Mon commentaire Ce livre présente une approche très saine de la sécurité informatique. L'auteur à pris du recul depuis son livre "applied cryptography". Même si ce livre ne prétend pas délivrer des solutions aux problèmes que nous connaissons tous ; il amène la réflexion en proposant une approche plus globale. C'est ce type d'approche qui devrait nous permettre de mieux évaluer les solutions techniques qui s'offrent à nous, de prendre en compte les aspects humains de la problématique Sécurité et d'instaurer une vraie "démarche Sécurité" dans toutes nos entreprises. Comme Bruce Schneier aime à le répéter : "La sécurité n'est pas un produit mais un process". Luc   4/5

Résumé

Bestselling author Bruce Schneier offers his expert guidance on achieving security on a network

Internationally recognized computer security expert Bruce Schneier offers a practical, straightforward guide to achieving security throughout computer networks. Schneier uses his extensive field experience with his own clients to dispel the myths that often mislead IT managers as they try to build secure systems. This practical guide provides readers with a better understanding of why protecting information is harder in the digital world, what they need to know to protect digital information, how to assess business and corporate security needs, and much more. Walks the reader through the real choices they have now for digital security and how to pick and choose the right one to meet their business needs Explains what cryptography can and can't do in achieving digital security

Contents

• THE LANDSCAPE.
  • Digital Threats.
  • Attacks.
  • Adversaries.
  • Security Needs.
• TECHNOLOGIES.
  • Cryptography.
  • Cryptography in Context.
  • Computer Security.
  • Identification and Authentication.
  • Networked-Computer Security.
  • Network Security.
  • Network Defenses.
  • Software Reliability.
  • Secure Hardware.
  • Certificates and Credentials.
  • Security Tricks.
  • The Human Factor.
• STRATEGIES.
  • Vulnerabilities and the Vulnerability Landscape.
  • Threat Modeling and Risk Assessment.
  • Security Policies and Countermeasures.
  • Attack Trees.
  • Product Testing and Verification.
  • The Future of Products. Security Processes.
• Conclusion.
• Postscript.
• Acknowledgments.