
| 作者简介 Daniel V. Hoffman has designed mobile security solutions for the largest companies in the world. His hacking and security expertise has been featured in educational curriculum, conferences, and media outlets globally. He is the author of Blackjacking: Security Threats to Blackberry Devices, PDAs, and Cell Phones in the Enterprise, also from Wiley. |
| Acknowledgments. Introduction. Chapter 1 Understanding Terms and Technologies. Who Is the Trusted Computing Group? Is There a Cisco NAC Alliance Program? NAC-Certified Shipping Product. Developing NAC Solutions. Understanding Clientless and Client-Based NAC. Clientless NAC. Client-Based NAC. Pre-Admission NAC. Post-Admission NAC. Summary. Chapter 2 The Technical Components of NAC Solutions. Analyzing the Security Posture. What to Analyze? Does Your Company Have the“Strength”? Patch Analysis Best Practices. How the Analysis Takes Place. Utilizing APIs for Analysis. Monitoring Processes. Monitoring for Unwanted Processes and Applications. Setting Policy for Device Analysis. The Need for Different Analysis Policies. Communicating the Security Posture of the Device. Communicating with NAC/NAP-Specific Software Components. Communicating the Security Posture to Third-Party Applications. Communicating with Network Devices. Cisco Trust Agent. Understanding TCG IF-TNCCS and Microsoft IF-TNCCS-SOH. Taking Action Based on the Security Posture. Mobile NAC Action. LAN-Based NAC Actions. Remediating the Security Deficiency. Remediation Actions. The Reporting Mechanism. Knowing the Current State of Devices. Helping with Audits and Compliance Standards. Reports Help Find the Problem. Summary. Chapter 3 What Are You Trying to Protect? LAN-Based NAC. Sedentary Desktop. Laptops Used on and off the LAN. Mobile-Only Laptops. Employee-Owned Home Computers. Unknown Devices. PDAs and Other Devices. Mobile NAC. Dangers of Mobility. Sedentary Desktop. Laptops Used on and off the LAN. Mobile-Only Laptops. Employee-Owned Home Computers. Pros. Cons. Unknown Devices. PDAs and Other Devices. Summary. Chapter 4 Understanding the Need for LAN-Based NAC/NAP. The Security Reasons for LAN-Based NAC. Unintentional LAN-Based Threats. The Pros and Cons of a Guest Network. Pro. Con. The Pros and Cons of Assessing Each Device. Pro. Con. …… Chapter 5 Understanding the Need for Mobile NAC. Chapter 6 Understanding Cisco Clean Access. Chapter 7 Understanding Cisco Network Admission Control Framework. Chapter 8 Understanding Fiberlink Mobile NAC. Chapter 9 Understanding Microsoft NAP Solutions. Chapter 10 Understanding NAC and NAP in Other Products. Appendix A Case Studies and Additional Information. Index. |
商品评论(0条)