The New School of Information Security

“It is about time that a book like The New School came along. The age of security as pure technology is long past, and modern practitioners need to understand the social and cognitive aspects of security if they are to be successful. Shostack and Stewart teach readers exactly what they need to know--I just wish I could have had it when I first started out.” --David Mortman, CSO-in-Residence Echelon One, former CSO Siebel Systems Why is information security so dysfunctional? Are you wasting the money you spend on security? This book shows how to spend it more effectively. How can you make more effective security decisions? This book explains why professionals have taken to studying economics, not cryptography--and why you should, too. And why security breach notices are the best thing to ever happen to information security. It’s about time someone asked the biggest, toughest questions about information security. Security experts Adam Shostack and Andrew Stewart don’t just answer those questions--they offer honest, deeply troubling answers. They explain why these critical problems exist and how to solve them. Drawing on powerful lessons from economics and other disciplines, Shostack and Stewart offer a new way forward. In clear and engaging prose, they shed new light on the critical challenges that are faced by the security field. Whether you’re a CIO, IT manager, or security specialist, this book will open your eyes to new ways of thinking about--and overcoming--your most pressing security challenges. The New School enables you to take control, while others struggle with non-stop crises. <ul>
<li> Better evidence for better decision-making Why the security data you have doesn’t support effective decision-making--and what to do about it </li>
<li> Beyond security “silos”: getting the job done together Why it’s so hard to improve security in isolation--and how the entire industry can make it happen and evolve </li>
<li> Amateurs study cryptography; professionals study economics What IT security leaders can and must learn from other scientific fields </li>
<li> A bigger bang for every buck How to re-allocate your scarce resources where they’ll do the most good</li>
</ul>

Computers & Technology

Stewart, Andrew

Shostack, Adam

Certification

Addison-Wesley Professional

It is about time that a book like The New School came along. The age of security as pure technology is long past, and modern practitioners need to understand the social and cognitive aspects of security if they are to be successful. Shostack and Stewart teach readers exactly what they need to know--I just wish I could have had it when I first started out.” --David Mortman, CSO-in-Residence Echelon One, former CSO Siebel Systems Why is information security so dysfunctional? Are you wasting the money you spend on security? This book shows how to spend it more effectively. How can you make more effective security decisions? This book explains why professionals have taken to studying economics, not cryptography--and why you should, too. And why security breach notices are the best thing to ever happen to information security. It’s about time someone asked the biggest, toughest questions about information security. Security experts Adam Shostack and Andrew Stewart don’t just answer those questions--they offer honest, deeply troubling answers. They explain why these critical problems exist and how to solve them. Drawing on powerful lessons from economics and other disciplines, Shostack and Stewart offer a new way forward. In clear and engaging prose, they shed new light on the critical challenges that are faced by the security field. Whether you’re a CIO, IT manager, or security specialist, this book will open your eyes to new ways of thinking about--and overcoming--your most pressing security challenges. The New School enables you to take control, while others struggle with non-stop crises. <ul>
<li> Better evidence for better decision-making Why the security data you have doesn’t support effective decision-making--and what to do about it 
</li> <li> Beyond security “silos”: getting the job done together Why it’s so hard to improve security in isolation--and how the entire industry can make it happen and evolve 
</li> <li> Amateurs study cryptography; professionals study economics What IT security leaders can and must learn from other scientific fields 
</li> <li> A bigger bang for every buck How to re-allocate your scarce resources where they’ll do the most good 
</li> </ul>

Networking & Cloud Computing

The only security book to be chosen as a Dr. Dobbs Jolt Award Finalist since Bruce Schneier's Secrets and Lies and Applied Cryptography! Adam Shostack is responsible for security development lifecycle threat modeling at Microsoft and is one of a handful of threat modeling experts in the world. Now, he is sharing his considerable expertise into this unique book. With pages of specific actionable advice, he details how to build better security into the design of systems, software, or services from the outset. You'll explore various threat modeling approaches, find out how to test your designs against threats, and learn effective ways to address threats that have been validated at Microsoft and other top companies. Systems security managers, you'll find tools and a framework for structured thinking about what can go wrong. Software developers, you'll appreciate the jargon-free and accessible introduction to this essential skill. Security professionals, you'll learn to discern changing threats and discover the easiest ways to adopt a structured approach to threat modeling. <ul>
<li>Provides a unique how-to for security and software developers who need to design secure products and systems and test their designs</li> <li>Explains how to threat model and explores various threat modeling approaches, such as asset-centric, attacker-centric and software-centric</li> <li>Provides effective approaches and techniques that have been proven at Microsoft and elsewhere</li> <li>Offers actionable how-to advice not tied to any specific software, operating system, or programming language</li> <li>Authored by a Microsoft professional who is one of the most prominent threat modeling experts in the world</li> </ul>
As more software is delivered on the Internet or operates on Internet-connected devices, the design of secure software is absolutely critical. Make sure you're ready with Threat Modeling: Designing for Security.

Threat Modeling: Designing for Security

wiley

Secure your applications with help from your favorite Jedi masters 
In Threats: What Every Engineer Should Learn From Star Wars, accomplished security expert and educator Adam Shostack delivers an easy-to-read and engaging discussion of security threats and how to develop secure systems. The book will prepare you to take on the Dark Side as you learn―in a structured and memorable way―about the threats to your systems. You’ll move from thinking of security issues as clever one-offs and learn to see the patterns they follow. 
This book brings to light the burning questions software developers should be asking about securing systems, and answers them in a fun and entertaining way, incorporating cybersecurity lessons from the much-loved Star Wars series. You don’t need to be fluent in over 6 million forms of exploitation to face these threats with the steely calm of a Jedi master. 
You’ll also find: Understandable and memorable introductions to the most important threats that every engineer should know Straightforward software security frameworks that will help engineers bake security directly into their systems Strategies to align large teams to achieve application security in today’s fast-moving and agile world Strategies attackers use, like tampering, to interfere with the integrity of applications and systems, and the kill chains that combine these threats into fully executed campaigns 
An indispensable resource for software developers and security engineers, Threats: What Every Engineer Should Learn From Star Wars belongs on the bookshelves of everyone delivering or operating technology: from engineers to executives responsible for shipping secure code.

Threats: What Every Engineer Should Learn From Star Wars

See the best price to sell, buy, or rent books by Shostack, Adam. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Shostack, Adam

See the best price to sell, buy, or rent books by Shostack, Adam. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

The New School of Information Security

The New School of Information Security

Threat Modeling: Designing for Security

Threats: What Every Engineer Should Learn From Star Wars