Amazon | Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us | Spafford, Eugene, Metcalf, Leigh, Dykstra, Josiah

{"desktop_buybox_group_1":[{"displayPrice":"EUR 38.39","priceAmount":38.39,"currencySymbol":"EUR","integerValue":"38","decimalSeparator":".","fractionalValue":"39","symbolPosition":"left","hasSpace":true,"showFractionalPartIfEmpty":true,"offerListingId":"OLTBM6VMC1ghO86OMzDHJSESB4jrJyCamCrAr%2BC2GjU9qXB5FdrN6l0QNuCVGXnjeLOb%2B8qPDweiB%2F0lx2xFZVI8CWya6TCFvitmSP99VWQmxQfmAPmjpa7IthqwhKA96Mp%2BIf6NooVLiBJ0uV1Mhpe4iFyk5mFPrNwwkuNKyI4YXMlzlZxBlLqYAzFIoWzY","locale":"ja-JP","buyingOptionType":"NEW","aapiBuyingOptionIndex":0}]}

購入オプションとあわせ買い

175+ Cybersecurity Misconceptions and the Myth-Busting Skills You Need to Correct Them

Elected into the Cybersecurity Canon Hall of Fame!

Cybersecurity is fraught with hidden and unsuspected dangers and difficulties. Despite our best intentions, there are common and avoidable mistakes that arise from folk wisdom, faulty assumptions about the world, and our own human biases. Cybersecurity implementations, investigations, and research all suffer as a result. Many of the bad practices sound logical, especially to people new to the field of cybersecurity, and that means they get adopted and repeated despite not being correct. For instance, why isn't the user the weakest link?

In Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us, three cybersecurity pioneers don't just deliver the first comprehensive collection of falsehoods that derail security from the frontlines to the boardroom; they offer expert practical advice for avoiding or overcoming each myth.

Whatever your cybersecurity role or experience, Eugene H. Spafford, Leigh Metcalf, and Josiah Dykstra will help you surface hidden dangers, prevent avoidable errors, eliminate faulty assumptions, and resist deeply human cognitive biases that compromise prevention, investigation, and research. Throughout the book, you'll find examples drawn from actual cybersecurity events, detailed techniques for recognizing and overcoming security fallacies, and recommended mitigations for building more secure products and businesses.

Read over 175 common misconceptions held by users, leaders, and cybersecurity professionals, along with tips for how to avoid them.
Learn the pros and cons of analogies, misconceptions about security tools, and pitfalls of faulty assumptions. What really is the weakest link? When aren't "best practices" best?
Discover how others understand cybersecurity and improve the effectiveness of cybersecurity decisions as a user, a developer, a researcher, or a leader.
Get a high-level exposure to why statistics and figures may mislead as well as enlighten.
Develop skills to identify new myths as they emerge, strategies to avoid future pitfalls, and techniques to help mitigate them.

"You are made to feel as if you would never fall for this and somehow this makes each case all the more memorable. . . . Read the book, laugh at the right places, and put your learning to work. You won't regret it."
--From the Foreword by Vint Cerf, Internet Hall of Fame Pioneer

Register your book for convenient access to downloads, updates, and/or corrections as they become available. See inside book for details.

この商品に関する問題を報告する

本の長さ

416ページ
言語

英語
出版社

Addison-Wesley Professional
発売日

2023/1/23
寸法

17.78 x 2.16 x 22.86 cm
ISBN-10

0137929234
ISBN-13

978-0137929238

すべての詳細を表示

商品の説明

レビュー

"Many security leaders are traditionally in charge of correcting misconceptions just as much as they are in charge of building up solid security practices. We have plenty of resources on practices--but this book is the crucial guide to that essential myth busting."
--Phil Venables, CISO, Google Cloud

"I'm writing this on my phone, over Wi-Fi, in an airplane on my way to Black Hat, one of the world's largest security conferences. The fact that I'm able to do this at all shows how much we've really learned about cybersecurity over the decades. Now it's all collected in one place for everyone to share. Thank the wise authors, and most importantly: GET OFF THEIR LAWN."
--Wendy Nather, Head of Advisory CISOs, Cisco

"This book is astounding. A true tour de force--which I have never said about any other book. Inverting the viewpoint is a stroke of genius. This is going to be on my grabbable-at-any-time shelf. What I learned, recalled, and was refreshed on with technically astute agnosticism cannot be measured; just appreciated as a profound historical compilation of security practice and theory. Bravo!"
--Winn Schwartaul, Founder and Chief Visionary Officer, The Security Awareness Company

"I am happy to endorse the central idea of this book--that cybersecurity is rife with myths that are themselves part of the problem. The brain wants to understand, the world grows ever more complicated, and the sum of the two is myth-making. As the authors say, even if some understanding is true at some time, with enough change what was true becomes a myth soon enough. As such, an acquired immunity to myths is a valuable skill for the cybersecurity practitioner if no other. The paramount goal of all security engineering is No Silent Failure, but myths perpetuate if not create silent failure. Why? Because a state of security is the absence of unmitigable surprise and you cannot mitigate what you don't know is going on. Myths blind us to reality. Ignorance of them is not bliss. This book is a vaccine."
--Dan Geer, CISO, In-Q-Tel

