Book description
“It is about time that a book like The New Schoolcame along. The age of security as pure technology is long past, and modern practitioners need to understand the social and cognitive aspects of security if they are to be successful. Shostack and Stewart teach readers exactly what they need to know--I just wish I could have had it when I first started out.”
--David Mortman, CSO-in-Residence Echelon One, former CSO Siebel Systems
Why is information security so dysfunctional? Are you wasting the money you spend on security? This book shows how to spend it more effectively. How can you make more effective security decisions? This book explains why professionals have taken to studying economics, not cryptography--and why you should, too. And why security breach notices are the best thing to ever happen to information security. It’s about time someone asked the biggest, toughest questions about information security. Security experts Adam Shostack and Andrew Stewart don’t just answer those questions--they offer honest, deeply troubling answers. They explain why these critical problems exist and how to solve them. Drawing on powerful lessons from economics and other disciplines, Shostack and Stewart offer a new way forward. In clear and engaging prose, they shed new light on the critical challenges that are faced by the security field. Whether you’re a CIO, IT manager, or security specialist, this book will open your eyes to new ways of thinking about--and overcoming--your most pressing security challenges. The New School enables you to take control, while others struggle with non-stop crises.
Better evidence for better
decision-making
Why the security data you have doesn’t support effective
decision-making--and what to do about it
Beyond security “silos”:
getting the job done together
Why it’s so hard to improve security in isolation--and how
the entire industry can make it happen and evolve
Amateurs study cryptography;
professionals study economics
What IT security leaders can and must learn from other scientific
fields
A bigger bang for every buck
How to re-allocate your scarce resources where they’ll do the
most good
Table of contents
- Title Page
- Copyright Page
- Dedication
- Contents
- Preface
- About the Authors
- Chapter 1. Observing the World and Asking Why
- Chapter 2. The Security Industry
- Chapter 3. ON EVIDENCE
- Chapter 4. The Rise of the Security Breach
- Chapter 5. Amateurs Study Cryptography; Professionals Study Economics
- Chapter 6. Spending
- Chapter 7. Life in the New School
- Chapter 8. A Call to Action
- Endnotes
- Bibliography
- Index
Product information
- Title: The New School of Information Security
- Author(s):
- Release date: March 2008
- Publisher(s): Addison-Wesley Professional
- ISBN: 9780321562753
You might also like
book
The Cybersecurity Playbook
The real-world guide to defeating hackers and keeping your business secure Many books discuss the technical …
book
Rational Cybersecurity for Business: The Security Leaders' Guide to Business Alignment
Use the guidance in this comprehensive field guide to gain the support of your top executives …
book
A Leader's Guide to Cybersecurity
Cybersecurity threats are on the rise. As a leader, you need to be prepared to keep …
book
Information Security Management, 2nd Edition
Information Security Management, Second Edition arms students with answers to the most critical questions about the …