Название: Secrets of a Cyber Security Architect
Автор: Brook S. E. Schoenfield
Издательство: Auerbach Publications
Год: 2019
Страниц: 254
Язык: английский
Формат: pdf (true)
Размер: 10.1 MB

Any organization with valuable data has been or will be attacked, probably successfully, at some point and with some damage. And, don't all digitally connected organizations have at least some data that can be considered 'valuable'?

By “system architectures” I meant to include any system that requires digital security, be it the architecture of a discrete application or program, a library or application programming interface (API), a global cloud, an organization’s digital assets, etc. Th ough my definition may have sufficed for the purposes of a book on threat modeling, it still feels a bit too opaque, and I fear that it excludes some important aspects.

This book is about security architecture. My goal is to refrain from theory and focus instead on practice. You will not find much theory in this book. I hope that I have provided just enough theory to place the materials into suffi cient context for full understanding. For a deeper explanation, I point the reader to any number of books on security architecture, including my own, Securing Systems, although that book was also intended to remain grounded in the practical and proven rather than being overly theoretical.

Good security architects have dozens of tricks of their trade in their kips. Herein, you will find my tips and tricks, as well as myriad tried and true bits of wisdom that my colleagues have been gracious enough to share with me.

Creating and implementing a cyber security architecture can be hard, complex, and certainly frustrating work. This book is written to ease this pain and show how to express security requirements in ways that make the requirements more palatable and, thus, get them accomplished. It also explains how to surmount individual, team, and organizational resistance. The book covers:

- What security architecture is and the areas of expertise a security architect needs in practice
- The relationship between attack methods and the art of building cyber defenses
- Why to use attacks and how to derive a set of mitigations and defenses
- Approaches, tricks, and manipulations proven successful for practicing security architecture
- Starting, maturing, and running effective security architecture programs
- Secrets of the trade for the practicing security architecture
- Tricks to surmount typical problems

Filled with practical insight, Secrets of a Cyber Security Architect is the desk reference every security architect needs to thwart the constant threats and dangers confronting every digitally connected organization.