Security De-Engineering: Solving the Problems in Information Risk Management

ISBN-13: 9781439868348 / Angielski / Miękka / 2011 / 332 str.

Ian Tibble

Opis

With organizations facing growing security challenges from both automated and manual attacks, these incidents now represent more of a threat to the bottom line than ever before. This book explains the problems in corporate information security and how to solve them. Based on more than a decade of global experience, the author explains how the industry has changed for the worst and how the loss of analytical skills has led the corporate world on a collision course with fiends who seek unlawful financial gain from hacking.

Recenzje

This is a passionate call to arms to recognise the contribution of engineering to business. In highlighting what the author believes is a diminishing role of qualified engineers, he lights the lighthouse beacon in the hope that business can thereby avoid crashing into the rocks of avoidable incident and financial loss.
—Written by Wendy Goucher, Information security consultant, writing on www.infosecskills.com

Read the full review at: http://resources.infosecskills.com/mm-cat-list-books/mm-cat-list-infosec/114-book-review-sedeeng

Spis treści

People and Blame. Whom Do You Blame? The Hackers. Checklists and Standards Evangelists. De-Engineering of Security. How Security Changed Post 2000. Automated Vulnerability Scanners. Eternal Yawn: Careers in Information Security. Penetration Testing—Old and New. Love of Clouds and Incidents—Vain Search for Validation. Security Products. Intrusion Detection. Other Products. Re-Engineering Of Security. One Professional Accreditation Program to Bind Them All. Index.

O autorze

Ian Tibble was an IT specialist with IBM Global Services before entering into the security arena. His experience of more than 11 years in information security allowed him to gain practical risk management expertise from both an architectural IT and a business analysis aspect. His experience in Infosec has been with service providers Trusecure (now Verizon) and PricewaterhouseCoopers, and also with end users in logistics, banking, and insurance. He has been engaged with security service delivery projects with close to 100 Fortune 500 companies and multinational financial institutions in Asia (Indonesia, Singapore, Malaysia, Taiwan, Hong Kong, and Australia) and Europe.