HTTP/2 302 server: nginx date: Sat, 02 Aug 2025 18:53:05 GMT content-type: text/plain; charset=utf-8 content-length: 0 x-archive-redirect-reason: found capture at 20100105190013 location: https://web.archive.org/web/20100105190013/https://safari.oreilly.com/9780596801786 server-timing: captures_list;dur=0.621311, exclusion.robots;dur=0.028800, exclusion.robots.policy;dur=0.012098, esindex;dur=0.016820, cdx.remote;dur=8.144492, LoadShardBlock;dur=549.141891, PetaboxLoader3.datanode;dur=89.655181, PetaboxLoader3.resolve;dur=268.264253 x-app-server: wwwb-app203 x-ts: 302 x-tr: 585 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 set-cookie: wb-p-SERVER=wwwb-app203; path=/ x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 301 server: nginx date: Sat, 02 Aug 2025 18:53:06 GMT content-length: 0 x-archive-orig-content-length: 0 location: https://web.archive.org/web/20100105190013/https://my.safaribooksonline.com/9780596801786?portal=oreilly x-archive-orig-server: SWS + Microsoft-HTTPAPI/2.0 x-archive-orig-date: Tue, 05 Jan 2010 19:00:13 GMT x-archive-orig-connection: close x-archive-orig-set-cookie: Safari=cookieversion=2&portal=oreilly&key=&sessionid=267414a8-0f65-4954-b795-aab091ad0ec8&ref=Undefined&oref=http%3a%2f%2foreilly.com%2f; Path=/; Domain=safari.oreilly.com cache-control: max-age=1800 memento-datetime: Tue, 05 Jan 2010 19:00:13 GMT link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="first memento"; datetime="Tue, 05 Jan 2010 19:00:13 GMT", ; rel="memento"; datetime="Tue, 05 Jan 2010 19:00:13 GMT", ; rel="next memento"; datetime="Thu, 21 Oct 2010 09:08:44 GMT", ; rel="last memento"; datetime="Wed, 31 Aug 2011 11:11:28 GMT" content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org x-archive-src: TLA-20100105183421-00315-00324-ia360913-20100114113045-00000-c/TLA-20100105184320-00397-ia360906.us.archive.org.warc.gz server-timing: captures_list;dur=0.498068, exclusion.robots;dur=0.021661, exclusion.robots.policy;dur=0.009403, esindex;dur=0.012239, cdx.remote;dur=6.840711, LoadShardBlock;dur=341.289736, PetaboxLoader3.datanode;dur=212.129474, PetaboxLoader3.resolve;dur=302.277934, load_resource;dur=201.913610 x-app-server: wwwb-app203 x-ts: 301 x-tr: 585 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 302 server: nginx date: Sat, 02 Aug 2025 18:53:07 GMT content-type: text/plain; charset=utf-8 content-length: 0 x-archive-redirect-reason: found capture at 20110812041204 location: https://web.archive.org/web/20110812041204/https://my.safaribooksonline.com/9780596801786?portal=oreilly server-timing: captures_list;dur=0.766680, exclusion.robots;dur=0.028010, exclusion.robots.policy;dur=0.012727, esindex;dur=0.015771, cdx.remote;dur=8.605516, LoadShardBlock;dur=862.384247, PetaboxLoader3.datanode;dur=72.246443, PetaboxLoader3.resolve;dur=755.833849 x-app-server: wwwb-app203 x-ts: 302 x-tr: 902 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() HTTP/2 200 server: nginx date: Sat, 02 Aug 2025 18:53:08 GMT content-type: text/html; charset=utf-8 x-archive-orig-expires: Mon, 05 Apr 1970 03:12:07 GMT x-archive-orig-server: SWS + Microsoft-HTTPAPI/2.0 x-archive-orig-cache-control: private x-archive-orig-p3p: CP="CAO DSP COR LAW CUR ADMi DEVi PSAi IVAi IVDi CONo HISi TELo OUR IND UNI" x-archive-orig-date: Fri, 12 Aug 2011 04:12:05 GMT x-archive-orig-connection: close x-archive-orig-set-cookie: Safari=cookieversion=2&cookie-monster=false&portal=oreilly&key=&sessionid=0ce581fe-59f9-45e7-9c8c-0042461fa23c&ref=Undefined&oref=%2f; Path=/; Domain=my.safaribooksonline.com x-archive-orig-set-cookie: cookie-monster=true; Path=/; Expires=Thu, 12 Aug 2021 04:12:04 GMT x-archive-guessed-content-type: text/html x-archive-guessed-charset: utf-8 memento-datetime: Fri, 12 Aug 2011 04:12:04 GMT link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="first memento"; datetime="Fri, 12 Aug 2011 04:12:04 GMT", ; rel="memento"; datetime="Fri, 12 Aug 2011 04:12:04 GMT", ; rel="last memento"; datetime="Fri, 12 Aug 2011 04:12:04 GMT" content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org x-archive-src: WIDE-20110812041151-crawl416/WIDE-20110812041151-00216.warc.gz server-timing: captures_list;dur=0.472117, exclusion.robots;dur=0.018628, exclusion.robots.policy;dur=0.009056, esindex;dur=0.008600, cdx.remote;dur=7.634200, LoadShardBlock;dur=647.838788, PetaboxLoader3.datanode;dur=106.142983, PetaboxLoader3.resolve;dur=643.884923, load_resource;dur=237.317152 x-app-server: wwwb-app203 x-ts: 200 x-tr: 1023 server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0 x-location: All x-rl: 0 x-na: 0 x-page-cache: MISS server-timing: MISS x-nid: DigitalOcean referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() content-encoding: gzip

