Information Warfare and Security (Paperback)

~ (Author)

Editorial Reviews

Review

Dorothy Denning is one of the world's most respected computer-security experts. She's also the author of the now-classic Cryptography and Data Security (Addison-Wesley, 1982) and a professor of computer science at Georgetown University. But if Denning ever wants to chuck it all and opt for an honest living of, say, writing horror stories, her most recent book, Information Warfare and Security, has all the source material she will ever need. Before reading half the book, I was ready to cancel my e-mail accounts, jettison my modems, cancel my credit cards, move what little money I have from the bank to my mattress, and head out for the Flint Hills.

You see, part of what Denning has done in Information Warfare and Security is chronicle what seems to be just about every breach in computer security over the past few years. Page after page of hacks, cracks, phreaks, and psyopts by everyone from teenagers and thrill seekers to spies and nuts. Credit card numbers, passwords, bank accounts -- they're all fair game for anyone who is bright, persistent, online, and so inclined.

Not that it was Denning's intent simply to titillate us with one interesting or exciting story after another. Instead, her goal is to provide us with a comprehensive overview of what's become known as "information warfare"... Read more from this review. -- Jonathan Erickson, Dr. Dobb's Journal -- Dr. Dobb's Journal

Product Description

What individuals, corporations, and governments need to know about information-related attacks and defenses!

Every day, we hear reports of hackers who have penetrated computer networks, vandalized Web pages, and accessed sensitive information. We hear how they have tampered with medical records, disrupted emergency 911 systems, and siphoned money from bank accounts. Could information terrorists, using nothing more than a personal computer, cause planes to crash, widespread power blackouts, or financial chaos? Such real and imaginary scenarios, and our defense against them, are the stuff of information warfare-operations that target or exploit information media to win some objective over an adversary.

Dorothy E. Denning, a pioneer in computer security, provides in this book a framework for understanding and dealing with information-based threats: computer break-ins, fraud, sabotage, espionage, piracy, identity theft, invasions of privacy, and electronic warfare. She describes these attacks with astonishing, real examples, as in her analysis of information warfare operations during the Gulf War. Then, offering sound advice for security practices and policies, she explains countermeasures that are both possible and necessary.

You will find in this book:

A comprehensive and coherent treatment of offensive and defensive information warfare, identifying the key actors, targets, methods, technologies, outcomes, policies, and laws;

A theory of information warfare that explains and integrates within a single framework operations involving diverse actors and media;

An accurate picture of the threats, illuminated by actual incidents;

A description of information warfare technologies and their limitations, particularly the limitations of defensive technologies.

Whatever your interest or role in the emerging field of information warfare, this book will give you the background you need to make informed judgments about potential threats and our defenses against them.

See all Editorial Reviews

Product Details

• Paperback: 544 pages
• Publisher: Addison-Wesley Professional; 1 edition (December 20, 1998)
• Language: English
• ISBN-10: 0201433036
• ISBN-13: 978-0201433036
• Product Dimensions: 9.1 x 6.3 x 1.3 inches
• Shipping Weight: 1.8 pounds (View shipping rates and policies)
• Average Customer Review: 4.2 out of 5 stars  See all reviews (14 customer reviews)
• Amazon.com Sales Rank: #291,361 in Books (See Bestsellers in Books)

Customer Reviews

Most Helpful Customer Reviews

11 of 11 people found the following review helpful:

4.0 out of 5 stars Heighten awareness, but not educate, October 2, 2000

By	Eric E. Michael (Beaverton, OR) - See all my reviews

Gulf war, fraud, national security, Spam, traitors, and computer viruses. These are just a few of the topics covered by Dorothy Denning's book Information_Warfare_and_Security. This book gives a broad and informative view of information security, however it lacks specifics to make it more than an introductory work to this field.

The book has a broad overview of subjects. The Introduction section encompasses around 75 pages and gives substantial theory to the how and why of information security. Part II discusses "Offensive Information Warfare" which brings the reader through techniques on obtaining information. "Defensive Information Warfare" in Part III naturally discusses how to repel the offenses discussed in Part II.

Information_Warfare_and_Security is very informative on the problem areas which it discusses. Computers and phones are obvious places for intrusion and the book covers the facets of these areas in depth. The less obvious methodologies are also mentioned such as eavesdropping, traffic analysis, and sabotage. Denning does not leave out the human factor in her sections on social engineering, traitors, and even dumpster diving.

Denning's book, however, lacks specific in-depth information. Any chapter subject could have a large book written on it. The book does not give the "how-to's" to create or block an attack; rather it merely discusses the possibilities. To Denning's credit, however, she does include a substantial bibliography and endnotes so the reader can find further information in the source material.

Information_Warfare_and_Security would serve the purpose of an excellent introductory overview to the information security field. It is broad and informative, but lacks the specific information to execute any of the offenses or defenses. Denning's book is useful to heighten awareness of information security issues, but it is not sufficient to provide an education in this field.

14 of 16 people found the following review helpful:

3.0 out of 5 stars Mostly a compilation, with a couple of saving graces, August 7, 2000

By	Maurice E Dunn (Charlotte, NC) - See all my reviews

I am very reluctant to give much credit for this book to its author. This is primarily because nearly a third of the book is dedicated to bibliography. That, in my opinion, is not really writing; it is compilation.

I was also disappointed at the caliber of anecdotes. I found them to be either totally irrelevant, or totally trite.

I will give credit, however, for the organization and 'soup-to-nuts' primer approach. The chapter organization and flow are superb and I am certain this makes a decent text for non-technical graduate students trying to grasp the concepts of information warfare. The chapter on encryption technology is especially well explained.

Unfortunately, the jacket and editorial reviews (and some of the Amazon reviews) would lead you to believe that this book is a MUST for all information security professionals. It isn't. It is probably, however, a good book for people who have to effectively communicate with information security professionals. Anyone with even a moderate background in information security will not be impressed.

10 of 11 people found the following review helpful:

4.0 out of 5 stars Comprehensive and well-written, November 26, 1999

By	Deák Csaba (Budapest, Hungary) - See all my reviews

Dorothy Denning's book covers almost every aspect of a topic that is of increasing importance. It is written in an ENJOYABLE STYLE and is full of examples, stories and quotations that WELL ILLUSTRATE the points she wants to make. It is an EXCELLENT OVERVIEW of the topic, and for those who are interested in the details, an extensive list of references is included at the end.

Whether you are responsible for information security at your enterprise or you are a citizen concerned about your data's privacy, you WILL NOT REGRET if you read this book.

However, it could be improved in several areas:

Even in an overview like this, more should be said about the controls that can help you protect your data (such as separation of duties, security audits etc.). The numbering of references is restarted in every chapter and so they are hard to find at the end of the book. Most importantly, it should show much less political and cultural bias. A book that is basically about information-related threats and defenses is NOT supposed to be used to protect Attorney General Janet Reno in connection with the Waco case (see Chapter 5) or vent the author's dislike of the Arab countries. For example, if Arab governments control information such as pornography, it is called "censorship", the same thing done by the US government is referred to as "restrictions - also in Chapter 5. (Don't get me wrong: it is NO accident that I lived in the US for years and never ever wished to live in an Arab country, so I am myself biased toward American culture. Even so, I often found Denning too openly manipulative.)