安全之美 英文版 影印本pdf电子书版本下载

点此进入-本书在线PDF格式电子书下载【推荐-云解压-方便快捷】直接下载PDF格式图书。移动端-PC端通用
种子下载[BT下载速度快] 温馨提示：（请使用BT下载软件FDM进行下载）软件下载地址页 直链下载[便捷但速度慢]   [在线试读本书]   [在线获取解压码]

安全之美 英文版 影印本PDF格式电子书版下载

下载的文件为RAR压缩包。需要使用解压软件进行解压得到PDF格式图书。

建议使用BT下载工具Free Download Manager进行下载,简称FDM(免费,没有广告,支持多平台）。本站资源全部打包为BT种子。所以需要使用专业的BT下载软件进行下载。如 BitComet qBittorrent uTorrent等BT下载工具。迅雷目前由于本站不是热门资源。不推荐使用！后期资源热门了。安装了迅雷也可以迅雷进行下载！

（文件页数 要大于 标注页数，上中下等多册电子书除外）

注意：本站所有压缩包均有解压码： 点击下载压缩包解压工具

1　PSYCHOLOGICAL SECURITY TRAPS&by Peiter"Mudge"Zatko 1

Learned Helplessness and Na？veté 2

Confirmation Traps 10

Functional Fixation 14

Summary 20

2　WIRELESS NETWORKING:FERTILE GROUND FOR SOCIAL ENGINEERING&by Jim Stickley 21

Easy Money 22

Wireless Gone Wild 28

Still,Wireless Is the Future 31

3　BEAUTIFUL SECURITY METRICS&by Elizabeth A.Nichols 33

Security Metrics by Analogy:Health 34

Security Metrics by Example 38

Summary 60

4 THE UNDERGROUND ECONOMY OF SECURITY BREACHES&by Chenxi Wang 63

The Makeup and Infrastructure of the Cyber Underground 64

The Payoff 66

How Can We Combat This Growing Underground Economy? 71

Summary 72

5 BEAUTIFUL TRADE:RETHINKING E-COMMERCE SECURITY&by Ed Bellis 73

Deconstructing Commerce 74

Weak Amelioration Attempts 76

E-Commerce Redone:A New Security Model 83

The New Model 86

6 SECURING ONLINE ADVERTISING:RUSTLERS AND SHERIFFS IN THE NEW WILD WEST&by Benjamin Edelman 89

Attacks on Users 89

Advertisers As Victims 98

Creating Accountability in Online Advertising 105

7 THE EVOLUTION OF PGP'S WEB OF TRUST&by Phil Zimmermann and Jon Callas 107

PGP and OpenPGP 108

Trust,Validity,and Authority 108

PGP and Crypto History 116

Enhancements to the Original Web of Trust Model 120

Interesting Areas for Further Research 128

References 129

8 OPEN SOURCE HONEYCLIENT:PROACTIVE DETECTION OF CLIENT-SIDE EXPLOITS&by Kathy Wang 131

Enter Honeyclients 133

Introducing the World's First Open Source Honeyclient 133

Second-Generation Honeyclients 135

Honeyclient Operational Results 139

Analysis of Exploits 141

Limitations of the Current Honeyclient Implementation 143

Related Work 144

The Future of Honeyclients 146

9 TOMORROW'S SECURITY COGS AND LEVERS&by Mark Curphey 147

Cloud Computing and Web Services:The Single Machine Is Here 150

Connecting People,Process,and Technology:The Potential for Business Process Management 154

Social Networking:When People Start Communicating,Big Things Change 158

Information Security Economics:Supercrunching and the New Rules of the Grid 162

Platforms of the Long-Tail Variety:Why the Future Will Be Different for Us All 165

Conclusion 168

Acknowledgments 169

10 SECURITY BY DESIGN&by John McManus 171

Metrics with No Meaning 172

Time to Market or Time to Quality? 174

How a Disciplined System Development Lifecycle Can Help 178

Conclusion:Beautiful Security Is an Attribute of Beautiful Systems 181

11 FORCING FIRMS TO FOCUS:IS SECURE SOFTWARE IN YOUR FUTURE?&by Jim Routh 183

Implicit Requirements Can Still Be Powerful 184

How One Firm Came to Demand Secure Software 185

Enforcing Security in Off-the-Shelf Software 190

Analysis:How to Make the World's Software More Secure 193

12 OH NO,HERE COME THE INFOSECURITY LAWYERS!&by Randy V.Sabett 199

Culture 200

Balance 202

Communication 207

Doing the Right Thing 211

13 BEAUTIFUL LOG HANDLING&by Anton Chuvakin 213

Logs in Security Laws and Standards 213

Focus on Logs 214

When Logs Are Invaluable 215

Challenges with Logs 216

Case Study:Behind a Trashed Server 218

Future Logging 221

Conclusions 223

14 INCIDENT DETECTION:FINDING THE OTHER 68%&by Grant Geyer and Brian Dunphy 225

A Common Starting Point 226

Improving Detection with Context 228

Improving Perspective with Host Logging 232

Summary 237

15 DOING REAL WORK WITHOUT REAL DATA&by Peter Wayner 239

How Data Translucency Works 240

A Real-Life Example 243

Personal Data Stored As a Convenience 244

Trade-offs 244

Going Deeper 245

References 246

16 CASTING SPELLS:PC SECURITY THEATER&by Michael Wood and Fernando Francisco 247

Growing Attacks,Defenses in Retreat 248

The Illusion Revealed 252

Better Practices for Desktop Security 257

Conclusion 258

CONTRIBUTORS 259

INDEX 269