Schneier on Security | by Bruce Schneier | ISBN: 9780470395356. Information Security Books. The Architecture of Security. The Risks of Cyberterrorism. Identity-Theft Disclosure Laws. The Security of RFID Passports. Cybercrime and Cyberwar. Software Vulnerabilities

January 30, 2010 by kutenk
Filed under: Computer Books 

Schneier on Security

by Bruce Schneier
ISBN:9780470395356

Presenting invaluable advice from a computer security expert, this book features some of the most insightful and informative coverage of the strengths and weaknesses of computer security and the price people pay when security fails.

Get this Book by clicking below:

Get Book Now

Schneier on Security









Introduction
Chapter 1 – Terrorism and Security
What the Terrorists Want
Movie-Plot Threats
Fixing Intelligence Failures
Data Mining for Terrorists
The Architecture of Security
The War on the Unexpected
Portrait of the Modern Terrorist as an Idiot
Correspondent Inference Theory and Terrorism
The Risks of Cyberterrorism

Chapter 2 – National Security Policy
The Security Threat of Unchecked Presidential Power
Surveillance and Oversight
NSA and Bush’s Illegal Eavesdropping
Private Police Forces
Recognizing “Hinky” vs. Citizen Informants
Dual-Use Technologies and the Equities Issue
Identity-Theft Disclosure Laws
Academic Freedom and Security
Sensitive Security Information (SSI)
Fingerprinting Foreigners
U.S. Medical Privacy Law Gutted

Chapter 3 – Airline Travel
Airport Passenger Screening
No-Fly List
Trusted Traveler Program
Screening People with Clearances
Forge Your Own Boarding Pass

Chapter 4 – Privacy and Surveillance
Our Data, Ourselves
The Value of Privacy
The Future of Privacy
Privacy and Power
Security vs. Privacy
Is Big Brother a Big Deal?
How to Fight
Toward Universal Surveillance
Kafka and the Digital Person
CCTV Cameras
Anonymity and Accountability
Facebook and Data Control
The Death of Ephemeral Conversation
Automated Targeting System
Anonymity and the Netflix Dataset
Does Secrecy Help Protect Personal Information?
Risks of Data Reuse



Chapter 5 – ID Cards and Security
National ID Cards
REAL-ID: Costs and Benefits
RFID Passports
The Security of RFID Passports
Multi-Use ID Cards
Giving Driver’s Licenses to Illegal Immigrants

Chapter 6 – Election Security
Voting Technology and Security
Computerized and Electronic Voting
Why Election Technology is Hard
Electronic Voting Machines
Revoting
Hacking the Papal Election

Chapter 7 – Security and Disasters
First Responders
Accidents and Security Incidents
Security at the Olympics
Blaster and the August 14th Blackout
Avian Flu and Disaster Planning





Chapter 8 – Economics of Security
Economics and Information Security
Aligning Interest with Capability
National Security Consumers
Liability and Security
Liabilities and Software Vulnerabilities
Lock-In
Third Parties Controlling Information
Who Owns Your Computer?
A Security Market for Lemons
Websites, Passwords, and Consumers




Chapter 9 – Psychology of Security
The Feeling and Reality of Security
Behavioral Assessment Profiling
In Praise of Security Theater
CYA Security
Copycats
Rare Risk and Overreactions
Tactics, Targets, and Objectives
The Security Mindset

Chapter 10 – Business of Security
My Open Wireless Network
Debating Full Disclosure
Doping in Professional Sports
University Networks and Data Security
Do We Really Need a Security Industry?
Basketball Referees and Single Points of Failure
Chemical Plant Security and Externalities

Chapter 11 – Cybercrime and Cyberwar
Mitigating Identity Theft
LifeLock and Identity Theft
Phishing
Bot Networks
Cyber-Attack
Counterattack
Cyberwar
Militaries and Cyberwar
The Truth About Chinese Hackers

Chapter 12 – Computer and Information Security
Safe Personal Computing
How to Secure Your Computer, Disks, and Portable Drives
Crossing Borders with Laptops and PDAs
Choosing Secure Passwords
Authentication and Expiration
The Failure of Two-Factor Authentication
More on Two-Factor Authentication
Home Users: A Public Health Problem?
Security Products: Suites vs. Best-of-Breed
Separating Data Ownership and Device Ownership
Assurance
Combating Spam
Sony’s DRM Rootkit: The Real Story
The Storm Worm
The Ethics of Vulnerability Research
Is Penetration Testing Worth It?
Anonymity and the Tor Network
Kill Switches and Remote Control



