| Description |
1 online resource (xiv, 238 pages) |
|
text file |
| Bibliography |
Includes bibliographical references (pages 213-228) and index. |
| Contents |
I. OBSERVING THE WORLD AND ASKING WHY. Spam, and Other Problems with Email --- Hostile Code --- Security Breaches --- Identity and the Theft of Identity --- Should We Just Start Over? --- The Need for a New School ---- II. THE SECURITY INDUSTRY. Where the Security Industry Comes From --- Orientations and Framing --- What Does the Security Industry Sell? --- How Security Is Sold ---- III. ON EVIDENCE. The Trouble with Surveys --- The Trade Press --- Vulnerabilities --- Instrumentation on the Internet --- Organizations and Companies with Data ---- IV. THE RISE OF THE SECURITY BREACH. How Do Companies Lose Data? --- Disclose Breaches --- Possible Criticisms of Breach Data --- Moving from Art to Science --- Get Involved ---- V. AMATEURS STUDY CRYPTOGRAPHY; PROFESSIONALS STUDY ECONOMICS. The Economics of Information Security --- Psychology --- Sociology ---- VI. SPENDING. Reasons to Spend on Security Today --- Non-Reasons to Spend on Security --- Emerging Reasons to Spend --- How Much Should a Business Spend on Security? --- The Psychology of Spending --- On What to Spend ---- VII. LIFE IN THE NEW SCHOOL. People Are People --- Breach Data Is Not Actuarial Data ---Powerful Externalities --- The Human Computer Interface and Risk Compensation --- The Use and Abuse of Language --- Skills Shortages, Organizational Structure, and Collaboration ---- VIII. A CALL TO ACTION. Join the New School --- Embrace the New School --- Make Money from the New School --- Final Words. |
| Access |
Use copy Restrictions unspecified star MiAaHDL |
| Summary |
Why is information security so dysfunctional? Are you wasting the money you spend on security? This book shows how to spend it more effectively. How can you make more effective security decisions? This book explains why professionals have taken to studying economics, not cryptography--and why you should, too. And why security breach notices are the best thing to ever happen to information security. It's about time someone asked the biggest, toughest questions about information security. Security experts Adam Shostack and Andrew Stewart don't just answer those questions--they offer honest, deeply troubling answers. They explain why these critical problems exist and how to solve them. Drawing on powerful lessons from economics and other disciplines, Shostack and Stewart offer a new way forward. In clear and engaging prose, they shed new light on the critical challenges that are faced by the security field. Whether you're a CIO, IT manager, or security specialist, this book will open your eyes to new ways of thinking about--and overcoming--your most pressing security challenges. The New School enables you to take control, while others struggle with non-stop crises. |
| Reproduction |
Electronic reproduction. [Place of publication not identified] : HathiTrust Digital Library, 2011. MiAaHDL |
| System Details |
Master and use copy. Digital master created according to Benchmark for Faithful Digital Reproductions of Monographs and Serials, Version 1. Digital Library Federation, December 2002. http://purl.oclc.org/DLF/benchrepro0212 MiAaHDL |
| Processing Action |
digitized 2011 HathiTrust Digital Library committed to preserve pda MiAaHDL |
| Subject |
Information technology -- Security measures.
|
|
Computer security.
|
|
Computer security equipment industry.
|
|
Business -- Data processing -- Security measures.
|
|
Technologie de l'information -- Sécurité -- Mesures. |
|
Sécurité informatique. |
|
Sécurité informatique -- Appareils et matériel -- Industrie. |
|
Gestion -- Informatique -- Sécurité -- Mesures. |
|
Information technology -- Security measures. |
|
Computer security. |
|
Computer security equipment industry. |
|
Business -- Data processing -- Security measures. |
|
Business -- Data processing -- Security measures. |
|
Computer security. |
|
Computer security equipment industry. |
|
Information technology -- Security measures. |
|
Systèmes informatiques -- Mesures de sûreté. |
|
Protection de l'information (informatique) |
|
Entreprises -- Systèmes d'information. |
|
Réseaux locaux (informatique) -- Mesures de sûreté. |
| Added Author |
Stewart, Andrew, 1975-
|
| Other Form: |
Print version: Shostack, Adam. New school of information security. Upper Saddle River [N.J.] : Addison-Wesley, ©2008 0321502787 |
|
Print version: Shostack, Adam. New school of information security. Upper Saddle River [N.J.] : Addison-Wesley, ©2008 9780321502780 |
| ISBN |
9780321562753 |
|
0321562755 |
|
0321502787 (print) |
|
9780321502780 (print) |
|
(pbk.) |
|
(pbk.) |
| Standard No. |
9780321562753 |
|
More Resources