本书主要围绕着两条主线展开。第一条主线是以计算机密码学为根基而建立起来的各种安全协议和相应的工业化标准，第二条主线是为弥补通信协议缺陷和系统漏洞而发展出来的防火墙、抗恶意软件和入侵检测等技术。这两条主线相互交织，形成维护网络安全的防御体系，缺一不可。本书以此为指导思想，用较短的篇幅向读者深入浅出、系统地介绍计算机网络安全理论与实践的主要研究成果和发展动向，使读者在一个学期的学时之内既学到理论知识又学到实用的安全技术。

Computer Network Security Theory and Practice introduces to the reader a complete and concise view of network security. It provides in-depth theoretical coverage of recent advancements and practical solutions to network security threats. This book can be used for a one-semester network security course for graduate and upper-level undergraduate students, as well as a reference for IT professionals.

1 Network Security Overview

 1.1 Mission and Definitions

 1.2 Common Attacks and Defense Mechanisms

1.2.1 Eavesdropping

1.2.2 Cryptanalysis

1.2.3 Password Pilfering

1.2.4 Identity Spoofing

1.2.5 Buffer-Overflow Exploitations

1.2.6 Repudiation

1.2.7 Intrusion

1.2.8 Traffic Analysis

1.2.9 Denial of Service Attacks

1.2.10 Malicious Software

 1.3 Attacker Profiles

1.3.1 Hackers

1.3.2 Script Kiddies

1.3.3 Cyber Spies

1.3.4 Vicious Employees

1.3.5 Cyber Terrorists

1.3.6 Hypothetical Attackers

 1.4 Basic Security Model

 1.5 Security Resources

 1.6 Closing Remarks

 1.7 Exercises

2 Data Encryption Algorithms

3 Public-Key Cryptography and Key Management

4 Data Authentication

5 Network Security Protocols in Practice

6 Wireless Network Security

7 Network Perimeter Security

8 The Art of Anti Malicious Software

9 The Art of Intrusion Detection

References

Index