A – References
What the Terrorists Want
Movie-Plot Threats
Fixing Intelligence Failures
Data Mining for Terrorists
The Architecture of Security
The War on the Unexpected
Portrait of the Modern Terrorist as an Idiot
Correspondent Inference Theory and Terrorism
The Security Threat of Unchecked Presidential Power
NSA and Bush’s Illegal Eavesdropping
Private Police Forces
Recognizing “Hinky” vs. Citizen Informants
Dual-Use Technologies and the Equities Issue
Identity-Theft Disclosure Laws
Academic Freedom and Security
Sensitive Security Information (SSI)
Fingerprinting Foreigners
U.S. Medical Privacy Law Gutted
Airport Passenger Screening
No-Fly List
Trusted Traveler Program
Screening People with Clearances
Forge Your Own Boarding Pass
Our Data, Ourselves
The Value of Privacy
The Future of Privacy
Privacy and Power
Security vs. Privacy
Is Big Brother a Big Deal?
How to Fight
Toward Universal Surveillance
Kafka and the Digital Person
CCTV Cameras
Anonymity and Accountability
Facebook and Data Control
The Death of Ephemeral Conversation
Automated Targeting System
Anonymity and the Netflix Dataset
Does Secrecy Help Protect Personal Information?
Risks of Data Reuse
National ID Cards
REAL-ID: Costs and Benefits
RFID Passports
The Security of RFID Passports
Multi-Use ID Cards
Giving Driver’s Licenses to Illegal Immigrants
Voting Technology and Security
Computerized and Electronic Voting
Why Election Technology is Hard
Electronic Voting Machines
Revoting
Hacking the Papal Election
First Responders
Security at the Olympics
Blaster and the August 14th Blackout
Avian Flu and Disaster Planning
Economics and Information Security
Aligning Interest with Capability
National Security Consumers
Liabilities and Software Vulnerabilities
Lock-In
Third Parties Controlling Information
Who Owns Your Computer?
A Security Market for Lemons
Websites, Passwords, and Consumers
The Feeling and Reality of Security
Behavioral Assessment Profiling
In Praise of Security Theater
CYA Security
Copycats
Rare Risk and Overreactions
Tactics, Targets, and Objectives
The Security Mindset
My Open Wireless Network
Debating Full Disclosure
Doping in Professional Sports
Do We Really Need a Security Industry?
Basketball Referees and Single Points of Failure
Chemical Plant Security and Externalities
Mitigating Identity Theft
LifeLock and Identity Theft
Phishing
Bot Networks
Cyber-Attack
Counterattack
Cyberwar
Militaries and Cyberwar
The Truth About Chinese Hackers
Safe Personal Computing
How to Secure Your Computer, Disks, and Portable Drives
Crossing Borders with Laptops and PDAs
Choosing Secure Passwords
Secrecy, Security, and Obscurity
More on Two-Factor Authentication
Home Users: A Public Health Problem?
Security Products: Suites vs. Best-of-Breed
Separating Data Ownership and Device Ownership
Assurance
Sony’s DRM Rootkit: The Real Story
The Storm Worm
The Ethics of Vulnerability Research
Is Penetration Testing Worth It?
Anonymity and the Tor Network
Kill Switches and Remote Control



For 1000+ more Computer Books & Computer Security Books, click below:

Computer Books
Business & Management Books
Science & Engineering Books

Related posts:

