A Hacker's Mind: How the Powerful Bend Society's Rules, and How to Bend them Back

by Bruce Schneier

There are a bunch of lessons here. First, detection can be hard. Sometimes you can detect hacks while they’re happening, but mostly you detect them after the fact during things like audits.