A GREAT Book on Security

A while ago, there was something called the Trusted Computing initiative.  Here is its marketing message. Sounds great, right?  I think the truth is probably closer to these Trusted Computing FAQs.  Just to make matters more confusing, there is also a Trustworthy Computing initiative.  According to Wikipedia, “More recently, Microsoft has adopted the term Trustworthy Computing as the title of a company initiative to improve public trust in its own commercial offerings.”

So, who wrote this information about the Trusted Computing initiative?  His name is Ross Anderson.  Ross Anderson is an AMAZING guy.  Talk about a knight in shining armor.  He has written a comprehensive, detailed book called Security Engineering.  I read it, and learned SO MUCH about computer security.  I wish all the software developers in the world would read it and adopt the things Ross writes about.  If you want to know more about computer security, buy the 2nd edition, and give this guy some returns on the incredible effort he went to to write and publish this.  Here are a few selected reviews:

‘I’m incredibly impressed that one person could produce such a thorough coverage. Moreover, you make the stuff easy and enjoyable to read. I find it just as entertaining — and far more useful — than novels (and my normal science fiction). When I first got it in the mail, I said to myself “I’m never going to read all of that.” But once I started reading I just kept going and going. Fantastic: well done. Now, let’s hope that all those in charge of security for information technology will also read the book and heed the lessons.’
Don Norman

‘The book that you MUST READ RIGHT NOW is the second edition of Ross Anderson’s Security Engineering book. Ross did a complete pass on his classic tome and somehow made it even better…’
Gary McGraw

‘It’s beautiful. This is the best book on the topic there is’
Bruce Schneier

 

Leave a Reply

You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>