Enemy at the Water Cooler and over 360,000 other books are available for Amazon Kindle � Amazon�s new wireless reading device. Learn more

Quantity:

Express Checkout with PayPhrase

What's this? | Create PayPhrase

More Buying Choices

39 used & new from $4.00

Have one to sell? Sell yours here

Share with Friends

Share your own customer images

Search inside this book

Start reading Enemy at the Water Cooler on your Kindle in under a minute. Don�t have a Kindle? Get your Kindle here.

Enemy at the Water Cooler: True Stories of Insider Threats and Enterprise Security Management Countermeasures [ILLUSTRATED] (Paperback)

~ Brian Contos (Author), Dave Kleiman (Reviewer)
Key Phrases: enterprise monitoring solution, incident management program, insider threats, Action Item, United States, Special Publication (more...)

3.5 out of 5 stars See all reviews (8 customer reviews)

List Price:	$49.95
Price:	$37.51 & this item ships for FREE with Super Saver Shipping. Details
You Save:	$12.44 (25%)
	o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o o

In Stock.
Ships from and sold by Amazon.com. Gift-wrap available.

Want it delivered Thursday, December 17? Choose One-Day Shipping at checkout. Details

Ordering for Christmas? To ensure delivery by December 24, choose FREE Super Saver Shipping at checkout. Read more about holiday shipping.

19 new from $33.16 20 used from $4.00

Formats		Amazon Price	New from	Used from
Kindle Edition $33.45 Available for download now. Published August 23, 2006	Kindle Edition, August 23, 2006	$33.45	--	--
Paperback, Illustrated $37.51 In Stock. Published January 6, 2007	Paperback, Illustrated	$37.51	$33.16	$4.00

Frequently Bought Together

Price For All Three: $74.48

Show availability and shipping details

This item: Enemy at the Water Cooler: True Stories of Insider Threats and Enterprise Security Management Countermeasures by Brian Contos
In Stock.
Ships from and sold by Amazon.com.
This item ships for FREE with Super Saver Shipping. Details
Insider Threat: Protecting the Enterprise from Sabotage, Spying, and Theft by Eric Cole
In Stock.
Ships from and sold by Amazon.com.
This item ships for FREE with Super Saver Shipping. Details
Spies Among Us: How to Stop the Spies, Terrorists, Hackers, and Criminals You Don't Even Know You Encounter Every Day by Ira Winkler
In Stock.
Ships from and sold by Amazon.com.
Eligible for FREE Super Saver Shipping on orders over $25. Details

Customers Who Bought This Item Also Bought

Insider Threat: Protecting the Enterprise from Sabotage, Spying, and Theft

by Eric Cole

4.3 out of 5 stars (11) $25.97

Spies Among Us: How to Stop the Spies, Terrorists, Hackers, and Criminals You Don't Even Know You Encounter Every Day

by Ira Winkler

4.3 out of 5 stars (18) $11.00

Secrets and Lies: Digital Security in a Networked World

by Bruce Schneier

4.4 out of 5 stars (128) $12.21

The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders and Deceivers

by Kevin D. Mitnick

4.0 out of 5 stars (48) $11.53

Extrusion Detection: Security Monitoring for Internal Intrusions

by Richard Bejtlich

4.4 out of 5 stars (9) $40.14

› Explore similar items

Editorial Reviews

Review

Throughout, Contos uses his extensive personal experiences to illustrate Internet security breaches and provide countermeasures. This book requires little if any technical background and is intended to appeal to a broad audience.- Choice, E. M. Aupperle

Product Description

The book covers a decade of work with some of the largest commercial and government agencies around the world in addressing cyber security related to malicious insiders (trusted employees, contractors, and partners). It explores organized crime, terrorist threats, and hackers. It addresses the steps organizations must take to address insider threats at a people, process, and technology level.

Today's headlines are littered with news of identity thieves, organized cyber criminals, corporate espionage, nation-state threats, and terrorists. They represent the next wave of security threats but still possess nowhere near the devastating potential of the most insidious threat: the insider. This is not the bored 16-year-old hacker. We are talking about insiders like you and me, trusted employees with access to information - consultants, contractors, partners, visitors, vendors, and cleaning crews. Anyone in an organization's building or networks that possesses some level of trust.

* Full coverage of this hot topic for virtually every global 5000 organization, government agency, and individual interested in security.

* Brian Contos is the Chief Security Officer for one of the most well known, profitable and respected security software companies in the U.S.-ArcSight.

