,

Beautiful Security

Leading Security Experts Explain how they Think

Specificaties
Paperback, 281 blz. | Engels
O'Reilly | 1e druk, 2009
ISBN13: 9780596527488
Rubricering
Hoofdrubriek : Computer en informatica
O'Reilly 1e druk, 2009 9780596527488
Gratis verzonden | Verwachte levertijd ongeveer 16 werkdagen

Samenvatting

In this thought-provoking anthology, today's security experts describe bold and extraordinary methods used to secure computer systems in the face of ever-increasing threats. Beautiful Security features a collection of essays and insightful analyses by leaders such as Ben Edelman, Grant Geyer, John McManus, and a dozen others who have found unusual solutions for writing secure code, designing secure applications, addressing modern challenges such as wireless security and Internet vulnerabilities, and much more.

Among the book's wide-ranging topics, you'll learn how new and more aggressive security measures work - and where they will lead us.

Topics include:
- Rewiring the expectations and assumptions of organizations regarding security
- Security as a design requirement
- Evolution and new projects in Web of Trust
- Legal sanctions to enforce security precautions
- An encryption/hash system for protecting user data
- The criminal economy for stolen information
- Detecting attacks through context

Go beyond the headlines, hype, and hearsay. With Beautiful Security, you'll delve into the techniques, technology, ethics, and laws at the center of the biggest revolution in the history of network security. It's a useful and far-reaching discussion you can't afford to miss.

Specificaties

ISBN13:9780596527488
Taal:Engels
Bindwijze:paperback
Aantal pagina's:281
Uitgever:O'Reilly
Druk:1

Over John Viega

John Viega is CTO of the SaaS Business Unit at McAfee, his second stint at McAfee. Previously, he was their Chief Security Architect, after which he founded and served as CEO of Stonewall Software, which focused on making anti-virus technology faster, better and cheaper. John was also the founder of Secure Software (now part of Fortify). John is author of many security books, including Building Secure Software (Addison-Wesley), Network Security with OpenSSL (O'Reilly), and the forthcoming Myths of Security (O'Reilly). He is responsible for numerous software security tools and is the original author of Mailman, the GNU mailing list manager. He has done extensive standards work in the IEEE and IETF and co-invented GCM, a cryptographic algorithm that NIST has standardized. John is also an active advisor to several security companies, including Fortify and Bit9. He holds a MS and BA from the University of Virginia.

Andere boeken door John Viega

Inhoudsopgave

Preface
Why Security Is Beautiful
Audience for This Book
Donation
Organization of the Material
Conventions Used in This Book
Using Code Examples
Safari Books Online
How to Contact Us

1. Psychological Security Traps
-Learned Helplessness and Naïveté
-Confirmation Traps
-Functional Fixation
-Summary

2. Wireless Networking: Fertile Ground for Social Engineering
-Easy Money
-Wireless Gone Wild
-Still, Wireless Is the Future


3. Beautiful Security Metrics
-Security Metrics by Analogy: Health
-Security Metrics by Example
-Summary

4. The Underground Economy of Security Breaches
-The Makeup and Infrastructure of the Cyber Underground
-The Payoff
-How Can We Combat This Growing Underground Economy?
-Summary

5. Beautiful Trade: Rethinking E-Commerce Security
-Deconstructing Commerce
-Weak Amelioration Attempts
-E-Commerce Redone: A New Security Model
-The New Model

6. Securing Online Advertising: Rustlers and Sheriffs in the New Wild -West
-Attacks on Users
-Advertisers As Victims
-Creating Accountability in Online Advertising

7. The Evolution of PGP's Web of Trust
-PGP and OpenPGP
-Trust, Validity, and Authority
-PGP and Crypto History
-Enhancements to the Original Web of Trust Model
-Interesting Areas for Further Research
-References

8. Open Source Honeyclient: Proactive Detection of Client-Side Exploits
-Enter Honeyclients
-Introducing the World's First Open Source Honeyclient
-Second-Generation Honeyclients
-Honeyclient Operational Results
-Analysis of Exploits
-Limitations of the Current Honeyclient Implementation
-Related Work
-The Future of Honeyclients

9. Tomorrow's Security Cogs and Levers
-Cloud Computing and Web Services: The Single Machine Is Here
-Connecting People, Process, and Technology: The Potential for Business Process Management
-Social Networking: When People Start Communicating, Big Things Change
-Information Security Economics: Supercrunching and the New Rules of the Grid
-Platforms of the Long-Tail Variety: Why the Future Will Be Different for Us All
-Conclusion
-Acknowledgments

10. Security by Design
-Metrics with No Meaning
-Time to Market or Time to Quality?
-How a Disciplined System Development Lifecycle Can Help
-Conclusion: Beautiful Security Is an Attribute of Beautiful Systems

11. Forcing Firms to Focus: Is Secure Software in Your Future?
-Implicit Requirements Can Still Be Powerful
-How One Firm Came to Demand Secure Software
-Enforcing Security in Off-the-Shelf Software
-Analysis: How to Make the World's Software More Secure

12. Oh No, Here Come the Infosecurity Lawyers!
-Culture
-Balance
-Communication
-Doing the Right Thing

13. Beautiful Log Handling
-Logs in Security Laws and Standards
-Focus on Logs
-When Logs Are Invaluable
-Challenges with Logs
-Case Study: Behind a Trashed Server
-Future Logging
-Conclusions

14. Incident Detection: Finding the Other 68%
-A Common Starting Point
-Improving Detection with Context
-Improving Perspective with Host Logging
-Summary

15. Doing Real Work Without Real Data
-How Data Translucency Works
-A Real-Life Example
-Personal Data Stored As a Convenience
-Trade-offs
-Going Deeper
-References

16. Casting Spells: PC Security Theater
-Growing Attacks, Defenses in Retreat
-The Illusion Revealed
-Better Practices for Desktop Security
-Conclusion

Net verschenen

Rubrieken

Populaire producten

    Personen

      Trefwoorden

        Beautiful Security