Security Engineering

Viac o knihe

In a world where software permeates every aspect of life, ensuring security has become increasingly complex. This newly updated classic provides insights into engineering dependable systems. The third edition of this influential textbook by Cambridge University professor Ross Anderson teaches readers how to design, implement, and test systems resilient to errors and attacks. Originally published in 2001, it established the field of security engineering, and the second edition in 2008 addressed the rise of underground markets and user-targeted attacks, emphasizing usability in security design. The latest edition reflects the realities of 2020, where mobile devices dominate internet access, cloud servers are ubiquitous, and social networks shape human interaction. Anderson examines the evolving landscape of security threats, including the diverse range of attackers—from nation-states to criminal gangs—and their tactics like phishing, SIM swapping, and DDoS attacks. He also delves into security psychology, the economics behind vulnerable systems, and the challenges of online industries. The book concludes with a pressing question: how to achieve sustainable security in an era of rapid technological advancement, particularly for safety-critical systems like cars and medical devices. As we integrate more software into these goods, the challenge lies in designing systems that remain secure and maintainable over decades without r