|
Security Engineering: A Guide to Building Dependable Distributed Systems
 |
Author: Ross J. Anderson, Ross Anderson
List Price: $65.00
Our Price: Click to see the latest and low price
ISBN: 0471389226
Publisher: John Wiley & Sons (22 January, 2001)
Edition: Paperback
Sales Rank: 18,342
Average Customer Rating: 4.89 out of 5
|
Customer ReviewsRating: 5 out of 5
One of the most definitive security books ever!
Security Engineering is clearly one of the most definitive security books ever!Ross Anderson writes on nearly every major security topic in great depth and with vast insight.
Rating: 5 out of 5
Five stars not enough
Five stars for Ross Anderson's Security Engineering are just not enough - you have to read the book to understand what I mean. I won't repeat what other reviewers here on amazon.com have said; instead I'd say that the author is THE security expert. His amazingly broad and in-depth security expertise and good writing style resulted in a book which is not only comprehensive and detailed, but also interesting to read. You can be an expert in one, two, well, three (out of 10) domains of information security, but it seems the author is equally at home when writing about all 10 domains. I wish I was his student!Edgar Danielyan
Rating: 5 out of 5
A watershed book for the security community
This book changes everything. "Security Engineering" is the new must-read book for any serious information security professional. In fact, it may be required reading for anyone concerned with engineering of any sort. Ross Anderson's ability to blend technology, history, and policy makes "Security Engineering" a landmark work.
Engineers learn more from failure than success. "Security Engineering" brings this practice to life, investigating the design and weaknesses of ATM machines, currency printing, nuclear command and control, radar, and dozens of other topics. Anderson's insights are accurate and helpful, partly because he's served as consultant for diverse industries. His descriptions of criminal and intelligence agency exploitation of insecure systems are startling; fake cellular base stations, fly-by-night phone companies, TEMPEST/EMSEC viruses, freezing electronics to preserve RAM -- all are explained in layman's terms.
The bibliography offers exceptional opportunities for further research, but the second edition needs a glossary. I found some of the cryptography chapter too complicated for non-mathematicians. I also believe the author was misled by whomever told him that "at the time of writing, the US Air Force has so far not detected an intrusion using the systems it has deployed on local networks." (p. 387) (I know from experience this is false.) Nevertheless, these are my only criticisms for a 612 page text.
"Security Engineering" is a book of principles, lessons, and case studies. It offers history, tools, and standards to judge engineering endeavors. This book actually inspired me to learn how brick-and-mortar engineers learn their trade, as their methods and failure analysis may apply to the software world. "Security Engineering" will remain relevant for years, but I recommend you read it as soon as possible.
Similar Products
· Building Secure Software: How to Avoid Security Problems the Right Way
· Applied Cryptography: Protocols, Algorithms, and Source Code in C, Second Edition
· Practical Cryptography
|
