Security De-Engineering

As hacker organizations surpass drug cartels in terms of revenue generation, it is clear that the good guys are doing something wrong in information security. Providing a simple foundational remedy for our security ills, Security De-Engineering: Solving the Problems in Information Risk Management is a definitive guide to the current problems i

Ian Tibble was an IT specialist with IBM Global Services before entering into the security arena. His experience of more than 11 years in information security allowed him to gain practical risk management expertise from both an architectural IT and a business analysis aspect. His experience in Infosec has been with service providers Trusecure (now Verizon) and PricewaterhouseCoopers, and also with end users in logistics, banking, and insurance. He has been engaged with security service delivery projects with close to 100 Fortune 500 companies and multinational financial institutions in Asia (Indonesia, Singapore, Malaysia, Taiwan, Hong Kong, and Australia) and Europe.

People and Blame. Whom Do You Blame? The Hackers. Checklists and Standards Evangelists. De-Engineering of Security. How Security Changed Post 2000. Automated Vulnerability Scanners. Eternal Yawn: Careers in Information Security. Penetration Testing-Old and New. Love of Clouds and Incidents-Vain Search for Validation. Security Products. Intrusion Detection. Other Products. Re-Engineering Of Security. One Professional Accreditation Program to Bind Them All. Index.