Addison Wesley The New School of Information Security

Do you often feel like the money you spent on security is not really worth it? Or do you want security but don't know how or where to put your money? The New School of Information Security shows you new ways of thinking about and overcoming your most pressing security challenges. Security experts Adam Shostack and Andrew Stewart explain what critical problems exist in the security industry and how to solve them. The New School enables you to take control, while others struggle with non-stop crises. Why, after decades of hard work by some of the world's smartest people and billions of dollars invested, doesn't IT security seem to be getting any better? And what can you do about it? The authors offer a set of coherent, innovative solutions for both you and the security industry. Taking insights from diverse fields, Shostack and Stewart show you how to get the most relevant information for decision-making and make the smartest decisions about how you organize and invest in security. They show how new technologies will and won't help you deal with tomorrow's fundamental problems. And they identify specific, practical actions you can take now to improve security in your organization and throughout the industry.

Better evidence for better decision-making: Why the security Data you have doesn't support effective decision-making and what to do about it

Beyond security "silos": getting the job done together: Why it's so hard to improve security in isolation and how the entire industry can evolve to make it happen

Amateurs study cryptography; professionals study economics: What IT security leaders can and must learn from other scientific fields

A bigger bang for every buck: How to re-allocate your scarce resources where they'll do the most good