Content Tabs

• Home
• Subscribe
• Free Trial

• Category Map
• My Quick Links
  • Books
  • Video
  • Rough Cuts
  • Short Cuts
  • Tools

Search:criteria:Entire SiteBook/Video TitlesShort CutsRough Cuts

Sign In

• Beautiful Security

• By: Andy Oram; John Viega

• Publisher: O'Reilly Media, Inc.

• Pub. Date: April 28, 2009

• Print ISBN-13: 978-0-596-52748-8

• Pages in Print Edition: 304

• Amazon.com® Reviews

• Subscriber Rating: [2 Ratings]

• Overview
• Table of Contents
• Extras
• Search This Book
• Help

Amazon.com Reader Reviews • Subscriber Reviews • Browse Similar Topics

Overview

Top Sellers in this Category

Hacking: The Art of Exploitation, 2nd Edition
by Jon Erickson

Social Engineering: The Art of Human Hacking
by Christopher Hadnagy

Malware Analyst's Cookbook and DVD: Tools and Techniques for Fighting Malicious Code
by Michael Hale Ligh; Steven Adair; Blake Hartstein; Matthew Richard

The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws
by Dafydd Stuttard; Marcus Pinto

Hacking For Dummies® 3rd Edition
by Kevin Beaver

Although most people don't give security much attention until their personal or business systems are attacked, this thought-provoking anthology demonstrates that digital security is not only worth thinking about, it's also a fascinating topic. Criminals succeed by exercising enormous creativity, and those defending against them must do the same. Beautiful Security explores this challenging subject with insightful essays and analysis on topics that include:

• The underground economy for personal information: how it works, the relationships among criminals, and some of the new ways they pounce on their prey

• How social networking, cloud computing, and other popular trends help or hurt our online security

• How metrics, requirements gathering, design, and law can take security to a higher level

• The real, little-publicized history of PGP

This book includes contributions from:

• Peiter "Mudge" Zatko

• Jim Stickley

• Elizabeth Nichols

• Chenxi Wang

• Ed Bellis

• Ben Edelman

• Phil Zimmermann and Jon Callas

• Kathy Wang

• Mark Curphey

• John McManus

• James Routh

• Randy V. Sabett

• Anton Chuvakin

• Grant Geyer and Brian Dunphy

• Peter Wayner

• Michael Wood and Fernando Francisco

All royalties will be donated to the Internet Engineering Task Force (IETF).

Subscriber Reviews

Average Rating:  Based on 2 Ratings

No Subscribers have provided a review for this book.

Browse Similar Topics

Top Level Categories:
Information Technology & Software Development

Sub-Categories:
Information Technology & Software Development > Networking
Networking > Security

Some information on this page was provided using data from Amazon.com®. View at Amazon >

Table of Contents

 

Copyright

Dedication

Preface

Section P.1. Why Security Is Beautiful

Section P.2. Audience for This Book

Section P.3. Donation

Section P.4. Organization of the Material

Section P.5. Conventions Used in This Book

Section P.6. Using Code Examples

Section P.7. Safari® Books Online

Section P.8. How to Contact Us

Download Chapter
1 TokenChapter 1. Psychological Security Traps

Section 1.1. Learned Helplessness and Naïveté

Section 1.2. Confirmation Traps

Section 1.3. Functional Fixation

Section 1.4. Summary

Download Chapter
1 TokenChapter 2. Wireless Networking: Fertile Ground for Social Engineering

Section 2.1. Easy Money

Section 2.2. Wireless Gone Wild

Section 2.3. Still, Wireless Is the Future

Download Chapter
1 TokenChapter 3. Beautiful Security Metrics

Section 3.1. Security Metrics by Analogy: Health

Section 3.2. Security Metrics by Example

Section 3.3. Summary

Chapter 4. The Underground Economy of Security Breaches

Section 4.1. The Makeup and Infrastructure of the Cyber Underground

Section 4.2. The Payoff

Section 4.3. How Can We Combat This Growing Underground Economy?

