The New School of Information Security

版权声明：原创作品，允许转载，转载时请务必以超链接形式标明文章原始出版、作者信息和本声明。否则将追究法律责任。 http://blog.youkuaiyun.com/topmvp - topmvp

Why is information security so dysfunctional? Are you wasting the money you spend on security? This book shows how to spend it more effectively. How can you make more effective security decisions? This book explains why professionals have taken to studying economics, not cryptography--and why you should, too. And why security breach notices are the best thing to ever happen to information security. Its about time someone asked the biggest, toughest questions about information security. Security experts Adam Shostack and Andrew Stewart dont just answer those questions--they offer honest, deeply troubling answers. They explain why these critical problems exist and how to solve them. Drawing on powerful lessons from economics and other disciplines, Shostack and Stewart offer a new way forward. In clear and engaging prose, they shed new light on the critical challenges that are faced by the security field. Whether youre a CIO, IT manager, or security specialist, this book will open your eyes to new ways of thinking about--and overcoming--your most pressing security challenges. The New School enables you to take control, while others struggle with non-stop crises.

*Better evidence for better decision-making
Why the security data you have doesnt support effective decision-making--and what to do about it
*Beyond security silos: getting the job done together
Why its so hard to improve security in isolation--and how the entire industry can make it happen and evolve
*Amateurs study cryptography; professionals study economics
What IT security leaders can and must learn from other scientific fields
*A bigger bang for every buck
How to re-allocate your scarce resources where theyll do the most good

http://rapidshare.com/files/106992780/0321502787.zip
http://depositfiles.com/files/4701269