Cantitate/Preț
Produs
Total produse
Vezi coșul
Securing Systems: Applied Security Architecture and Threat Models de Brook S. E. Schoenfield

Securing Systems: Applied Security Architecture and Threat Models

Autor Brook S. E. Schoenfield
en Limba Engleză Hardback – 20 mai 2015

Internet attack on computer systems is pervasive. It can take from less than a minute to as much as eight hours for an unprotected machine connected to the Internet to be completely compromised. It is the information security architect s job to prevent attacks by securing computer systems. This book describes both the process and the practice of assessing a computer system s existing information security posture. Detailing the time-tested practices of experienced security architects, it explains how to deliver the right security at the right time in the implementation lifecycle.

Securing Systems: Applied Security Architecture and Threat Models covers all types of systems, from the simplest applications to complex, enterprise-grade, hybrid cloud architectures. It describes the many factors and prerequisite information that can influence an assessment. The book covers the following key aspects of security analysis:

  • When should the security architect begin the analysis?
  • At what points can a security architect add the most value?
  • What are the activities the architect must execute?
  • How are these activities delivered?
  • What is the set of knowledge domains applied to the analysis?
  • What are the outputs?
  • What are the tips and tricks that make security architecture risk assessment easier?

To help you build skill in assessing architectures for security, the book presents six sample assessments. Each assessment examines a different type of system architecture and introduces at least one new pattern for security analysis. The goal is that after you ve seen a sufficient diversity of architectures, you ll be able to understand varied architectures and can better see the attack surfaces and prescribe security solutions."

Citește tot Restrânge

Toate formatele și edițiile

Toate formatele și edițiile Preț Express
Paperback (1) 31029 lei  6-8 săpt.
  CRC Press – 30 iun 2021 31029 lei  6-8 săpt.
Hardback (1) 100410 lei  6-8 săpt.
  CRC Press – 20 mai 2015 100410 lei  6-8 săpt.

Preț: 100410 lei

Preț vechi: 125513 lei
-20% Nou

Puncte Express: 1506
Preț estimativ în valută:
19216€ • 20069$ • 15932£

Carte tipărită la comandă

Livrare economică 11-25 februarie 25

 Adaugă în coș

Wish list
Gift list
Am citit!
Adaugă în listă
Preluare comenzi: 021 569.72.76

Specificații

ISBN-13: 9781482233971
ISBN-10: 1482233975
Pagini: 440
Ilustrații: 50 black & white illustrations, 11 black & white tables
Dimensiuni: 178 x 254 x 30 mm
Greutate: 1.36 kg
Ediția:1
Editura: CRC Press
Colecția CRC Press
Locul publicării:Boca Raton, United States

Public țintă

Professional Practice & Development

Cuprins

Introduction. The Art of Security Assessment. Security Architecture of Systems. Information Security Risk. Prepare for Assessment. eCommerce Website. Enterprise Architecture. Business Analytics. Endpoint Anti-malware. Mobile Security Software with Cloud Management. Cloud Software as a Service (SaaS). Patterns and Governance Deliver Economies of Scale.

Notă biografică

Brook S.E. Schoenfield is Director of Product Security Architecture at Intel Security Group. He is the senior technical leader for software security across the division’s broad product portfolio. He has held leadership security architecture positions at high-tech companies for many years. Brook has presented at conferences such as RSA, BSIMM, and SANS What Works Summits on subjects within security architecture, including architecture risk assessment and threat models, information security risk, SaaS/Cloud security, and Agile security. He has been published by CRC Press, SANS, Cisco, and the IEEE.

Recenzii

"Brook Schoenfield has distilled a tremendous amount of practical experience and critical thinking about security architecture into a resource that should be extremely helpful to practitioners."
— Jack Jones, Originator of The Open Group Standard, Factor Analysis for Information Risk (FAIR)
"Five stars for Brook Schoenfield who has created a one-stop resource for both the security strategist/technologist and the executive suite, sounding the ‘proactive’ klaxon. The reader is given substantive exemplars on the practicality of architecting security solutions into the mix from the get-go, and obviating the tendency to ‘bolt on’ security at a later date. Securing Systems should be on every CSO’s and CISO’s desk, and referenced often as teams are built and security solutions architected."
— Christopher Burgess, CEO, Prevendra Inc, Author of Secrets Stolen, Fortunes Lost and Protecting Intellectual Property
"Brook Schoenfield’s approach to securing systems addresses the entire enterprise, not only its digital systems, as well as the processes and people who will interact, design, and build the systems. This book fills a significant gap in the literature and is appropriate for use as a resource for both aspiring and seasoned security architects alike."
— Dr. James F. Ransome, CISSP, CISM, Senior Director of Product Security at Intel Security Group and Co-Author of Core Software Security
"It is not good enough just to build something and try and secure it, it must be architected from the bottom up with security in it, by professionally trained and skilled security architects, checked and validated by regular assessments for weakness, and through a learning system that learns from today to inform tomorrow. We must succeed."
— John N. Stewart, SVP & Chief Security Officer, Cisco Security and Trust Organization and Winner of the CSO 40 Silver Award for the 2014 Chief Security Officer of the Year
"This book describes well why some companies are successful and some are not in the area of software security. Brook writes this book out of his own experiences from many years in the trade. I doubt that you can find many who have more years of great achievements in his field. By reading this book, you will get a fast track to build competence in a very advanced area. The possibilities to take the wrong route are much wider than you can imagine. Please do like me— read it and think how I can improve my daily business from what I have learned."
— Per-Olof Persson, Head of Software Security, Sony Mobile

Descriere

Internet attack on computer systems is pervasive. It can take from less than a minute to as much as eight hours for an unprotected machine connected to the Internet to be completely compromised. It is the information security architect s job to prevent attacks by securing computer systems. This book describes both the process and the practice of assessing a computer system s existing information security posture. Detailing the time-tested practices of experienced security architects, it explains how to deliver the right security at the right time in the implementation lifecycle.

Securing Systems: Applied Security Architecture and Threat Models covers all types of systems, from the simplest applications to complex, enterprise-grade, hybrid cloud architectures. It describes the many factors and prerequisite information that can influence an assessment. The book covers the following key aspects of security analysis:

  • When should the security architect begin the analysis?
  • At what points can a security architect add the most value?
  • What are the activities the architect must execute?
  • How are these activities delivered?
  • What is the set of knowledge domains applied to the analysis?
  • What are the outputs?
  • What are the tips and tricks that make security architecture risk assessment easier?

To help you build skill in assessing architectures for security, the book presents six sample assessments. Each assessment examines a different type of system architecture and introduces at least one new pattern for security analysis. The goal is that after you ve seen a sufficient diversity of architectures, you ll be able to understand varied architectures and can better see the attack surfaces and prescribe security solutions."