The New School of Information Security Book

Observing the World and Asking Why
Spam, and Other Problems with Email     4
Hostile Code     7
Security Breaches     9
Identity and the Theft of Identity     11
Should We Just Start Over?     14
The Need for a New School     15
The Security Industry
Where the Security Industry Comes From     19
Orientations and Framing     25
What Does the Security Industry Sell?     27
How Security Is Sold     33
On Evidence
The Trouble with Surveys     46
The Trade Press     50
Vulnerabilities     52
Instrumentation on the Internet     54
Organizations and Companies with Data     55
The Rise of the Security Breach
How Do Companies Lose Data?     64
Disclose Breaches     68
Possible Criticisms of Breach Data     70
Moving from Art to Science     74
Get Involved     76
Amateurs Study Cryptography; Professionals Study Economics
The Economics of Information Security     82
Psychology     95
Sociology     99
Spending
Reasons to Spend on Security Today     106
Non-Reasons to Spend on Security     110
Emerging Reasons to Spend     112
How Much Should a Business Spend on Security?     116
The Psychology of Spending     122
On What to Spend     126
Life in the New School
People Are People     132
Breach Data Is Not Actuarial Data     136
Powerful Externalities     137
The Human Computer Interface and Risk Compensation     139
The Use and Abuse of Language     142
Skills Shortages, Organizational Structure, and Collaboration     144
A Call to Action
Join the New School     149
Embrace the New School     153
Make Money from the New School     157
Final Words     159
Endnotes     161
Bibliography     213
Index     229