Secrets and Lies

Bruce Schneier is an internationally renowned security technologist, called a "security guru" by The Economist. He is the author of twelve books—including his seminal work, Applied Cryptography: Protocols, Algorithms, and Source Code in C, and Secrets & Lies: Digital Security in a Networked World as well as hundreds of articles, essays, and academic papers. His influential newsletter "Crypto-Gram" and blog "Schneier on Security" are read by over 250,000 people. Schneier is a fellow at the Berkman Center for Internet and Society at Harvard Law School, a program fellow at the New America Foundation's Open Technology Institute, a board member of the Electronic Frontier Foundation, and an Advisory Board member of the Electronic Privacy Information Center. He is also the Chief Technology Officer of Resilient Systems, Inc. You can read his blog, essays, and academic papers at www.schneier.com. He tweets at @schneierblog.

• Foreword to 201515th Anniversary Edition ixIntroduction From the Paperback Edition xiiiPreface xxiiiAbout the Author xxvii1. Introduction 1Part 1: The Landscape 112. Digital Threats 143. Attacks 234. Adversaries 425. Security Needs 59Part 2: Technologies 836. Cryptography 857. Cryptography in Context 1028. Computer Security 1209. Identification and Authentication 13510. Networked-Computer Security 15111. Network Security 17612. Network Defenses 18813. Software Reliability 20214. Secure Hardware 21215. Certificates and Credentials 22516. Security Tricks 24017. The Human Factor 255Part 3: Strategies 27118. Vulnerabilities and the Vulnerability Landscape 27419. Threat Modeling and Risk Assessment 28820. Security Policies and Countermeasures 30721. Attack Trees 31822. Product Testing and Verification 33423. The Future of Products 35324. Security Processes 36725. Conclusion 389Afterword 396Resources 399Acknowledgments 401Index 403