The Internet was built without much in the way of security features and we have been dealing with the effects of those design decisions ever since. Fortunately there is a well-established set of principles that can be applied to improve network security; the principle of least-privilege and defense in depth are two prominent examples. Security is a systems problem: a large collection of moving parts such as key management, encryption, integrity protection, and authentication need to be addressed in a coordinated way to provide secure communication. This book draws on real-world examples ranging from Transport Layer Security (TLS) to the security of the Internet's core infrastructure to explain how secure networks are built and how end-systems connected to the Internet can be protected.
Features:
"This book fills a vital niche: it comprehensively initiates the reader into a systems approach to reasoning about network security, in all its depth and nuance." - Brad Karp, University College London