Wireless Security and Privacy: Best Practices and Design Techniques - Softcover

Swaminatha, Tara M.; Elden, Charles R.

Softcover

ISBN 10: 0201760347 ISBN 13: 9780201760347

Publisher: Addison-Wesley, 2002

Synopsis

Introduces a method for developing a security analysis process called I-ADD that involves four steps: identify targets and players, analyze attacks and vulnerabilities, define a strategy, and design security in from the start. The book also overviews the wireless application protocol, Bluetooth, types of wireless devices, cryptographic methods, virtual private networks, and tunneling. Annotation c. Book News, Inc., Portland, OR (booknews.com)

About this title

About the Author

Tara M. Swaminatha is an information security administrator for the International Finance Corporation, a part of the World Bank Group. Tara is responsible for educating the IFC about information security, conducting technical product evaluations, offering security classes to employees, and assisting with the definition and implementation of plans for security best practices and technologies. Previously Tara was a software security consultant with Cigital's Software Security Group (SSG). The SSG provides software security risk analysis for a broad range of clients. Tara also worked for PEC Solutions on a team that developed software and infrastructure for agencies within the U.S. Department of Justice. She implemented configuration control practices, maintained integrity of the development and production environments, and performed software, hardware, and multi-system integration. Tara holds both a B.A. in sociology and an M.T. in special education from the University of Virginia, where she graduated with high distinction. While working at the IFC, Tara is also pursuing her J.D. at Georgetown University.

Charles R. Elden is an independent security consultant. He worked most recently at Cigital, where he was a manager and software security consultant with Cigital's Software Security Group. He has experience performing communication and software systems risk analysis and risk management. Previously he worked for the Central Intelligence Agency for 12 years and has worked for more than 11 years in the Directorate of Science and Technology's Office of Technical Services. Charles has extensive experience designing, developing, deploying, and exploiting secure and covert computing and communication systems. He received his M.S. in computer science from George Mason University and his B.S. in computer science/computer engineering from Michigan State University.

0201760347AB08232002

From the Back Cover

"The trick to sound security is to begin early, know your threats,... design for security, and subject your design to thorough objective risk analyses and testing. This book will help."

—From the Foreword by Gary McGraw, CTO of Cigital, and coauthor of Building Secure Software

As wireless technology emerges into the mainstream of the networking and communications markets, the wireless development community has a unique opportunity to be proactive, rather than reactive, in its approach to security. At this early point in the wireless industry, developers can anticipate future security needs and integrate security considerations into every stage of the development process. Wireless Security and Privacy shows developers how to take advantage of this exceptional opportunity.

Written for wireless development professionals new to security, and for security professionals moving into the wireless arena, this book presents the foundation upon which to design and develop secure wireless systems. It looks in depth at the key issues faced by those who develop wireless devices and applications, describes the technology and tools that are now available, and offers a proven methodology for designing a comprehensive wireless risk management solution.

In particular, Wireless Security and Privacy documents the I-ADD process, which offers a standardized, systematic approach for identifying targets, analyzing vulnerabilities, defining strategies, and designing security into the entire development lifecycle of a wireless system.

The book also examines such important topics as:

• Fundamental wireless and security principles
• Specific wireless technologies, including 802.11b, Bluetooth, and WAP
• The security implications of the architecture of PDAs, cell phones, and wireless network cards for laptops
• The security shortcomings of wireless development languages
• Development of a risk model for a wireless system
• Cryptography essentials
• Privacy policy and legal issues
• The role of COTS products in a comprehensive security solution
• Analysis of known and theoretical attacks
• Security, financial, and functionality tradeoffs

Several case studies run throughout the book, illustrating the application of important concepts, techniques, strategies, and models.

In all, this practical guide book builds a framework for understanding the present and future of wireless security and offers the specific security strategies and methodologies that are critical for success in this fast-moving market.

0201760347B08072002

Edition details

• Publisher: Addison-Wesley
• Publication date: 2002
• Language: English
• ISBN 10: 0201760347
• ISBN 13: 9780201760347
• Binding: Paperback
• Number of pages: 304