book

Carry On: Sound Advice from Schneier on Security

Name: Carry On: Sound Advice from Schneier on Security
Author: Bruce Schneier
ISBN: 9781118790816

by Bruce Schneier

December 2013

Intermediate to advanced

384 pages

10h 40m

English

Wiley

Read now

Unlock full access

Cover
Chapter 1: The Business and Economics of Security
Consolidation: Plague or ProgressPrediction: RSA Conference Will Shrink Like a Punctured BalloonHow to Sell SecurityWhy Do We Accept Signatures by Fax?The Pros and Cons of LifeLockThe Problem Is Information InsecuritySecurity ROI: Fact or Fiction?Social Networking RisksDo You Know Where Your Data Are?Be Careful When You Come to Put Your Trust in the CloudsIs Perfect Access Control Possible?News Media Strategies for Survival for JournalistsSecurity and Function CreepWeighing the Risk of Hiring HackersShould Enterprises Give In to IT Consumerization at the Expense of Security?The Vulnerabilities Market and the Future of SecuritySo You Want to Be a Security ExpertWhen It Comes to Security, We're Back to FeudalismYou Have No Control Over Security on the Feudal Internet
Chapter 2: Crime, Terrorism, Spying, and War
America's Dilemma: Close Security Holes, or Exploit Them OurselvesAre Photographers Really a Threat?CCTV Doesn't Keep Us Safe, Yet the Cameras Are EverywhereChinese Cyberattacks: Myth or Menace?How a Classic Man-in-the-Middle Attack Saved Colombian HostagesHow to Create the Perfect Fake IdentityA Fetishistic Approach to Security Is a Perverse Way to Keep Us SafeThe Seven Habits of Highly Ineffective TerroristsWhy Society Should Pay the True Costs of SecurityWhy Technology Won't Prevent Identity TheftTerrorists May Use Google Earth, but Fear Is No Reason to Ban ItThwarting an Internal HackerMarket An Enterprising Criminal Has Spotted a Gap in the MarketWe Shouldn't Poison Our Minds with Fear of BioterrorismRaising the Cost of Paperwork Errors Will Improve AccuracySo-Called Cyberattack Was OverblownWhy Framing Your Enemies Is Now Virtually Child's PlayBeyond Security TheaterCold War Encryption Is Unrealistic in Today's TrenchesProfiling Makes Us Less SafeFixing Intelligence FailuresSpy Cameras Won't Make Us SaferScanners, Sensors Are Wrong Way to Secure the SubwayPreventing Terrorist Attacks in Crowded AreasWhere Are All the Terrorist Attacks?Worst-Case Thinking Makes Us Nuts, Not SafeThreat of “Cyberwar” Has Been Hugely HypedCyberwar and the Future of Cyber ConflictWhy Terror Alert Codes Never Made SenseDebate Club: An International Cyberwar Treaty Is the Only Way to Stem the ThreatOverreaction and Overly Specific Reactions to Rare RisksMilitarizing Cyberspace Will Do More Harm Than GoodRhetoric of Cyber War Breeds Fear—and More Cyber WarThe Boston Marathon Bombing: Keep Calm and Carry OnWhy FBI and CIA Didn't Connect the DotsThe FBI's New Wiretapping Plan Is Great News for CriminalsUS Offensive Cyberwar Policy
Chapter 3: Human Aspects of Security
Secret Questions Blow a Hole in SecurityWhen You Lose a Piece of Kit, the Real Loss Is the Data It ContainsThe Kindness of StrangersBlaming the User Is Easy—But It's Better to Bypass Them AltogetherThe Value of Self-Enforcing ProtocolsReputation Is Everything in IT SecurityWhen to Change PasswordsThe Big Idea: Bruce SchneierHigh-Tech Cheats in a World of TrustDetecting CheatersLance Armstrong and the Prisoner's Dilemma of Doping in Professional SportsTrust and SocietyHow Secure Is the Papal Election?The Court of Public OpinionOn Security Awareness TrainingOur New Regimes of Trust
Chapter 4: Privacy and Surveillance
The Myth of the “Transparent Society”Our Data, OurselvesThe Future of Ephemeral ConversationHow to Prevent Digital SnoopingArchitecture of PrivacyPrivacy in the Age of PersistenceShould We Have an Expectation of Online Privacy?Offhand but On RecordGoogle's and Facebook's Privacy IllusionThe Internet: Anonymous ForeverA Taxonomy of Social Networking DataThe Diffi culty of Surveillance CrowdsourcingThe Internet Is a Surveillance StateSurveillance and the Internet of ThingsGovernment Secrets and the Need for WhistleblowersBefore Prosecuting, Investigate the Government
Chapter 5: Psychology of Security
The Security MindsetThe Difference between Feeling and Reality in SecurityHow the Human Brain Buys SecurityDoes Risk Management Make Sense?How the Great Conficker Panic Hacked into Human CredulityHow Science Fiction Writers Can Help, or Hurt, Homeland SecurityPrivacy Salience and Social Networking SitesSecurity, Group Size, and the Human BrainPeople Understand Risks—But Do Security Staff Understand People?Nature's Fears Extend to Online Behavior