  1. CyberWar, CyberTerror, CyberCrime: A Guide to the Role of Standards in an Environment of Change and Danger | by Julie E. Mehan | ISBN: 9781905356478. Cybersecurity Assurance. cybersecurity Governance, Laws, and Ethics.
  2. Handbook of Research on Information Security and Assurance | by Jatinder N. D. Gupta and Sushil K. Sharma (eds) | 2009 | ISBN: 9781599048550. E-Commerce Security Risks and Countermeasures. Information Security Management Research. Effective Security Policies and Procedures.
  3. Cyber Security and Global Information Assurance: Threat Analysis and Response Solutions | by Kenneth J. Knapp (ed) | 2009 | ISBN: 9781605663265. Insider Threat Prevention, Detection and Mitigation. Information Security Management Standards. Approach to Managing Identity Fraud. Emergency Response Planning
  4. Security in RFID and Sensor Networks | by Yan Zhang and Paris Kitsos (eds) | 2009 | ISBN: 9781420068399. Multi-Tag RFID Systems. How to Attack RFID Systems. RFID Relay Attacks Implementation. Designing Secure Wireless Embedded Systems. Security Schemes Against Jamming in Wireless Sensor Networks
  5. RFID Books. RFID Design Principles | by Harvey Lehpamer | 2008 | ISBN: 9781596931947. Microwave Library. Radio Frequency Identification. Short-Range Communications Systems. RFID Security and Privacy
  6. Information Security Management Handbook, Sixth Edition, Volume 3 | by Harold F. Tipton and Micki Krause (eds) | 2009 | ISBN: 9781420090925. Identity Management Systems. Mobile Data Security. Web Application Firewalls. Botnets.
  7. Computer and Information Security Handbook | by John R. Vacca (ed) | 2009 | ISBN: 9780123743541. System and Network Security. TEN STEPS TO BUILDING A SECURE ORGANIZATION. Unix and Linux Security. Internet Security. Information Technology Security Management. Security Management Systems. Computer Forensics
  8. Computer Certifications Study Guide. ExamWise for CompTIA 2009 Security+ Certification Exams SY0-201 and BR0-001 | by David Failor | 2009 | ISBN: 9781590952139. Computing Infrastructure Security. Communication and Wireless Security. IT Vulnerabilities, Threats, and Attacks.
  9. The CSSLP Prep Guide: Mastering the Certified Secure Software Lifecycle Professional | by Ronald L. Krutz and Alexander J. Fry | 2009 | ISBN: 9780470461907. Software Engineering Books. Security Design Principles. Software Development Methodologies. Standards for Software Quality Assurance
  10. Securing Intellectual Property: Protecting Trade Secrets and Other Information Assets | by Information Security | 2009 | ISBN: 9780750679954. How to Sell Your Intellectual Property Protection Program. Top Ten Ways to Shut Down Hackers. Checklist for Reporting a Theft of Trade Secrets Offense.
  11. Computer Security Handbook, Fifth Edition | by Seymour Bosworth, M.E. Kabay and Eric Whyne (eds) | 2009 | ISBN: 9780471716525. Computer Books. IT EBooks. Information System Security Books.
  12. Scene of the Cybercrime, Second Edition | by Debra Littlejohn Shinder and Michael Cross | ISBN: 9781597492768. How to Combat Phreakers, Hackers, and Crackers. How to Collect and Preserve Digital Evidence. Computer Forensic Software and Hardware. Cybercrime Prevention Techniques.
  13. The Executive MBA in Information Security | by John J. Trinckes, Jr. | 2010 | ISBN: 9781439810071. Information Security Management. IT Audit and Compliance. Effective Information Security Program. Administrative Controls. Technical Controls. Application Controls. Perimeter Controls
  14. RFID and Sensor Networks: Architectures, Protocols, Security and Integrations | by Yan Zhang, Laurence T. Yang and Jiming Chen (eds) | 2010 | ISBN: 9781420077773. Low-Power Transponders for RFID. Integrated RFID and Sensor Networks for Smart Homes. Geographic Routing in Wireless Sensor Networks.
  15. RFID in Tracking & Monitoring: An In-depth Product & Service Analysis with Case Studies | Mind Commerce | 2009 | RFID Based Solution Implementations. RFID Based Vehicle Immobilization. RFID in Process Manufacturing. RFID Based Tracking in HealthCare. RFID in Marine Operation. RFID in Payment Transactions.
  16. Application Security in the ISO27001 Environment | by Vinod Vasudevan et al. | ISBN: 9781905356355. International Information Security Standards. Secure Application Development Lifecycle. Information Security Management System.
  17. Computer Crime, Investigation, and the Law | by Chuck Easttom and Jeff Taylor | 2011 | ISBN: 9781435455320. Computer Laws. Techniques and Resources for Computer Crime. How to Protect Your Identity on the Internet. Hacker Techniques.
  18. The Art of Enterprise Information Architecture: A Systems-Based Approach for Unlocking Business Insight | by Mario Godinez et al. | 2010 | ISBN: 9780137035717. Cloud Computing Architecture. Enterprise Information Integration. Enterprise Metadata Management.
  19. RFID in Tracking & Monitoring: An In-depth Product & Service Analysis with Case Studies | Mind Commerce | 2009 | RFID Based Solution Implementations. RFID Based Vehicle Immobilization. RFID in Process Manufacturing. RFID Based Tracking in HealthCare. RFID in Marine Operation. RFID in Payment Transactions
