Security Engineering: A Guide to Building Dependable Distributed Systems - Softcover

Anderson, Ross J.

Softcover

ISBN 10: 0471389226 ISBN 13: 9780471389224

Publisher: Wiley, 2001

Synopsis

The first quick reference guide to the do's and don'ts of creating high quality security systems.
Ross Anderson, widely recognized as one of the world's foremost authorities on security engineering, presents a comprehensive design tutorial that covers a wide range of applications. Designed for today's programmers who need to build systems that withstand malice as well as error (but have no time to go do a PhD in security), this book illustrates basic concepts through many real-world system design successes and failures. Topics range from firewalls, through phone phreaking and copyright protection, to frauds against e-businesses. Anderson's book shows how to use a wide range of tools, from cryptology through smartcards to applied psychology. As everything from burglar alarms through heart monitors to bus ticket dispensers starts talking IP, the techniques taught in this book will become vital to everyone who wants to build systems that are secure, dependable and manageable.

About this title

About the Author

ROSS ANDERSON teaches and directs research in computer security at Cambridge University, England. Widely recognized as one of the world's foremost authorities on security engineering, he has published extensive studies on how real security systems fail-on bank card fraud, phone phreaking, pay-TV hacking, ways to cheat metering systems and breaches of medical privacy.

From the Back Cover

"If you're even thinking of doing any security engineering, you need to read this book. It's the first, and only, end-to-end modern security design and engineering book ever written."-Bruce Schneier

"Many people are anxious about Internet security for PCs and servers," says leading expert Ross Anderson, "as if that's all there is when in reality security problems have just begun. By 2003, there may be more mobile phones on the Net than PCs, and they will be quickly followed by network-connected devices from refrigerators to burglar alarms to heart monitors. How will we manage the risks?"

Dense with anecdotes and war stories, readable, up-to-date and full of pointers to recent research, this book will be invaluable to you if you have to design systems to be resilient in the face of malice as well as error. Anderson provides the tools and techniques you'll need, discusses what's gone wrong in the past, and shows you how to get your design right the first time around.

You don't need to be a security expert to understand Anderson's truly accessible discussion of:
* Security engineering basics, from protocols, cryptography, and access controls to the nuts and bolts of distributed systems
* The lowdown on biometrics, tamper resistance, security seals, copyright marking, and many other protection technologies-for many of them, this is the first detailed information in an accessible textbook
* What sort of attacks are done on a wide range of systems-from banking and medical records through burglar alarms and smart cards to mobile phones and e-commerce-and how to stop them
* Management and policy issues-how computer security interacts with the law and with corporate culture

From the Inside Flap

`Many people are anxious about Internet security', says leading expert Ross Anderson, `and that's with just PCs and servers attached. But over the next few years a huge range of devices is going to come online. By 2003 there may well be more mobile phones on the net than PCs, and they will be followed by everything from fridges through burglar alarms to heart monitors. How will we manage the risks?'

Dense with anecdotes and war stories, readable, up to date and full of pointers to recent research, this book will be invaluable to you if you have to design systems to be resilient in the face of malice as well as error. Anderson provides the tools and techniques you'll need, discusses what's gone wrong in the past, and shows you how to get your design right the first time around.

You don't need to be a security expert to understand Anderson's truly accessible discussion of:

* Security engineering basics, from protocols, cryptography and access controls to the nuts and bolts of distributed systems

* The lowdown on biometrics, tamper resistance, security seals, copyright marking and many other protection technologies - for many of them, this is the first detailed information in an accessible textbook

* What sort of attacks are done on a wide range of systems, from banking and medical records through buglar alarms and smartcards to mobile phones and e-commerce - and how to stop them

* Management and policy issues - how computer security interacts with the law and with corporate culture

Edition details

• Publisher: Wiley
• Publication date: 2001
• Language: English
• ISBN 10: 0471389226
• ISBN 13: 9780471389224
• Binding: Paperback
• Edition number: 1
• Number of pages: 640