Cybersecurity Technology and Governance

This book gives a complete introduction to cybersecurity and its many subdomains. It’s unique by covering both technical and governance aspects of cybersecurity and is 

easy to read with 150 full color figures. There are also exercises and study cases at the end of each chapter, with additional material on the book's website.

The numerous high-profile cyberattacks being reported in the press clearly show that cyberthreats cause serious business risks. For this reason, cybersecurity has become a critical concern for global politics, national security, organizations as well for individual citizens. While cybersecurity has traditionally been a technological discipline, the field has grown so large and complex that proper governance of cybersecurity is needed.

The primary audience for this book is advanced level students in computer science focusing on cybersecurity and cyber risk governance. The digital transformation of society also makes cybersecurity relevant in many other disciplines, hence this book is a useful resource for other disciplines, such as law, business management and political science. Additionally, this book is for anyone in the private or public sector, who wants to acquire or update their knowledge about cybersecurity both from a technological and governance perspective.

Chapter 1 Basic concepts of cybersecurity.- Chapter 2 Attack vectors and malware.- Chapter 3 System security.- Chapter 4 Cryptography.- Chapter 5 Key management and PKI.- Chapter 6 Network security.- Chapter 7 Wireless Security.- Chapter 8 User authentication.- Chapter 9 IAM – Identity and Access Management.- Chapter 10 Digital Privacy.- Chapter 11Secure by design.- Chapter 12 Physical Information Security.- Chapter 13 Security culture.- Chapter 14 Cybersecurity readiness, security testing and audit.- Chapter 15 AI and cybersecurity.- Chapter 16Cyber operations.- Chapter 17 Cyber organizational structures and regulation.- Chapter 18 Governance and information security management.- Chapter 19 Cybersecurity risk management.

Audun Jøsang is Professor in cybersecurity at the University of Oslo in Norway, and Adjunct Prof. at QUT in Australia. He has worked in the telecommunications industry for Alcatel Telecom in Belgium and Telenor in Norway. Prof. Jøsang has a master’s degree in information security from Royal Holloway College, University of London, and is also a telecommunications engineer. He holds a PhD from NTNU where he also worked as Associate Prof. He is a CISSP and CISM with broad expertise in cybersecurity.