"It is about time that a book like The New School came along. The age of security as pure technology is long past, and modern practitioners need to understand the social and cognitive aspects of security if they are to be successful. Shostack and Stewart teach readers exactly what they need to know--I just wish I could have had it when I first started out."
--David Mortman, CSO-in-Residence Echelon One, former CSO Seibel Systems
Why is information security so dysfunctional? Are you wasting the money you spend on security? This book shows how to spend it more effectively. How can you make more effective security decisions? This book explains why professionals have taken to studying economics, not cryptography--and why you should, too. And why security breach notices are the best thing to ever happen to information security. It's about time someone asked the biggest, toughest questions about information security. Security experts Adam Shostack and Andrew Stewart don't just answer those questions--they offer honest, deeply troubling answers. They explain why these critical problems exist and how to solve them. Drawing on powerful lessons from economics and other disciplines, Shostack and Stewart offer a new way forward. In clear and engaging prose, they shed new light on the critical challenges that are faced by the security field. Whether you're a CIO, IT manager, or security specialist, this book will open your eyes to new ways of thinking about--and overcoming--your most pressing security challenges. The New School enables you to take control, while others struggle with non-stop crises.
Better evidence for better decision-making
Why the security data you have doesn't support effective decision-making--and what to do about it
Beyond security "silos": getting the job done together
Why it's so hard to improve security in isolation--and how the entire industry can make it happen and evolve
Amateurs study cryptography; professionals study economics
What IT security leaders can and must learn from other scientific fields
A bigger bang for every buck
How to re-allocate your scarce resources where they'll do the most good
If you like these books, you can buy them from their publisher.
Enjoy the reading with***Team Software & Learning***!
NFO:
Copyright
Preface
About the Authors
Chapter 1. Observing the World and Asking Why
Spam, and Other Problems with Email
Hostile Code
Security Breaches
Identity and the Theft of Identity
Should We Just Start Over?
The Need for a New School
Chapter 2. The Security Industry
Where the Security Industry Comes From
Orientations and Framing
What Does the Security Industry Sell?
How Security Is Sold
In Conclusion
Chapter 3. On Evidence
The Trouble with Surveys
The Trade Press
Vulnerabilities
Instrumentation on the Internet
Organizations and Companies with Data
In Conclusion
Chapter 4. The Rise of the Security Breach
How Do Companies Lose Data?
Disclose Breaches
Possible Criticisms of Breach Data
Moving from Art to Science
Get Involved
In Conclusion
Chapter 5. Amateurs Study Cryptography; Professionals Study Economics
The Economics of Information Security
Psychology
Sociology
In Conclusion
Chapter 6. Spending
Reasons to Spend on Security Today
Non-Reasons to Spend on Security
Emerging Reasons to Spend
How Much Should a Business Spend on Security?
The Psychology of Spending
On What to Spend
In Conclusion
Chapter 7. Life in the New School
People Are People
Breach Data Is Not Actuarial Data
Powerful Externalities
The Human Computer Interface and Risk Compensation
The Use and Abuse of Language
Skills Shortages, Organizational Structure, and Collaboration
In Conclusion
Chapter 8. A Call to Action
Join the New School
Embrace the New School
Make Money from the New School
Final Words
Endnotes
Chapter 1, "Observing the World and Asking Why"
Chapter 2, "The Security Industry"
Chapter 3, "On Evidence"
Chapter 4, "The Rise of the Security Breach"
Chapter 5, "Amateurs Study Cryptography; Professionals Study Economics"
Chapter 6, "Spending"
Chapter 7, "Life in the New School"
Chapter 8, "A Call to Action"
Bibliography
Index
Aff : torrents.to torrentz.com mininova.org thepiratebay.org arenabg.com zamunda.net isohunt.com torrentreactor.net torrentvalley.com
Powered by debian 4 , lighttpd 1.4 , php 5 , mysql 5 , btitracker 1.3 and hamsters 1.0
By using this site you agree to and accept our user agreement. If you havent read the user agreement please do so here
