Books & Videos

Table of Contents

  1. Chapter 1 Psychological Security Traps

    1. Learned Helplessness and Naïveté

    2. Confirmation Traps

    3. Functional Fixation

    4. Summary

  2. Chapter 2 Wireless Networking: Fertile Ground for Social Engineering

    1. Easy Money

    2. Wireless Gone Wild

    3. Still, Wireless Is the Future

  3. Chapter 3 Beautiful Security Metrics

    1. Security Metrics by Analogy: Health

    2. Security Metrics by Example

    3. Summary

  4. Chapter 4 The Underground Economy of Security Breaches

    1. The Makeup and Infrastructure of the Cyber Underground

    2. The Payoff

    3. How Can We Combat This Growing Underground Economy?

    4. Summary

  5. Chapter 5 Beautiful Trade: Rethinking E-Commerce Security

    1. Deconstructing Commerce

    2. Weak Amelioration Attempts

    3. E-Commerce Redone: A New Security Model

    4. The New Model

  6. Chapter 6 Securing Online Advertising: Rustlers and Sheriffs in the New Wild West

    1. Attacks on Users

    2. Advertisers As Victims

    3. Creating Accountability in Online Advertising

  7. Chapter 7 The Evolution of PGP’s Web of Trust

    1. PGP and OpenPGP

    2. Trust, Validity, and Authority

    3. PGP and Crypto History

    4. Enhancements to the Original Web of Trust Model

    5. Interesting Areas for Further Research

    6. References

  8. Chapter 8 Open Source Honeyclient: Proactive Detection of Client-Side Exploits

    1. Enter Honeyclients

    2. Introducing the World’s First Open Source Honeyclient

    3. Second-Generation Honeyclients

    4. Honeyclient Operational Results

    5. Analysis of Exploits

    6. Limitations of the Current Honeyclient Implementation

    7. Related Work

    8. The Future of Honeyclients

  9. Chapter 9 Tomorrow’s Security Cogs and Levers

    1. Cloud Computing and Web Services: The Single Machine Is Here

    2. Connecting People, Process, and Technology: The Potential for Business Process Management

    3. Social Networking: When People Start Communicating, Big Things Change

    4. Information Security Economics: Supercrunching and the New Rules of the Grid

    5. Platforms of the Long-Tail Variety: Why the Future Will Be Different for Us All

    6. Conclusion

    7. Acknowledgments

  10. Chapter 10 Security by Design

    1. Metrics with No Meaning

    2. Time to Market or Time to Quality?

    3. How a Disciplined System Development Lifecycle Can Help

    4. Conclusion: Beautiful Security Is an Attribute of Beautiful Systems

  11. Chapter 11 Forcing Firms to Focus: Is Secure Software in Your Future?

    1. Implicit Requirements Can Still Be Powerful

    2. How One Firm Came to Demand Secure Software

    3. Enforcing Security in Off-the-Shelf Software

    4. Analysis: How to Make the World’s Software More Secure

  12. Chapter 12 Oh No, Here Come the Infosecurity Lawyers!

    1. Culture

    2. Balance

    3. Communication

    4. Doing the Right Thing

  13. Chapter 13 Beautiful Log Handling

    1. Logs in Security Laws and Standards

    2. Focus on Logs

    3. When Logs Are Invaluable

    4. Challenges with Logs

    5. Case Study: Behind a Trashed Server

    6. Future Logging

    7. Conclusions

  14. Chapter 14 Incident Detection: Finding the Other 68%

    1. A Common Starting Point

    2. Improving Detection with Context

    3. Improving Perspective with Host Logging

    4. Summary

  15. Chapter 15 Doing Real Work Without Real Data

    1. How Data Translucency Works

    2. A Real-Life Example

    3. Personal Data Stored As a Convenience

    4. Trade-offs

    5. Going Deeper

    6. References

  16. Chapter 16 Casting Spells: PC Security Theater

    1. Growing Attacks, Defenses in Retreat

    2. The Illusion Revealed

    3. Better Practices for Desktop Security

    4. Conclusion

  1. Appendix Contributors

  2. Colophon