The Cybersecurity Body of Knowledge explains the content, purpose, and use of eight knowledge areas that define the boundaries of the discipline of cybersecurity. The discussion focuses on, and is driven by, the essential concepts of each knowledge area that collectively capture the cybersecurity body of knowledge to provide a complete picture of the field.
This book is based on a brand-new and up to this point unique, global initiative, known as CSEC2017, which was created and endorsed by ACM, IEEE-CS, AIS SIGSEC, and IFIP WG 11.8. This has practical relevance to every educator in the discipline of cybersecurity. Because the specifics of this body of knowledge cannot be imparted in a single text, the authors provide the necessary comprehensive overview. In essence, this is the entry-level survey of the comprehensive field of cybersecurity. It will serve as the roadmap for individuals to later drill down into a specific area of interest.
This presentation is also explicitly designed to aid faculty members, administrators, CISOs, policy makers, and stakeholders involved with cybersecurity workforce development initiatives. The book is oriented toward practical application of a computing-based foundation, crosscutting concepts, and essential knowledge and skills of the cybersecurity discipline to meet workforce demands.
Dan Shoemaker, PhD, is full professor, senior research scientist, and program director at the University of Detroit Mercy's Center for Cyber Security and Intelligence Studies. Dan is a former chair of the Cybersecurity & Information Systems Department and has authored numerous books and journal articles focused on cybersecurity.
Anne Kohnke, PhD, is an associate professor of cybersecurity and the principle investigator of the Center for Academic Excellence in Cyber Defence at the University of Detroit Mercy. Anne's research is focused in cybersecurity, risk management, threat modeling, and mitigating attack vectors.
Ken Sigler, MS, is a faculty member of the Computer Information Systems (CIS) program at the Auburn Hills campus of Oakland Community College in Michigan. Ken's research is in the areas of software management, software assurance, and cybersecurity.
Autorentext
Dan Shoemaker, PhD, is full professor, senior research scientist, and Program Director at the University of Detroit Mercy's Center for Cyber Security and Intelligence Studies. Dan is a former chair of the Cybersecurity & Information Systems Department and has authored numerous books and journal articles focused on cybersecurity.
Anne Kohnke, PhD, is an associate professor of cybersecurity and the principle investigator of the Center for Academic Excellence in Cyber Defence at the University of Detroit Mercy . Anne's research is focused in cybersecurity, risk management, threat modeling, and mitigating attack vectors.
Ken Sigler is a faculty member of the Computer Information Systems (CIS) program at the Auburn Hills campus of Oakland Community College in Michigan. Ken's research is in the areas of software management, software assurance, and cybersecurity.
Klappentext
The Cybersecurity Body of Knowledge explains the content, purpose, and use of eight knowledge areas that define the boundaries of the discipline of cybersecurity. The discussion focuses on, and is driven by, the essential concepts of each knowledge area that collectively capture the cybersecurity body of knowledge to provide a complete picture of the field.
This book is based on a brand-new and up to this point unique, global initiative, known as CSEC2017, which was created and endorsed by ACM, IEEE-CS, AIS SIGSEC, and IFIP WG 11.8. This has practical relevance to every educator in the discipline of cybersecurity. Because the specifics of this body of knowledge cannot be imparted in a single text, the authors provide the necessary comprehensive overview. In essence, this is the entry-level survey of the comprehensive field of cybersecurity. It will serve as the roadmap for individuals to later drill down into a specific area of interest.
This presentation is also explicitly designed to aid faculty members, administrators, CISOs, policy makers, and stakeholders involved with cybersecurity workforce development initiatives. The book is oriented toward practical application of a computing-based foundation, crosscutting concepts, and essential knowledge and skills of the cybersecurity discipline to meet workforce demands.
Dan Shoemaker, PhD, is full professor, senior research scientist, and program director at the University of Detroit Mercy's Center for Cyber Security and Intelligence Studies. Dan is a former chair of the Cybersecurity & Information Systems Department and has authored numerous books and journal articles focused on cybersecurity.
Anne Kohnke, PhD, is an associate professor of cybersecurity and the principle investigator of the Center for Academic Excellence in Cyber Defence at the University of Detroit Mercy. Anne's research is focused in cybersecurity, risk management, threat modeling, and mitigating attack vectors.
Ken Sigler, MS, is a faculty member of the Computer Information Systems (CIS) program at the Auburn Hills campus of Oakland Community College in Michigan. Ken's research is in the areas of software management, software assurance, and cybersecurity.
Inhalt
Foreword 1
Foreword 2
Author Biographies
Introduction
Chapter 1 Securing Cyberspace Is Everybody's Business
Introduction: The Current Situation Is Out of Control
The Challenge: How Do You Protect Something that Doesn't Actually Exist?
We Must Re-evaluate Our Assumptions
The Adversary Changes Thing
The Three-Legged Stool
Learning to Play Better with Others
Creating a Holistic Solution
The Importance of Knowing What to Do
Enabling Common Understanding
Education Is the Key
The Body of Knowledge and Educational Strategy
Cybersecurity as an Academic Study
The Importance of Unified Recommendations about Areas of Vital Interest
Circumscribing the Field: Background and Intention of CC2005
Defining the Elements of the Discipline of Cybersecurity: CSEC2017
Knowledge Area One: Data Security
Knowledge Area Two: Software Security
Knowledge Area Three: Component Security
Knowledge Area Four: Connection Security
Knowledge Area Five: System Security
Knowledge Area Six: Human Security
Knowledge Area Seven: Organizational Security
Knowledge Area Eight: Societal Security
Real-World Utilization of the CSEC2017 Body of Knowledge
CSEC2017 Framework Areas of Application
Thirty Review Questions: Introduction to the CSEC Standard
You Might Also Like to Read
Chapter Summary
Keywords
References
Chapter 2 The Cybersecurity Body of Knowledge 39
Bodies of Knowledge Are Essential Tools in Educational Settings
Bodies of Knowledge
Making Cybersecurity Teaching Real
Validating Curricular Concepts
Applying the CSEC2017
The CSEC2017 Model
The CSEC2017 Organization
The CSEC2017 Implementation Process
Knowledge Area One: Data Security
Knowledge Area Two: Software Security
Knowledge Area Three: Component Security
Knowledge Area Four: Connection Security
Knowledge Area Five: System Security
Knowledge Area Six: Human Security
Knowledge Area Seven: Organizational Security
Knowledge Area Eight: Societal Security
Twenty Review Questions: The Cybersecurity Body of Knowledge
You Might Also Like to Read
Chapter S…