The world has changed radically since the first edition of this book was published in 2001. Spammers, virus writers, phishermen, money launderers, and spies now trade busily with each other in a lively online criminal economy and as they specialize, they get better. In this indispensable, fully updated guide, Ross Anderson reveals how to build systems that stay dependable whether faced with error or malice. Here's straight talk on critical topics such as technical engineering basics, types of attack, specialized protection mechanisms, security psychology, policy, and more.

The world has changed radically since the first edition of thisbook was published in 2001. Spammers, virus writers, phishermen,money launderers, and spies now trade busily with each other in alively online criminal economy and as they specialize, they getbetter. In this indispensable, fully updated guide, Ross Andersonreveals how to build systems that stay dependable whether facedwith error or malice. Here's straight talk on critical topics suchas technical engineering basics, types of attack, specializedprotection mechanisms, security psychology, policy, and more.

Preface to the Second Edition xxvForeword by Bruce Schneier xxviiPreface xxixAcknowledgments xxxvPart IChapter 1 What Is Security Engineering? 3Chapter 2 Usability and Psychology 17Chapter 3 Protocols 63Chapter 4 Access Control 93Chapter 5 Cryptography 129Chapter 6 Distributed Systems 185Chapter 7 Economics 215Part IIChapter 8 Multilevel Security 239Chapter 9 Multilateral Security 275Chapter 10 Banking and Bookkeeping 313Chapter 11 Physical Protection 365Chapter 12 Monitoring and Metering 389Chapter 13 Nuclear Command and Control 415Chapter 14 Security Printing and Seals 433Chapter 15 Biometrics 457Chapter 16 Physical Tamper Resistance 483Chapter 17 Emission Security 523Chapter 18 API Attacks 547Chapter 19 Electronic and Information Warfare 559Chapter 20 Telecom System Security 595Chapter 21 Network Attack and Defense 633Chapter 22 Copyright and DRM 679Chapter 23 The Bleeding Edge 727Part IIIChapter 24 Terror, Justice and Freedom 769Chapter 25 Managing the Development of Secure Systems 815Chapter 26 System Evaluation and Assurance 857Chapter 27 Conclusions 889Bibliography 893Index 997