Autorentext

Professor Steven Furnell is the head of the Centre for Information Security & Network Research at the University of Plymouth. He has been active in security-related research since 1992, and his interests include computer crime, user authentication and security usability. He is the Editor-in-Chief of the journal Information Management & Computer Security, a Fellow and Branch Chair of the British Computer Society (BCS), and a Senior Member of the Institute of Electrical and Electronic Engineers (IEEE). || Dr Paul Dowland has first-hand, practical experience of administering and securing e-mail services in his role supporting the Centre for Security, Communications and Network Research at the University of Plymouth, as well as teaching both network- and application-level security principles and practice at undergraduate and postgraduate levels. He has also authored/edited more than 70 publications including 34peer-reviewed papersin journals and international conferences.

Klappentext

Make your organisation's email secure Your business relies on e-mail for its everyday dealings with partners, suppliers and customers. While e-mail is an invaluable form of communication, it also represents a potential threat to your information security. E-mail could become the means for criminals to install a virus or malicious software on your computer system and fraudsters will try to use e-mails to obtain sensitive information through phishing scams. Safeguard email security If you want to safeguard your company's ability to function, it is essential to have an effective e-mail security policy in place, and to ensure your staff understand the risks associated with e-mail. Email security best practice This pocket guide will help businesses to address the most important issues. Its comprehensive approach covers both the technical and the managerial aspects of the subject, offering valuable insights for IT professionals, managers and executives, as well as for individual users of e-mail. Overcome email security threats The pocket guide covers the various types of threat to which e-mail may expose your organisation, and offers advice on how to counter social engineering by raising staff awareness. Choose the most secure email client The client is the computer programme that manages the user's e-mail. Malicious e-mails often operate through attachment files that infect computer systems with malware when downloaded. This pocket guide explains how you can enhance your information security by configuring the e-mail client to block attachments or to limit their size. Protect your company's information What kind of information should you include in an e-mail? How do you know that the e-mail will not be intercepted by a third party after you have sent it? This guide looks at countermeasures you can take to ensure that your e-mails only reach the intended recipient, and how to preserve confidentiality through the use of encryption. Protect your company's reputation Crude jokes, obscene language or sexist remarks will have an adverse effect on your organisation's reputation when they are found in e-mails sent out by your employees from their work account. This pocket guide offers advice on how to create an acceptable use policy to ensure that employee use of e-mail in the workplace does not end up embarrassing your organisation. The pocket guide provides a concise reference to the main security issues affecting those that deploy and use e-mail to support their organisations, considering e-mail in terms of its significance in a business context, and focusing upon why effective security policy and safeguards are crucial in ensuring the viability of business operations. About the authors: Professor Steven Furnell is Professor of Information Systems Security and Head of School at the University of Plymouth's Centre for Security, Communications and Network Research. He is the author of Mobile Security: A Pocket Guide (2009), also published by IT Governance. Dr Paul Dowland is Senior Lecturer in Information Systems Security at the University of Plymouth's Centre for Security, Communications and Network Research. He is the author or editor of over 70 research publications.

Inhalt

Glossary of Abbreviations Chapter 1: Email: Can we live without it? Dependency without a guarantee The implications of dependence Takeaways Chapter 2: Email threats and attacks Mass-mailed malware Spams and scams There's something Phishy going on Takeaways Chapter 3: Securing the client General guidelines Web based clients Takeaways Chapter 4: Safety in transit Protocols Countermeasures Takeaways Chapter 5: Server side security Firewall Authenticated access Connection filtering Address filtering Content filtering Challenge/response Email gateway Relaying UBE by attachment Takeaways Chapter 6: Email archiving Archiving because we want to Archiving because we have to Takeaways Chapter 7: Ethereal email Takeaways Chapter 8: Risking our reputation? Going down in history Just having a laugh? Putting it in a policy Takeaways Appendix: additional notes Domain Name System (DNS) Architectures ITG Resources