000			02665 a2200361 4500
001			77906
999			_c77906 _d26759
003			TR-AnTOB
005			20200531135723.0
008			101002s2008 nju b 001 0
020			_a0321502787 (hardback : alk. paper)
020			_a9780321502780 (hardback : alk. paper)
041			_aeng
050			_aHD30.2 _b.S563 2008
090			_aHD30.2 .S563 2008
100			_aShostack, Adam _963203
245		4	_aThe new school of information security / _cAdam Shostack and Andrew Stewart.
264		1	_aUpper Saddle River, NJ : _bAddison-Wesley, _cc2008.
300			_axiv, 238 p. ; _c24 cm.
504			_aIncludes bibliographical references (p. 213-228) and index.
505			_aObserving the World and Asking Why -- Spam, and Other Problems with Email -- Hostile Code -- Security Breaches -- Identity and the Theft of Identity -- Should We Just Start Over? -- The Need for a New School -- The Security Industry -- Where the Security Industry Comes From -- Orientations and Framing -- What Does the Security Industry Sell? -- How Security Is Sold -- On Evidence -- The Trouble with Surveys -- The Trade Press -- Vulnerabilities -- Instrumentation on the Internet -- Organizations and Companies with Data -- The Rise of the Security Breach -- How Do Companies Lose Data? -- Disclose Breaches -- Possible Criticisms of Breach Data -- Moving from Art to Science -- Get Involved -- Amateurs Study Cryptography: Professionals Study Economics -- The Economics of Information Security -- Psychology -- Sociology -- Spending -- Reasons to Spend on Security Today -- Non-Reasons to Spend on Security -- Emerging Reasons to Spend -- How Much Should a Business Spend on Security? -- The Psychology of Spending -- On What to Spend -- Life in the New School -- People Are People -- Breach Data Is Not Actuarial Data -- Powerful Externalities -- The Human Computer Interface and Risk Compensation -- The Use and Abuse of Language -- Skills Shortages, Organizational Structure, and Collaboration -- A Call to Action -- Join the New School -- Embrace the New School -- Make Money from the New School -- Final Words -- Endnotes
650			_aInformation technology _xSecurity measures _963205
650			_aBusiness _xData processing _xSecurity measures _963206
650		0	_aComputer security equipment industry _963207
650			_aBilgi teknolojisi _xGüvenlik önlemleri _963208
650			_aİşletme _xVeri işleme _xGüvenlik önlemleri _963209
650			_aBilgisayar güvenliği _91502
650			_aComputer security _9912
700			_aStewart, Andrew, _d1975- _963204
902			_a0032722
903			_aMerkez Kutuphane
945			_aSB,CT
942			_cBK