Book Introduction_Information Security Reader 6th Edition IPA

You can understand the overview of information security with just this one book!
●Since the necessary content is compactly summarized, you can grasp the overall picture of information security just by reading it casually.
●By developing from actual examples → basics → for individuals → for organizations → technology → laws and systems → IPA activities, it is devised to be easy for beginners to understand. You can also learn by extracting only the necessary items.
●For content that is difficult to understand in text, such as technical mechanisms, it is explained with illustrations and diagrams.
●It can be used not only as teaching material in educational institutions but also for training new employees and managers in companies.
●The glossary at the end of the book is also useful when reading security-related materials.
●In the 6th edition, new content tailored to the current era, such as telework security and zero trust, has been added.

Table of Contents
Introduction
Chapter 1 Today's Security Risks
　1 Damage cases in information security
　　1 Example 1: Targeted websites
　　2 Example 2: Sophisticated phishing scams
　　3 Example 3: Increasing damage from business email fraud
　　4 Example 4: Damage from ransomware
　　5 Example 5: The Internet used for crime
　　6 Example 6: Attacks on telework environments
　2 Awareness of danger and countermeasures
　　1 Dangers lurking on the Internet
　　2 Dangers lurking in email
　　3 Dangers lurking in daily work
　　4 How to deal with danger
　　Column Hackers and Crackers
　Chapter 2 Basics of Information Security
　1 What is information security
　　1 Basic concepts of information security
　　2 Information assets, risks, and incidents
　2 External risk factors
　　1 Malware
　　2 External intrusion (unauthorized access)
　　3 Attacks on servers (denial of service)
　3 Internal risk factors
　　1 Vulnerabilities in information systems
　　2 Vulnerabilities inherent in organizations
　　Column Vulnerabilities in web application frameworks
　4 Information literacy and information ethics
　Chapter 3 Invisible Threats and Countermeasures
　 ―Security measures at the individual level―
　1 Malware―Progressing toward invisibility
　　1 What is malware?
　　2 What happens when you get infected with malware?
　 Column Ransomware
　 Column Damage from unauthorized remittances in Internet banking
　　3 Causes of malware infection
　 Column Various types of malware
　2 Common countermeasures
　　1 Eliminating vulnerabilities
　　2 Installation and updating of antivirus software
　　3 Utilization of personal firewalls
　　4 Security settings for web browsers
　　5 Dangers of web surfing and countermeasures
　　6 Caution regarding handling of suspicious attachments and spam
　　7 Other points of caution
　　8 For when the time comes
　3 Countermeasures against targeted attacks and induced attacks
　　1 Targeted attacks and their countermeasures
　　2 Induced attacks and their countermeasures
　4 Countermeasures against phishing scams
　　1 What is a phishing scam?
　　2 Countermeasures against phishing scams
　　3 Increasingly sophisticated phishing scams
　5 Countermeasures against one-click billing
　　1 What is one-click billing?
　　2 Countermeasures against one-click billing
　　3 Unauthorized billing by spyware
　6 Smartphone threats and countermeasures
　　1 Dangers of smartphones
　　2 Smartphone security measures
　7 Threats lurking in wireless LANs and their countermeasures
　　1 Dangers of wireless LANs
　　2 Security measures when using wireless LAN at home
　　3 Security measures when using public wireless LAN
　　4 Is wireless LAN setup difficult?―Automatic setup with WPS
　　Column Diversifying "deception" techniques
　Chapter 4 Information Security Measures as a Member of an Organization
　1 Organizational security measures
　　1 Plan―Establishment of systems and formulation of policies
　　2 Do―Introduction and operation
　　3 Check―Monitoring and evaluation
　　4 Act―Review and improvement
　2 Mindset as an employee
　Column Information security measure benchmark
　3 Information leakage to be careful about
　Column Beware of social engineering
　4 Telework security
　5 Endless process
　Chapter 5 Security technologies I want to know more about
　1 Accounts, IDs, passwords
　　1 Importance of passwords
　　2 Password cracking
　　3 Countermeasures to protect passwords
　　4 Various authentication methods
　2 Attack methods
　　1 Preliminary investigation
　　2 Privilege acquisition
　　3 Unauthorized execution
　　4 Post-processing
　3 Attacks exploiting vulnerabilities
　　1 Ports and vulnerabilities
　　2 Attacks exploiting vulnerabilities
　4 Firewalls
　　1 What is a firewall?
　　2 Packet filtering, application gateway, private address
　　3 Network Address Translation (NAT)
　　4 DMZ (DeMilitarized Zone)
　　5 Pitfalls of firewalls
　　6 Personal firewall
　　Column Zero trust security
　5 Encryption and digital signatures
　　1 What is encryption technology?
　　2 What is a digital signature?
　　3 What is a certificate authority?
　　Column Hash functions and digital signatures
　　4 Encryption technology used in everyday life
　　Column Security risks in the IT supply chain
　Chapter 6 Information Security-Related Laws and Systems
　1 International standards for information security
　　1 International standard 27000 series for information security management
　　2 International standard ISO/IEC 15408 for evaluation and certification of security products
　2 Laws related to information security
　　1 Penal Code
　　2 Act on Prohibition of Unauthorized Computer Access (Unauthorized Computer Access Prohibition Act)
　　3 Act on Electronic Signatures and Certification Services (Electronic Signature Act)
　　4 Act on the Protection of Personal Information (Personal Information Protection Act)
　　5 Basic Act on Cybersecurity
　3 Laws protecting intellectual property
　　1 Copyright Act
　　2 Unfair Competition Prevention Act
　4 Laws related to spam
　5 Information security-related systems
　　1 ISMS conformity assessment system
　　2 IT security evaluation and certification system
　　3 Cryptographic module testing and certification system
　　4 Privacy Mark system
　　5 Information security audit system
　　6 Notification system for computer viruses and unauthorized access
　　7 Notification system for vulnerability-related information
　　8 Information security service examination and registration system
　　9 Security evaluation system for government information systems
　Chapter 7 Activities of the IPA Security Center
　Material 1 Collection of information security-related URLs
　Material 2 Glossary
　Index