Security Engineering - A Guide to Building Dependable Distributed Systems

Ross Anderson, widely recognized as one of the world's foremost authorities on security engineering, presents a comprehensive design tutorial that covers a wide range of applications. Designed for today's programmers who need to build systems that withstand malice as well as error (but have no time to go do a PhD in security), this book illustrates basic concepts through many real-world system design successes and failures.

Topics range from firewalls, through phone phreaking and copyright protection, to frauds against e-businesses. Anderson's book shows how to use a wide range of tools, from cryptology through smartcards to applied psychology. As everything from burglar alarms through heart monitors to bus ticket dispensers starts talking IP, the techniques taught in this book will become vital to everyone who wants to build systems that are secure, dependable and manageable.

Contents

• "Controlling the Dragon"-The Integration of Management Systems.
• Building Safer More Productive Jobs!
• Management Commitment: Policy and Planning.
• Plan Implementation.
• Risk Assessment Process.
• Risk and Operational Control.
• Measurement and Evaluation.
• Non Conformance and Incident Investigation.
• Management Review and Continuous Improvement.
• Conclusion.
• About the Author.
• Appendices.