Section 4.4. Summary

Download Chapter
1 TokenChapter 5. Beautiful Trade: Rethinking E-Commerce Security

Section 5.1. Deconstructing Commerce

Section 5.2. Weak Amelioration Attempts

Section 5.3. E-Commerce Redone: A New Security Model

Section 5.4. The New Model

Download Chapter
1 TokenChapter 6. Securing Online Advertising: Rustlers and Sheriffs in the New Wild West

Section 6.1. Attacks on Users

Section 6.2. Advertisers As Victims

Section 6.3. Creating Accountability in Online Advertising

Download Chapter
1 TokenChapter 7. The Evolution of PGP’s Web of Trust

Section 7.1. PGP and OpenPGP

Section 7.2. Trust, Validity, and Authority

Section 7.3. PGP and Crypto History

Section 7.4. Enhancements to the Original Web of Trust Model

Section 7.5. Interesting Areas for Further Research

Section 7.6. References

Download Chapter
1 TokenChapter 8. Open Source Honeyclient: Proactive Detection of Client-Side Exploits

Section 8.1. Enter Honeyclients

Section 8.2. Introducing the World’s First Open Source Honeyclient

Section 8.3. Second-Generation Honeyclients

Section 8.4. Honeyclient Operational Results

Section 8.5. Analysis of Exploits

Section 8.6. Limitations of the Current Honeyclient Implementation

Section 8.7. Related Work

Section 8.8. The Future of Honeyclients

Download Chapter
1 TokenChapter 9. Tomorrow’s Security Cogs and Levers

Section 9.1. Cloud Computing and Web Services: The Single Machine Is Here

Section 9.2. Connecting People, Process, and Technology: The Potential for Business Process Management

Section 9.3. Social Networking: When People Start Communicating, Big Things Change

Section 9.4. Information Security Economics: Supercrunching and the New Rules of the Grid

Section 9.5. Platforms of the Long-Tail Variety: Why the Future Will Be Different for Us All

Section 9.6. Conclusion

Section 9.7. Acknowledgments

Download Chapter
1 TokenChapter 10. Security by Design

Section 10.1. Metrics with No Meaning

Section 10.2. Time to Market or Time to Quality?

Section 10.3. How a Disciplined System Development Lifecycle Can Help

Section 10.4. Conclusion: Beautiful Security Is an Attribute of Beautiful Systems

Download Chapter
1 TokenChapter 11. Forcing Firms to Focus: Is Secure Software in Your Future?

Section 11.1. Implicit Requirements Can Still Be Powerful

Section 11.2. How One Firm Came to Demand Secure Software

Section 11.3. Enforcing Security in Off-the-Shelf Software

Section 11.4. Analysis: How to Make the World’s Software More Secure

Download Chapter
1 TokenChapter 12. Oh No, Here Come the Infosecurity Lawyers!

Section 12.1. Culture

Section 12.2. Balance

Section 12.3. Communication

Section 12.4. Doing the Right Thing

Download Chapter
1 TokenChapter 13. Beautiful Log Handling

Section 13.1. Logs in Security Laws and Standards

Section 13.2. Focus on Logs

Section 13.3. When Logs Are Invaluable

Section 13.4. Challenges with Logs

Section 13.5. Case Study: Behind a Trashed Server

Section 13.6. Future Logging

Section 13.7. Conclusions

Download Chapter
1 TokenChapter 14. Incident Detection: Finding the Other 68%

Section 14.1. A Common Starting Point

Section 14.2. Improving Detection with Context

Section 14.3. Improving Perspective with Host Logging

Section 14.4. Summary

Download Chapter
1 TokenChapter 15. Doing Real Work Without Real Data

Section 15.1. How Data Translucency Works

Section 15.2. A Real-Life Example

Section 15.3. Personal Data Stored As a Convenience

Section 15.4. Trade-offs

Section 15.5. Going Deeper

Section 15.6. References

Download Chapter
1 TokenChapter 16. Casting Spells: PC Security Theater

Section 16.1. Growing Attacks, Defenses in Retreat

Section 16.2. The Illusion Revealed

Section 16.3. Better Practices for Desktop Security

Section 16.4. Conclusion

Download Chapter
1 Tokenafterword A: Contributors

Colophon

Index

Extras

The publisher has provided additional content related to this title.

Description	Content
Visit the catalog page for Beautiful Security	Catalog Page
Visit the errata page for Beautiful Security	Errata

---

About Safari Books Online • Terms of Service • Gift Subscriptions • Privacy Policy • Contact Us • Corporate Licenses • Help • Accessibility |

Copyright 2011Safari Books Online. All rights reserved.