"This is a fun read for all levels. I like their rapid fire delivery and the general light they cast on so many diverse myths. This book will change the cybersecurity industry for the better."
--Michael Sikorski, Author of Practical Malware Analysis & CTO, Unit 42 at Palo Alto Networks

著者について

Eugene H. Spafford, PhD, is a professor in Computer Science at Purdue University. In his 35-year career, Spaf has been honored with every major award in cybersecurity. Leigh Metcalf, PhD, is a Senior Network Security Research Analyst at the Carnegie Mellon University Software Engineering Institute's cybersecurity-focused CERT® division. Josiah Dykstra, PhD, is a cybersecurity practitioner, researcher, author, and speaker. He is the owner of Designer Security and has worked at the US National Security Agency for 18 years.

登録情報

出版社 ‏ : ‎ Addison-Wesley Professional; 第1版 (2023/1/23)
発売日 ‏ : ‎ 2023/1/23
言語 ‏ : ‎ 英語
ペーパーバック ‏ : ‎ 416ページ
ISBN-10 ‏ : ‎ 0137929234
ISBN-13 ‏ : ‎ 978-0137929238
寸法 ‏ : ‎ 17.78 x 2.16 x 22.86 cm
Amazon 売れ筋ランキング: 洋書 - 388,754位 (洋書の売れ筋ランキングを見る)
- Computer Privacy - 719位
- Computer & Internet Culture - 1,006位
- Computer Network Security - 1,073位
カスタマーレビュー:
47個の評価

著者について

著者をフォローして、新作のアップデートや改善されたおすすめを入手してください。

Josiah Dykstra
Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.
著者の本をもっと見つけたり、似たような著者を調べたり、おすすめの本を読んだりできます。
著者ページでもっと見る
Eugene Spafford
Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.
著者の本をもっと見つけたり、似たような著者を調べたり、おすすめの本を読んだりできます。
著者ページでもっと見る
Leigh Metcalf
Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.
著者の本をもっと見つけたり、似たような著者を調べたり、おすすめの本を読んだりできます。
著者ページでもっと見る

カスタマーレビュー

47グローバルレーティング

評価はどのように計算されますか?

他の国からのトップレビュー

すべてのレビューを日本語に翻訳

Violet Sullivan
Unraveling the Truths of Cybersecurity: A Guide to Myth-Busting and Practical Wisdom
2023年6月9日にアメリカ合衆国でレビュー済み
フォーマット: ペーパーバックAmazonで購入

Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us" is an illuminating masterpiece penned by three cybersecurity pioneers: Eugene H. Spafford, Leigh Metcalf, and Josiah Dykstra. This remarkable book unravels the hidden dangers, faulty assumptions, and cognitive biases that plague the field of cybersecurity, providing readers with expert guidance on avoiding and overcoming these common misconceptions.

In a world where cybersecurity is increasingly critical, it is vital to challenge and debunk the myths that hinder progress and compromise security efforts. The authors delve deep into the web of falsehoods that permeate the industry, addressing misconceptions from the frontlines to the boardroom. By presenting real-world examples and drawing from their vast experience, they empower readers to recognize and overcome these myths, ultimately building more secure products, businesses, and practices.

One of the key insights the authors bring forth is the fallacy of considering users as the weakest link in cybersecurity. Through their compelling arguments, they shed light on the complex dynamics involved and the shared responsibility that exists between users, developers, researchers, and leaders. This fresh perspective challenges conventional wisdom and highlights the need for a holistic approach to cybersecurity.

"Cybersecurity Myths and Misconceptions" stands out for its pragmatic and actionable advice. The book not only identifies common misconceptions but also provides practical strategies and recommended mitigations for combating them. From analogies and security tools to the pitfalls of faulty assumptions and misguided "best practices," the authors leave no stone unturned. Each myth is carefully examined, empowering readers to make informed decisions and enhance their cybersecurity defenses.

The authors' ability to bridge the gap between technical concepts and everyday understanding is commendable. They effectively communicate complex ideas, making the book accessible to readers with varying levels of expertise. By weaving in real-life cybersecurity events, the authors make the material engaging, relatable, and thought-provoking.

"Cybersecurity Myths and Misconceptions" is not just a book; it is a guide for navigating the treacherous landscape of cybersecurity. Its comprehensive coverage, insightful analysis, and practical advice make it an essential resource for cybersecurity professionals, leaders, developers, researchers, and even those new to the field. It equips readers with the skills to identify emerging myths, avoid future pitfalls, and contribute to a safer digital world.

Spafford, Metcalf, and Dykstra have come together to create a seminal work that challenges conventional thinking, enhances understanding, and paves the way for a more secure cyber landscape. Whether you are seeking to deepen your knowledge or simply gain a high-level exposure to cybersecurity concepts, "Cybersecurity Myths and Misconceptions" is a must-read.

