---

Review:
The preface states, quite clearly, that this is a work for designers, programmers, and implementors. In other words, it's a very technical book. Even the preface, though, is written with a clarity that is unusual, and refreshing, in technical literature. Chapter one provides some background to communications security and encryption. The material is demanding, and is definitely not a primer. A number of items are glossed over, but the persistent reader should be able to glean some very solid explanations of important concepts. The "family tree" of SSL (Secure Sockets Layer) is given in chapter two, with a description of the development steps along the way. Chapter three outlines the basic, or most common, mode of SSL, and then provid... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of SSL and TLS: Designing and Building Secure Systems

---

Book description
Until now, those preparing to take the Certified Information Systems Security Professional (CISSP) examination were not afforded the luxury of studying a single, easy-to-use manual. Written by ten subject matter experts (SMEs) - all CISSPs - this test prep book allows CISSP candidates to test their current knowledge in each of the ten security domains that make up the Common Body of Knowledge (CBK) from which the CISSP examination is based on. The Total CISSP Exam Prep Book: Practice Questions, Answers, and Test Taking Tips and Techniques provides an outline of the subjects, topics, and sub-topics contained within each domain in the CBK, and with it you can readily identify terms and concepts that you will need to know for the exam.The book... Rest of this review on the detail page
I want to add my review for this book!
Reviews (2) and details of The Total CISSP Exam Prep Book: Practice Questions, Answers, and Test Taking Tips and Techniques

---

Review:
The idea is simple, and even elegant. Given enough time and resources, somebody is going to be able to crack whatever security you put in place. Therefore, instead of building ever bigger and more imposing (and expensive) walls, balance how long it will take someone to get through the wall against how long it will take you to figure out that digging is going on and how long it will take you to stick a fire hose down a putative gopher hole. The idea isn't, of course, radically new. Community policing officers have been saying the same thing in public security seminars for years. Make the bad guy take longer to get in, and you'll have more time for someone to notice, or for us to get there. Implementation, though, is not quite so simpl... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Time Based Security

---

Review:
Does anyone else think it is ironic that this book is part of a series on *open* information management? No, I didn't think so. Part one is an introduction to Intelink, the intranet connecting the thirteen various agencies involved in the US intelligence community. Chapter one is a very superficial overview of some basics: who are the departments, packet networks, layered protocols, and so forth. The description of Intelink as a combination of groupware, data warehouse, and help desk, based on "commercial, off-the-shelf" (COTS) technology with Internet and Web protocols, in chapter two, should come as no big surprise. Part two looks at the implementation (well, a rather high level design, anyway) of Intelink. Chapter three reviews th... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of Top Secret Intranet: How U.S. Intelligence Built Intelink - the World's Largest, Most Secure Network

---

Review:
This book is intended to address the security needs of personal (or desktop) computers, and is one of the few that does. The content addresses those vulnerabilities which *do* plague workstations, and is generally free of "big iron" paranoia and concerns. Alexander's style is a bit flippant, but not at the expense of the information being conveyed. The organization is a trifle odd. (The first half of the "Safe Desktops and Laptops" chapter deals exclusively with passwords, even though few standalone machines use them. Password generators and challenge/response systems, however, are covered in the chapter on networks.) Technical details and specific suggestions do have a number of errors, particularly when dealing with MS-DOS. For ... Rest of this review on the detail page
(Review by Rob Slade)
I want to add my review for this book!
Reviews (1) and details of The Underground Guide to Computer Security: Slightly Askew Advice on Protecting Your PC and What's on It (Underground Guide Series)