The New School of Information Security

by Adam Shostack, Andrew Stewart

A thorough overview of the computer security industry offers an objective study of threats to companies and how they can change to confront them effectively, outlining specific and emergent threats, the tools used to assess them, how the security industry needs to evolve to meet security problems, how companies can evaluate their own security programs, future trends, and the issues of liability, user education, and more. (All Users)

Genres: Technology

238 pages, Hardcover

First published March 26, 2008

Reviews

[Carrie · Rating 5 out of 5]

Thinking about the metrics around InfoSec is a vital and mostly unsolved problem for this reasonably young scientific field. I highly recommend this book for people doing business in the InfoSec field.

[Andre · Rating 4 out of 5]

Still relevant even after 10+ years.

[Tim · Rating 4 out of 5]

Nice macro-view of information security. There's very little in the way of operational detail in the book, but I think that's the point :)

I very much liked their take the security measures should be evidence based.