Chapter 6: Security and Technology
The Ethics of Vulnerability ResearchI've Seen the Future, and It Has a Kill SwitchSoftware Makers Should Take ResponsibilityLesson from the DNS Bug: Patching Isn't EnoughWhy Being Open about Security Makes Us All Safer in the Long RunBoston Court's Meddling with “Full Disclosure” Is UnwelcomeQuantum Cryptography: As Awesome as It Is PointlessPasswords Are Not Broken, but How We Choose Them Sure IsAmerica's Next Top Hash Function BeginsTigers Use Scent, Birds Use Calls—Biometrics Are Just Animal InstinctThe Secret Question Is: Why Do IT Systems Use Insecure Passwords?The Pros and Cons of Password MaskingTechnology Shouldn't Give Big Brother a Head StartLockpicking and the InternetThe Battle Is On against Facebook and Co. to Regain Control of Our FilesThe Difficulty of Un-AuthenticationIs Antivirus Dead?Virus and Protocol Scares Happen Every Day—but Don't Let Them Worry YouThe Failure of Cryptography to Secure Modern NetworksThe Story behind the Stuxnet VirusThe Dangers of a Software MonocultureHow Changing Technology Affects SecurityThe Importance of Security EngineeringTechnologies of SurveillanceWhen Technology Overtakes Security
Chapter 7: Travel and Security
Crossing Borders with Laptops and PDAsThe TSA's Useless Photo ID RulesThe Two Classes of Airport ContrabandFixing Airport SecurityLaptop Security while Crossing BordersBreaching the Secure Area in AirportsStop the Panic on Air SecurityA Waste of Money and TimeWhy the TSA Can't Back DownThe Trouble with Airport Profiling
Chapter 8: Security, Policy, Liberty, and Law
Memo to Next President: How to Get Cybersecurity RightCRB CheckingState Data Breach Notifi cation Laws: Have They Helped?How to Ensure Police Database AccuracyHow Perverse Incentives Drive Bad Security DecisionsIt's Time to Drop the “Expectation of Privacy” TestWho Should Be in Charge of Cybersecurity?Coordinate, but Distribute Responsibility“Zero Tolerance” Really Means Zero DiscretionUS Enables Chinese Hacking of GoogleShould the Government Stop Outsourcing Code Development?Punishing Security BreachesThree Reasons to Kill the Internet Kill Switch IdeaWeb Snooping Is a Dangerous MoveThe Plan to Quarantine Infected ComputersClose the Washington MonumentWhitelisting and BlacklistingSecuring Medical Research: a Cybersecurity Point of ViewFear Pays the Bills, but Accounts Must Be SettledPower and the InternetDanger Lurks in Growing New Internet NationalismIT for OppressionThe Public/Private Surveillance PartnershipTransparency and Accountability Don't Hurt Security—They're Crucial to ItIt's Smart Politics to Exaggerate Terrorist Threats
References

Introduction

Overview

Up-to-the-minute observations from a world-famous security expert

Bruce Schneier is known worldwide as the foremost authority and commentator on every security issue from cyber-terrorism to airport surveillance. This groundbreaking book features more than 160 commentaries on recent events including the Boston Marathon bombing, the NSA's ubiquitous surveillance programs, Chinese cyber-attacks, the privacy of cloud computing, and how to hack the Papal election. Timely as an Internet news report and always insightful, Schneier explains, debunks, and draws lessons from current events that are valuable for security experts and ordinary citizens alike.

Bruce Schneier's worldwide reputation as a security guru has earned him more than 250,000 loyal blog and newsletter readers

This anthology offers Schneier's observations on some of the most timely security issues of our day, including the Boston Marathon bombing, the NSA's Internet surveillance, ongoing aviation security issues, and Chinese cyber-attacks

It features the author's unique take on issues involving crime, terrorism, spying, privacy, voting, security policy and law, travel security, the psychology and economics of security, and much more

Previous Schneier books have sold over 500,000 copies

Carry On: Sound Advice from Schneier on Security is packed with information and ideas that are of interest to anyone living in today's insecure world.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781118790823Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills