了得網計算機/網絡_安全之美（影印版）

編輯推薦

“這一繫列富有思想性的文章使讀者可以超越對於耀眼的安全技術的恐懼、不確定和懷疑，從而能夠感受到那些需要立即處理的安全問題的更多微妙之美。《安全之美》展示了安全的陰陽兩面，以及壯觀的破壞力和燦爛的創造力之間基礎性的張力。”

——Gary McGraw，Cigital的CT0，《Software Security》和其他九本書的作者

內容簡介

盡管大多數人在他們個人或者公司的繫統沒有遭到攻擊之前不會給予安全高度的重視，這本充滿激辯的書籍依然表明了數字安全不僅僅是值得思考而已，它還是一個可以令人陶醉的話題。罪犯通過大量富有創造力的行為得以成功，防御方也需要付出同等的代價。
本書通過一些有著深刻見解的文章和分析探索了這樣一個具有挑戰性的主題，其內容包括：
個人信息的秘密機制：它如何工作，罪犯之間的關繫，以及一些他們針對被掠食對像發起突襲時所使用的新方法
社交網絡、雲計算和其他流行趨勢如何幫助和傷害我們的在線安全
衡量標準、需求收集、設計和法律如何能夠把安全提升到一個更高的高度
PGP真實又少為人知的歷史

PREFACE
1PSYCHOLOGICAL SECURITY TRAPS
by Peiter“Mudge”Zatko
Learned Helplessness and NaTvet6
Confirmation Traps
FunctionaI Fixation
Summary
2WIRELESS NETWORKING：FERTILE GROUND FOR SOCIAL ENGINEERING
byJim Stickle),
Easy Money
Wi reless Gone Wild
Still．Wireless Is the Future
3BEAUTIFUL SECURITY METRICS
byElizabeth A．NicholsPREFACE
1PSYCHOLOGICAL SECURITY TRAPS
by Peiter“Mudge”Zatko
Learned Helplessness and NaTvet6
Confirmation Traps
FunctionaI Fixation
Summary
2WIRELESS NETWORKING：FERTILE GROUND FOR SOCIAL ENGINEERING
byJim Stickle),
Easy Money
Wi reless Gone Wild
Still．Wireless Is the Future
3BEAUTIFUL SECURITY METRICS
byElizabeth A．Nichols
Security Metrics by Analogy：Health
Security Metrics by Example
Summary
4THE UNDERGROUND ECONOMY OF SECURITY BREACHES
by Chenxi Wang
The Makeup and Infrastructure ofthe Cyber Underground
The Payoff
How Can We Combat This Growing Underg'round Economy?
Summary
5 BEAUTlFUL TRADE：RETHINKlNG E．COMMERCE SECURITY
byEdBellis
DeconslructIng Commerce
Weak Amelioration Attempts
E-Commerce Redone：A New Security Model
The New ModeI
6 SECURING ONLINE ADVERTISlNG：RUSTLERS AND SHERIFFS IN THE NEW WILD WEST
by Benjamin Edelman
Attacks on Users
Advertisers As Vi Clims
Creating Accountability in Online Advertising
7THE EVOLUTl0N OF PGP’S WEB OF TRUST
byPhil Zimmermann andJon Callas
PGP and OpenPGP
Trust，Validity，and Authority
PGP and C rypto History
Enhancements to the Original Web of Trust Model
Interesting A reas for Further Research
References
8OPEN SOURCE HONEYCLIENT：PROACTIVE DETECTION OF CLIENT．SIDE EXPLOITS
byKathywang
Enter Honeyclients
Introducing the World’S Fi rst Open Source Honeyclient
Second-Generation Honeyclients
Honeyclient OperationaI Results
Analysis of Exploits
Limitations ofthe Current Honeyclient Implementation
Related Work
The Future of Honeyclients
9TOMORROW’S SECURITY COGS AND LEVERS
byMark Curphey
Cloud Computing and Web Services：The Single Machine Is Here
ConnectimJ People，Process，and Technology：The Potential for Business Process Management
Social Networkin9：When People Start Communicatin9，Big Things Change
Information Security Economics：Supercrunching andthe New Rules oftheGrid
Platforms ofthe Lon9·Tail Variety：Why the Future Will Be Different for Us All
Conclusion
Acknowledgmenls
10SECURITY BY DESIGN
byJohn McManus
Metrics with No Meaning
Time to Market or Time to Quality?
How a Di sciplined System Development Lifecycle Can Help
Conclusion：Beautiful Security Is an Attribute of Beautiful Systems
11 FORClNG FIRMS TO FOCUS：IS SECURE SOFTWARE IN YOUR FUTURE?
byJim Routh
Implicit Requi remenls Can StilI Be Powerful
How One Firm Came to Demand Secure Software
Enforcing Security in Off—the—ShelfSoftware
Analysis：How to Make the World’S Software More Secure
120H N0，HERE COME THE INFOSECURITY LAWYERS!
byRandyv.Sabett
Culture
Balance
Communication
Doing the Right Thing
13 BEAUTIFUL LOG HANDLING
byAnton Chuuakin
Logs in Security Laws and Standards
Focus on Logs
When Logs Are Invaluable
Challenges with Logs
Case Study：Behind a Trashed Server
Future Logging
Conclusions
14INCIDENT DETECTION：FINDING THE OTHER 68％
by Grant Geyer and Brian Dunphy
A Common Starting Point
Improving Detection with Context
Improving Perspective with Host Logging
Summary
15DOING REAL WORK WITHOUT REAL DATA
by Peter Wayner
How Data Translucency Works
A Real．Life Example
PersonaI Data Stored As a Convenience
Trade—offs
Going Deeper
References
16 CASTING SPELLS：PC SECURITY THEATER
by Michael Wood and Fernando Francisco
Growing Attacks．Defenses in Retreat
The lIlusion Revealed
Better Practices for Desktop Security
Conclusion
CONTRIBUTORS
INDEX

商品搜索

商品分类

【醫學】

【各大出版社】