Network Security Architectures

Foreword

Network security now consumes a significant share of a typical corporate information technology (IT) budget. Scaremongering about the Internet imposes a cost on business that is an order of magnitude greater.

Traditional IT security books have fallen somewhat behind real-world practice. The old-fashioned priorities of confidentiality, then integrity, then availability have been reversed. The arrival of distributed denial of service attacks has put availability at the top. But how do you deal with attacks that exploit vulnerabilities in other people’s systems rather than your own?

Traditional cryptography books are also inadequate. A discussion of the mechanics and the relative merits of different cryptographic algorithms is all very ...