Prepare to embark on a transformative journey and emerge armed with the knowledge to dismantle the falsehoods that threaten our digital realm.

続きを読む

Violet Sullivan

Unraveling the Truths of Cybersecurity: A Guide to Myth-Busting and Practical Wisdom

2023年6月9日にアメリカ合衆国でレビュー済み
Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us" is an illuminating masterpiece penned by three cybersecurity pioneers: Eugene H. Spafford, Leigh Metcalf, and Josiah Dykstra. This remarkable book unravels the hidden dangers, faulty assumptions, and cognitive biases that plague the field of cybersecurity, providing readers with expert guidance on avoiding and overcoming these common misconceptions.

In a world where cybersecurity is increasingly critical, it is vital to challenge and debunk the myths that hinder progress and compromise security efforts. The authors delve deep into the web of falsehoods that permeate the industry, addressing misconceptions from the frontlines to the boardroom. By presenting real-world examples and drawing from their vast experience, they empower readers to recognize and overcome these myths, ultimately building more secure products, businesses, and practices.

One of the key insights the authors bring forth is the fallacy of considering users as the weakest link in cybersecurity. Through their compelling arguments, they shed light on the complex dynamics involved and the shared responsibility that exists between users, developers, researchers, and leaders. This fresh perspective challenges conventional wisdom and highlights the need for a holistic approach to cybersecurity.

"Cybersecurity Myths and Misconceptions" stands out for its pragmatic and actionable advice. The book not only identifies common misconceptions but also provides practical strategies and recommended mitigations for combating them. From analogies and security tools to the pitfalls of faulty assumptions and misguided "best practices," the authors leave no stone unturned. Each myth is carefully examined, empowering readers to make informed decisions and enhance their cybersecurity defenses.

The authors' ability to bridge the gap between technical concepts and everyday understanding is commendable. They effectively communicate complex ideas, making the book accessible to readers with varying levels of expertise. By weaving in real-life cybersecurity events, the authors make the material engaging, relatable, and thought-provoking.

"Cybersecurity Myths and Misconceptions" is not just a book; it is a guide for navigating the treacherous landscape of cybersecurity. Its comprehensive coverage, insightful analysis, and practical advice make it an essential resource for cybersecurity professionals, leaders, developers, researchers, and even those new to the field. It equips readers with the skills to identify emerging myths, avoid future pitfalls, and contribute to a safer digital world.

Spafford, Metcalf, and Dykstra have come together to create a seminal work that challenges conventional thinking, enhances understanding, and paves the way for a more secure cyber landscape. Whether you are seeking to deepen your knowledge or simply gain a high-level exposure to cybersecurity concepts, "Cybersecurity Myths and Misconceptions" is a must-read.

Prepare to embark on a transformative journey and emerge armed with the knowledge to dismantle the falsehoods that threaten our digital realm.

このレビューの画像

レポート
レビューを日本語に翻訳する
DennisD
This book summarizes practical knowledge that it took me 50 years to learn firsthand.
2023年3月24日にアメリカ合衆国でレビュー済み
フォーマット: Kindle版 (電子書籍)Amazonで購入
This book is a gem and I highly recommend it. Cybersecurity is a relatively new field continuously built upon the work of giants like Becky Bace, Bob Courtney, et. al., and the authors respectfully acknowledge that. A few of us had the honor to learn cybersecurity firsthand from them. Spaf and his co-authors have distilled the essence of what is true and worth knowing, and what is false and worth forgetting, and how best to use that knowledge to protect digital assets on a playing field where the goalposts move every day. Efficiency is doing things right. Effectiveness is doing the right things. Cybersecurity is both. The book is an enjoyable read, cites references for further reading, and is appropriate for both novices and experts alike. We each know parts of the story. This book tells much, if not most all of the story.

続きを読む
レポート
レビューを日本語に翻訳する
Bill E
Outstanding Read: Well Worth It For Anyone Who Wants to Understand Cybersecurity
2023年9月15日にアメリカ合衆国でレビュー済み
フォーマット: ペーパーバックAmazonで購入
Terrific book for any director who wants to learn more about constructively overseeing cybersecurity, while providing space & resources for the CISO and team to effectively do their job. In a clear and entertaining way, Spafford, Metcalf, & Dykstra use plain English to demystify technical jargon and prevalent myths. I learned a ton not only about cyber, but also about risk management in general, as well as the range of human biases we all bring to the table. One of my favorite chapters explained confusion matrices, false positives, false negatives, and the danger of a low signal:noise ratio [Chicken Little Risk] in cyber defense. Well worth your time.

続きを読む
レポート
レビューを日本語に翻訳する
Laura L. B.
Informative and Engaging
2023年10月21日にアメリカ合衆国でレビュー済み
フォーマット: ペーパーバックAmazonで購入
This book will appeal to both seasoned cyber security experts and those new to the subject. It covers a lot of important security topics, aptly covers several myths, and is written in an engaging and easy-to-read style. I am buying copies for family and friends as holiday gifts.

続きを読む
レポート
レビューを日本語に翻訳する

レビューをすべて見る

画像はありません

著者をフォローする