---

Review:
Part one is an introduction to risks and risk evaluation. Chapter one is a generic, and not particularly clearly written, outline of a basic risk analysis process. The OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation) process is described in chapter two, along with various principles, factors (called attributes), and three phases of outputs (or deliverables) of the process. Part two presents more details of the method. Chapter three runs through the outcomes and attributes again, but in a confusing fashion. "Preparing for OCTAVE," in chapter four, is a fairly generic outline of preparation for any kind of planning. Chapter five begins a list of the individual processes of OCTAVE, but essentially says that th... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Managing Information Security Risks: The OCTAVE Approach

---

Review:
Defending Microsoft Windows against viruses requires careful attention to emerging technical alerts and diligence in installing manufacturers' latest patches and upgrades. You'll do a better job of keeping Windows secure if you have a body of background knowledge about security weaknesses in Windows and familiarity with good security practices. That, for the most part, is what Malicious Mobile Code is about. Roger Grimes shares facts, tells stories, and reveals technical details that will make you realize how serious a threat is posed by malicious mobile code (a catch-all term Grimes uses to describe viruses, Trojans, and the like). Further, his exposition will likely motivate you to take the precautions he recommends. Some of Grimes's advi... Rest of this review on the detail page
(Review by amazon.com)
I want to add my review for this book!
Reviews (3) and details of Malicious Mobile Code: Virus Protection for Windows (O'Reilly Computer Security)

---

Review:
This appears to be a hardcover "co-print" of Volume 25, Number 1, of the Journal of Library Administration. It talks about a wide range of security related issues, but also has significant weak points and holes in the coverage. Organization is random, with poor division according to the titular subject of the different papers. The organization also appears to be exactly backwards, with the first essay looking at what to do *after* you've been robbed, and the last discussing policy. Both quality and style vary from paper to paper. Those sections that do deal with law enforcement and reporting relate strictly to the United States, with one token mention of a British reporting group. While a number of important areas are touched on, and... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Management of Library and Archival Security: From the Outside Looking in

---

Review:
A massive volume covering a decidedly massive topic, NT 4 Network Security is a well-constructed collection of network-security jewels. The book starts out by breaking down basic security concepts and terminology, such as data theft, data communication security, and file system security. Subsequent portions discuss larger and more Windows NT-specific topics, such as Virtual Private Networking using the Microsoft Point to Point Tunneling Protocol and potential BackOffice security holes. In addition, the authors deal heavily with the issue of creating a coherent and logical corporate security policy. Not only do they weave policy suggestions into the book, but they also devote a chapter and appendix exclusively to the subject. In addition to... Rest of this review on the detail page
(Review by amazon.com)
I want to add my review for this book!
Reviews (3) and details of NT 4 Network Security

---

Review:
Part one is an overview, both of security and Windows NT. Chapter one's presentation of security basics has many good points, but also some unfortunate gaps and errors. The review of security concepts in NT provides a good grounding in how the matter is seen from Microsoft's perspective in chapter two. (It also has a rather interesting quick introduction to firewalls.) The NT architecture overview in chapter three does not really concentrate on security topics. When it does, the coverage of access control is reasonably clear, if not terribly readable. The Implementation of security, in part two, explains individual functions well but does not provide conceptual frameworks for security operations. Most of the material does provide th... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Windows Nt Server 4 Security Handbook