The new school of information security

Why is information security so dysfunctional? Are you wasting the money you spend on security? This book shows how to spend it more effectively. How can you make more effective security decisions? This book explains why professionals have taken to studying economics, not cryptography--and why you sh...

Full description

Bibliographic Details
Main Author: Shostack, Adam
Other Authors: Stewart, Andrew
Format: eBook
Language:English
Published: Upper Saddle River [N.J.] Addison-Wesley 2008
Subjects:
Online Access:
Collection: O'Reilly - Collection details see MPG.ReNa
Table of Contents:
  • Includes bibliographical references (pages 213-228) and index
  • I. OBSERVING THE WORLD AND ASKING WHY. Spam, and Other Problems with Email
  • - Hostile Code
  • - Security Breaches
  • - Identity and the Theft of Identity
  • - Should We Just Start Over?
  • - The Need for a New School
  • II. THE SECURITY INDUSTRY. Where the Security Industry Comes From
  • - Orientations and Framing
  • - What Does the Security Industry Sell?
  • - How Security Is Sold
  • III. ON EVIDENCE. The Trouble with Surveys
  • - The Trade Press
  • - Vulnerabilities
  • - Instrumentation on the Internet
  • - Organizations and Companies with Data
  • IV. THE RISE OF THE SECURITY BREACH. How Do Companies Lose Data?
  • - Disclose Breaches
  • - Possible Criticisms of Breach Data
  • - Moving from Art to Science
  • - Get Involved
  • V. AMATEURS STUDY CRYPTOGRAPHY; PROFESSIONALS STUDY ECONOMICS. The Economics of Information Security
  • - Psychology
  • - Sociology
  • VI. SPENDING. Reasons to Spend on Security Today
  • - Non-Reasons to Spend on Security
  • - Emerging Reasons to Spend
  • - How Much Should a Business Spend on Security?
  • - The Psychology of Spending
  • - On What to Spend
  • VII. LIFE IN THE NEW SCHOOL. People Are People
  • - Breach Data Is Not Actuarial Data
  • -Powerful Externalities
  • - The Human Computer Interface and Risk Compensation
  • - The Use and Abuse of Language
  • - Skills Shortages, Organizational Structure, and Collaboration
  • VIII. A CALL TO ACTION. Join the New School
  • - Embrace the New School
  • - Make Money from the New School
  • - Final Words