000 nam a22 4500
999 _c32161
_d32161
008 231001b xxu||||| |||| 00| 0 eng d
020 _a9780137929238
082 _a005.8
_bSPA
100 _aSpafford, Eugene H.
245 _aCybersecurity myths and misconceptions : avoiding the hazards and pitfalls that derail us
260 _bAddison Wesley,
_c2023
_aBoston :
300 _axxxv, 380 p. ;
_bill.,
_c23 cm
365 _b3709.88
_cINR
_d01
504 _aIncludes index.
520 _a175+ Cybersecurity Misconceptions and the Myth-Busting Skills You Need to Correct Them Cybersecurity is fraught with hidden and unsuspected dangers and difficulties. Despite our best intentions, there are common and avoidable mistakes that arise from folk wisdom, faulty assumptions about the world, and our own human biases. Cybersecurity implementations, investigations, and research all suffer as a result. Many of the bad practices sound logical, especially to people new to the field of cybersecurity, and that means they get adopted and repeated despite not being correct. For instance, why isn't the user the weakest link? In Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us, three cybersecurity pioneers don't just deliver the first comprehensive collection of falsehoods that derail security from the frontlines to the boardroom; they offer expert practical advice for avoiding or overcoming each myth. Whatever your cybersecurity role or experience, Eugene H. Spafford, Leigh Metcalf, and Josiah Dykstra will help you surface hidden dangers, prevent avoidable errors, eliminate faulty assumptions, and resist deeply human cognitive biases that compromise prevention, investigation, and research. Throughout the book, you'll find examples drawn from actual cybersecurity events, detailed techniques for recognizing and overcoming security fallacies, and recommended mitigations for building more secure products and businesses. Read over 175 common misconceptions held by users, leaders, and cybersecurity professionals, along with tips for how to avoid them. Learn the pros and cons of analogies, misconceptions about security tools, and pitfalls of faulty assumptions. What really is the weakest link? When aren't "best practices" best? Discover how others understand cybersecurity and improve the effectiveness of cybersecurity decisions as a user, a developer, a researcher, or a leader. Get a high-level exposure to why statistics and figures may mislead as well as enlighten. Develop skills to identify new myths as they emerge, strategies to avoid future pitfalls, and techniques to help mitigate them. "You are made to feel as if you would never fall for this and somehow this makes each case all the more memorable. ... Read the book, laugh at the right places, and put your learning to work. You won't regret it."--The Foreword by Vint Cerf, Internet Hall of Fame Pioneer Register your book for convenient access to downloads, updates, and/or corrections as they become available.
650 _aComputer security
650 _aCybersecurity Law
650 _aCybersecurity Misconceptions
650 _aAntivirus software
650 _aBase Rate Fallacy
650 _aCryptography
650 _aBotnet
650 _aFirewall
650 _aIP address
650 _aMagical Thinking
650 _aMultifactor authentication
650 _aPhishing
650 _aRansomware
650 _aVulnerability
700 _aMetcalf, Leigh
700 _aDykstra, Josiah
942 _2ddc
_cBK