  20. Visual Identity: Promoting and Protecting the Public Face of an Organization | by Susan Westcott Alessandri | 2009 | ISBN: 9780765622662. The Logistics of Promoting a Visual Identity Change. Organizational Visual Identity Checklist. Copyright Law.
  21. RFID Technology and Applications | by Stephen B. Miles, Sanjay E. Sarma and John R. Williams (eds) | ISBN: 9780521880930. RFID Tag Performance Optimization. WiFi RFID Localization Technologies. Active RFID Systems.
  22. Protecting Games: A Security Handbook for Game Developers and Publishers | by Steven Davis | ISBN: 9781584506706. Game Distribution Piracy. Game Console Piracy. Game Code Vulnerabilities and Countermeasures. Game Scams. Cheating in High-Score Games. Fighting Pirate Networks
  23. Advances in Government Enterprise Architecture | by Pallab Saha (ed) | 2009 | ISBN: 9781605660684. E-GOVERNMENT PROGRAMME. Adaptive IT Architecture. Service-Oriented Reference Architecture for E-Government. Enterprise Information Architecture (EIA) Management. Knowledge Management Maturity.
  24. Single Point of Failure: The Ten Essential Laws of Supply Chain Risk Management | by Gary S. Lynch | 2009 | ISBN: 9780470424964. Supply Chain Insurance. Cargo and Warehouse Theft. Risk Intelligent Supply Chain. A Catalyst for Redefining Resiliency Management
  25. Fair Value Accounting Fraud: New Global Risks and Detection Techniques | by Gerard M. Zack | 2009 | ISBN: 9780470478585. Financial Reporting Fraud. Fair Value Disclosure Issues. Analytical Procedures as a Fraud Detection Tool.
  26. The IT/Digital Legal Companion: A Comprehensive Business Guide to Software, Internet, and IP Law | by Gene K. Landy and Amy J. Mastrobattista | ISBN: 9781597492560. DIGITAL BUSINESS LAW. TRADEMARK INFRINGEMENT LITIGATION. Digital Copyright Protection. Trade Secrets and Non-Disclosure Agreements.
  27. Architecting Secure Software Systems | by Asoke K. Talukder and Manish Chaitanya | 2009 | ISBN: 9781420087840. How to Construct Secured and Safe C/UNIX Programs. How to Construct Secured Web Services. ASP.NET Security. Java Security.
  28. Hedge Fund Operational Due Diligence: Understanding the Risks | by Jason A. Scharfman | 2009 | ISBN: 9780470372340. Smart Investing Books. INVESTORS Guide to Managing Investment Risks. Techniques for Modeling Operational Risk
  29. New Information Security Framework. Six security elements—availability, utility, integrity, authenticity, confidentiality, and possession.
  30. Web Services Security Development and Architecture: Theoretical and Practical Issues | by Carlos Gutiérrez and Mario Piattini | 2010 | ISBN: 9781605669502. Security Analysis of Service Oriented Systems. Forensics over Web Services.
  31. IT Best Practices for Financial Managers | by Janice Roehl-Anderson | 2010 | ISBN: 9780470508282. Information Technology Planning Process. ERP Software Selection. Implementing Automated Financial Systems. Product Information Management.
  32. The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments | by Craig S. Wright | ISBN: 9781597492669. IT Compliance Guideline. Information Systems Audit Program. Developing IT Security Policy. Vulnerability Assessment Tools. Information Systems Legislation
  33. The Laws of Disruption: Harnessing the New Forces That Govern Life and Business in the Digital Age | by Larry Downes | 2009 | ISBN: 9780465018642. THE STRATEGY OF PATENTS. FIVE PRINCIPLES OF INFORMATION ECONOMICS.
  34. Virtual Social Identity and Consumer Behavior | by Natalie T. Wood and Michael R. Solomon (eds) | 2009 | ISBN: 9780765623959. ADVANTAGES AND DRAWBACKS OF USING AVATARS. HOW DOES VIRTUAL SOCIAL IDENTITY INFLUENCE GROUP DYNAMICS.
  35. Vulnerability Management | by Park Foreman | Buy Cheap Discount Books Online | 2010 | ISBN: 9781439801505. How to Control Internal Vulnerabilities. Principles of Mitigation. Passive Network Analysis. Active Scanning Technology.
  36. Introduction to Business Architecture | by Chris Reynolds | 2010 | ISBN: 9781435454224. Architecture for Information Technology Systems. Business Architecture Model. Product-Driven Business Structure. Service-Driven Business Structure. Price-Driven Business Structure. Reengineering for Efficiency.
  37. Manufacturing Execution System: MES | by Jürgen Kletti (ed) | ISBN: 9783540497431. Manufacturing Engineering Books. SAP’s Adaptive Manufacturing Initiative. Building an MES System. Software Architecture of an MES System. Integrated Production Management with MES
  38. Security Engineering: A Guide to Building Dependable Distributed Systems, Second Edition | by Ross J. Anderson | ISBN: 9780470068526. Electronic and Information Warfare. Network Attack and Defense.
  39. Outsourcing and Offshoring of Professional Services: Business Optimization in a Global Economy | by Amar Gupta (ed) | ISBN: 9781599049724. HOW TO CREATE STRATEGIC GLOBAL PARTNERSHIPS. Information Technology Offshore Outsourcing Key Risks and Success Factors. OUTSOURCING VERSUS INSOURCING.
  40. Security Manager’s Guide to Disasters: Managing Through Emergencies, Violence, and Other Workplace Threats | by Anthony D. Manley | 2009 | ISBN: 9781439809068. Disaster Management Books. Security and Safety Management. The Emergency Procedure Plan. Criminal and Civil Litigation

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.