Share
Create bookmark
Beautiful Security
Leading Security Experts Explain How They Think
Notes
Please login to add notes
- Table of Contents
- + Preface
-
+
Chapter 1. Psychological Security Traps
-
+
Chapter 2. Wireless Networking: Fertile Ground for
Social Engineering
-
+
Chapter 3. Beautiful Security Metrics
-
+
Chapter 4. The Underground Economy of Security
Breaches
-
+
Chapter 5. Beautiful Trade: Rethinking E-Commerce
Security
- + Deconstructing Commerce
-
+
Weak Amelioration Attempts
-
+
E-Commerce Redone: A New Security Model
- Requirement 1: The Consumer Must Be Authenticated
- Requirement 2: The Merchant Must Be Authenticated
- Requirement 3: The Transaction Must Be Authorized
- Requirement 4: Authentication Data Should Not Be Shared Outside of Authenticator and Authenticated
- Requirement 5: The Process Must Not Rely Solely on Shared Secrets
- Requirement 6: Authentication Should Be Portable (Not Tied to Hardware or Protocols)
- Requirement 7: The Confidentiality and Integrity of Data and Transactions Must Be Maintained
- The New Model
-
+
Chapter 6. Securing Online Advertising: Rustlers and Sheriffs in the New Wild
West
- + Chapter 7. The Evolution of PGP’s Web of Trust
- + Chapter 8. Open Source Honeyclient: Proactive Detection of Client-Side Exploits
-
+
Chapter 9. Tomorrow’s Security Cogs and Levers
- + Cloud Computing and Web Services: The Single Machine Is Here
- + Connecting People, Process, and Technology: The Potential for Business Process Management
- + Social Networking: When People Start Communicating, Big Things Change
- Information Security Economics: Supercrunching and the New Rules of the Grid
- + Platforms of the Long-Tail Variety: Why the Future Will Be Different for Us All
- Conclusion
- Acknowledgments
- + Chapter 10. Security by Design
- + Chapter 11. Forcing Firms to Focus: Is Secure Software in Your Future?
-
+
Chapter 12. Oh No, Here Come the Infosecurity
Lawyers!
-
+
Chapter 13. Beautiful Log Handling
- + Chapter 14. Incident Detection: Finding the Other 68%
- + Chapter 15. Doing Real Work Without Real Data
-
+
Chapter 16. Casting Spells: PC Security Theater
- Contributors
- Index
Although most people don't give security much attention until their personal or business systems are attacked, this thought-provoking anthology demonstrates that digital security is not only worth thinking about, it's also a fascinating topic. Criminals succeed by exercising enormous creativity, and those defending against them must do the same.
Beautiful Security explores this challenging subject with insightful essays and analysis on topics that include:
The underground economy for personal information: how it works, the relationships among criminals, and some of the new ways they pounce on their prey
How social networking, cloud computing, and other popular trends help or hurt our online security
How metrics, requirements gathering, design, and law can take security to a higher level
The real, little-publicized history of PGP
This book includes contributions from:
Peiter "Mudge" Zatko
Jim Stickley
Elizabeth Nichols
Chenxi Wang
Ed Bellis
Ben Edelman
Phil Zimmermann and Jon Callas
Kathy Wang
Mark Curphey
John McManus
James Routh
Randy V. Sabett
Anton Chuvakin
Grant Geyer and Brian Dunphy
Peter Wayner
Michael Wood and Fernando Francisco
All royalties will be donated to the Internet Engineering Task Force (IETF).
Test the closed alpha on paperc.com
Book Details
Authors
Andy Oram and John Viega
Categories
Computers > Security > General
Publishers
Publication year : 2009
License: All rights reserved ©
Times read: 1,093
