including the Proceedings of the IEEE, ACM Computing

Reviews, and Cryptologia.

He has 13 times received the award for the best Computer Science textbook of the

year from the Text and Academic Authors Association.

In over 30 years in the field, he has been a technical contributor, technical manager,

and an executive with several high-technology firms. He has designed and implemented

both TCP/IP-based and OSI-based protocol suites on a variety of computers and operating

systems, ranging from microcomputers to mainframes. As a consultant, he has advised gov-

ernment agencies, computer and software vendors, and major users on the design, selection,

and use of networking software and products.

He created and maintains the Computer Science Student Resource Site at

ComputerScienceStudent.com. This site provides documents and links on a variety of

subjects of general interest to computer science students (and professionals). He is a member

of the editorial board of Cryptologia, a scholarly journal devoted to all aspects of cryptology.

Dr. Stallings holds a PhD from MIT in computer science and a BS from Notre Dame

in electrical engineering.

剩余766页未读，继续阅读

RainStarX

粉丝: 46

加密与网络安全：第七版革新与全面解读

《Understanding Cryptography》 《深入浅出密码学-常用加密技术原理与应用》（英文原版）

密码学与网络安全双语课件

密码学与网络安全：原理、应用与最新发展

网络安全和OpenSSL

构建安全的无线传感网络（Secure Wireless Sensor Networks）-2016年Springer英文原版，0积分

安全认证cissp书籍，国外原版翻译

计算机科学外文原版图书目录：.pdf

iOS 6 实践指南：英文原版解析

IPv6核心协议实施详解：权威英文原著指南

PHP Web Services英文原版书籍内容概览

最新资源

《Understanding Cryptography》《深入浅出密码学-常用加密技术原理与应用》（英文原版）