Information Security and CCP Scheme (3rd Edition)

Information security reaches well beyond passwords and antivirus software. This third edition maps the subject across the systems, networks, communications, and legal questions that shape how information is protected. Its broad, chapter-based approach gives readers a way to connect foundational security ideas with the technologies and risks they encounter online.

The coverage begins with core information-security concepts and system development, then proceeds through cryptography, network defense, email privacy, and web application security. A later section turns to cybercrime, ethics, privacy, and intellectual property—reminding readers that security is not only a technical concern.

Start with the foundations

The opening chapter introduces information security, the characteristics of protected information, the components of information systems, and the balance between security and access. It also examines how security considerations fit into system development and the responsibilities held by organizations and information-security teams.

Cryptography, explained through its applications

A dedicated chapter explores public-key cryptography, including RSA, encryption and decryption, digital signatures, digital certificates, and public-key infrastructure. Alongside its applications, it considers algorithm requirements, benefits, drawbacks, and attacks on cryptosystems.

Networks, email, and the web

Network security topics include DNS, TLS/SSL, TCP/IP risks, security protocols, intrusion detection and prevention, and several types of firewalls. Separate chapters consider email privacy and secure email, followed by web security issues such as authentication, authorization, OAuth, SQL injection, cross-site scripting, and cross-site request forgery.

Security has legal and ethical dimensions

The listed coverage also addresses cybercrime, computer ethics, privacy, cyber-terrorism, information warfare, and intellectual-property rights. These topics widen the discussion from how systems are secured to the responsibilities and consequences surrounding their use.

For students and security-minded readers

With its mix of foundational ideas and recognizable security technologies, this edition is suited to readers looking for a structured introduction to information assurance. It can also serve as a reference point for revisiting specific areas—from public-key infrastructure to web application threats—as questions arise.