Enterprise Security: IT Security Solutions: Concepts, Practical Experiences, Technologies [Hardcover]

Walter Fumy (Editor), Jörg Sauerbrey (Editor)

Book Description

ISBN-10: 389578267X | ISBN-13: 978-3895782671 | Publication Date: March 13, 2006 | Edition: 1

Addressing IT managers and staff, as well as CIOs and other executives dealing with corporate IT security, this book provides a broad knowledge on the major security issues affecting today's corporations and organizations, and presents state-of-the-art concepts and current trends for securing an enterprise.
Areas covered include information security management, network and system security, identity and access management (IAM), authentication (including smart card based solutions and biometrics), and security certification. In-depth discussion of relevant technologies and standards (including cryptographic techniques, intelligent tokens, public key infrastructures, IAM technologies) is provided.
The book features detailed discussions of practical experiences in different sectors, including the automotive industry, financial services, e-health, and e-government.

Editorial Reviews

Review

"Technical readers can get a business case orientation, while managers and consultant…can use it to fill the technical gaps in their understanding." (Computing Reviews.com, August 22, 2007)

"…an interesting book that contains practical material that will be instructive to novices and experts alike…very useful for security professionals looking to hone and update their skills." (Computing Reviews.com, March 27, 2007)

"…a valuable primer for consultants and non-tech-savvy managers who are seeking to get their minds around security …" (Blogcritics.org, May 29, 2006)

From the Back Cover

Enterprise Security

Addressing IT managers and staff, as well as CIOs and other executives dealing with corporate IT security, this book provides a broad knowledge on the major security issues affecting today's Corporations and Organizations, and presents state-of-the-art concepts and current trends for securing an enterprise.

Areas covered include information security management (including security certification), network and system security, identify and access management (IAM), and authentication (including smart card based solutions and biometrics). In-depth discussion of relevant technologies and standards (including cryptographic techniques, public key infrastructures, IAM technologies)is provided.

The book features detailed discussions of practical experiences in different sectors.

See all Editorial Reviews

Product Details

• Hardcover: 264 pages
• Publisher: Wiley-VCH; 1 edition (March 13, 2006)
• Language: English
• ISBN-10: 389578267X
• ISBN-13: 978-3895782671
• Product Dimensions: 9.9 x 6.8 x 0.6 inches
• Shipping Weight: 1.3 pounds (View shipping rates and policies)
• Average Customer Review: 3.5 out of 5 stars  See all reviews (2 customer reviews)
• Amazon Best Sellers Rank: #2,737,975 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

4 of 4 people found the following review helpful:

4.0 out of 5 stars Solid book for infosec consultants, August 13, 2006

By 

John C. A. Bambenek (Champaign, IL) - See all my reviews
(REAL NAME)   

This review is from: Enterprise Security: IT Security Solutions: Concepts, Practical Experiences, Technologies (Hardcover)

This book has the look and feel of a business school textbook, moving from topic to topic in a fairly academic matter. It is a combination of 14 essays from prominent authors in the topics they are writing on. This allows for a book that can treat a wide range of concepts and still maintain credibility and a tone of expertise with the downside being the structure of each essay is slightly different between authors. As such, it is meant more as a higher-level introduction to concepts and ideas that swirl around the information security industry but it is couched in the language of business in the hopes that enterprises will adopt a measure of culture change in the area of security. The book seems to have a more European focus, but it is not without value to an American audience.

The book begins with an introduction by the editors laying out what they view as three areas driving enterprise security and what they hope to accomplish with the book. They finger security threats, creating new business opportunities, and regulatory compliance as the main drivers of security investment for the enterprise. In their experience, the editors see businesses still creating processes and applications designed around speed and convenience with security being an afterthought. The editors then establish 4 items they wish to see changed in industry: review of information security requirements, assuming legal liability for poor security practices (it'll never happen), creating a security-aware culture, and security against insider threats. The rest of the book doesn't seem to truly address how to bring these four changes to fruition.

The rest of the book is divided into three sections: (1) Concepts & Trends (better described as emerging security technologies), (2) Practical Experiences, and (3) Technologies & Standards. As far as organization, it would seem better to have Practical Experiences come last in the book and address the technologies discussed previously; however this is not a serious deficiency in the book.

Parts 1 and 3 are presented to the reader from a high-level perspective. It assumes little prior technical knowledge and thus is accessible to a wide audience, particularly the business community. It helps the reader understand why these technologies are beneficial from an economic standpoint. Readers who are technically savvy may get easily bored from this section unless they are trying to develop a "business case" for the adoption of security mechanisms for their organization. In that regard, these essays help bridge the gap between "tech heads" and the "pointy-haired management".

The Practical Experience section is a collection of four case studies of four different organizations facing four different problems. It helps the reader to understand the challenges and obstacles in actual implementation of technologies. It helps bridge the gap between book-learning and real-world experience. 3 of the 4 essays revolve around PKI and digital identities. It is clear based on the focus of the editors that authentication is important to them, however and expansion of case studies based on their other goals would make the text that much more effective.

All in all, the book is a valuable primer for consultants and non-savvy managers who are seeking to get their minds around security and how best to sell the investment of security.

3.0 out of 5 stars Security Review, June 10, 2007

By 

David B. Schacht (Boston, MA) - See all my reviews
(REAL NAME)   

This review is from: Enterprise Security: IT Security Solutions: Concepts, Practical Experiences, Technologies (Hardcover)

This book gives a good theoretical overview on the topic. It is short, though, on actual practical real-world solutions in the IAM space.