See all Editorial Reviews

Product Details

Paperback: 262 pages
Publisher: Syngress; 1 edition (January 7, 2007)
Language: English
ISBN-10: 1597491292
ISBN-13: 978-1597491297
Product Dimensions: 8.8 x 7 x 0.9 inches
Shipping Weight: 9.6 ounces (View shipping rates and policies)

Average Customer Review: 3.5 out of 5 stars See all reviews (8 customer reviews)

Amazon.com Sales Rank: #1,141,624 in Books (See Bestsellers in Books)

Would you like to update product info or give feedback on images?

Front Cover | Table of Contents | First Pages | Index | Surprise Me!

Inside This Book (learn more)

Key Phrases - Statistically Improbable Phrases (SIPs): (learn more)
enterprise monitoring solution, incident management program, insider threats, exploit writers, physical security devices, compromised server, threat window, cyber criminals, malicious insider, incident detection, threat program, log collection, phishing scams, security posture, vulnerability information, event graph

Key Phrases - Capitalized Phrases (CAPs): (learn more)
Action Item, United States, Special Publication, Code Red, Bill Smith, Secret Service, Supplemental Guidance, Blended Threats, John Doe, Access Deny Scan Card, California Senate Bill, Defense Personnel Security Research Center, Philadelphia Mint, Targeted Attacks

New!
Books on Related Topics | Concordance | Text Stats

Browse Sample Pages:
Front Cover | Table of Contents | First Pages | Index | Surprise Me!

Books on Related Topics (learn more)

Spies Among Us by Ira Winkler

Discusses:

The Security Risk Assessment Handbook by Douglas J. Landoll

Discusses:

Beyond Fear by Bruce Schneier

Discusses:

Information Technology Control and Audit, Second Edition by Sandra Allen-Senft

Discusses:

What Do Customers Ultimately Buy After Viewing This Item?

	74% buy the item featured on this page: Enemy at the Water Cooler: True Stories of Insider Threats and Enterprise Security Management Countermeasures 3.5 out of 5 stars (8) $37.51
	16% buy Spies Among Us: How to Stop the Spies, Terrorists, Hackers, and Criminals You Don't Even Know You Encounter Every Day 4.3 out of 5 stars (18) $11.00
	7% buy Insider Threat: Protecting the Enterprise from Sabotage, Spying, and Theft 4.3 out of 5 stars (11) $25.97
	2% buy The Insider: A True Story 4.5 out of 5 stars (2) $26.95

Explore similar items

Tags Customers Associate with This Product

(What's this?)

Click on a tag to find related items, discussions, and people.

enterprise security management(1)

esm(1)

Agree with these tags?

Customer Reviews

8 Reviews

5 star:		(1)
4 star:		(5)
3 star:		(0)
2 star:		(1)
1 star:		(1)

Average Customer Review

3.5 out of 5 stars (8 customer reviews)

Share your thoughts with other customers:

Create your own review

Most Helpful Customer Reviews

12 of 13 people found the following review helpful:

2.0 out of 5 stars "If the only tool you have is a hammer, then every problem is a nail.", January 8, 2007

By	Dr. G. Hinson "NoticeBored.com" (New Zealand) - See all my reviews (REAL NAME)

Ignore the main title - look at the subtitle. This book is little more than a sales pitch for Enterprise Security Management systems, or more specifically the ESM sold by the author's company, with a random assortment of largely unattributed and barely analyzed anecdotes on information security incidents mostly relating to ESM. The link to "insider threats' is tenuous at best and in the most part is merely used as an excuse to hype the wonders of ESM.

If you are seriously interested in ESM, you probably wrote the gushing "review notes" on the cover or the foreword (written by Hugh Njemanze, CTO of - you guessed it - the same ESM company). I'm far from convinced that anyone else (except perhaps from the ESM company and its customers who may be happy with an extremely biased view of the value of ESM) would benefit from this book, even if it is "vendor neutral" (page xxii). If you are looking for some meaningful insight into and analysis of the "insider threat", and perhaps some practical and worthwhile countermeasures apart from ESM, look elsewhere.

Comment Comment | Permalink | Was this review helpful to you? Yes No (Report this)

6 of 7 people found the following review helpful:

4.0 out of 5 stars Explores an important often neglected topic, November 30, 2006

By	Ben Rothke "Author of 'Computer Security: 20 ... (USA) - See all my reviews (TOP 1000 REVIEWER) (REAL NAME)

Even though hacker Kevin Mitnick's notorious exploits are more than a decade old, the media, and even some security professionals, continue to be obsessed with him. In early October 2006 alone, his name came up a few dozen times in a search of the prior month of Google News. Those obsessed with hackers are missing the far greater threat: trusted insiders.

The insider threat shouldn't be a surprise: employee theft takes a bigger bite out of retailers than does shoplifting, and company personnel give away more secrets than are stolen by spies.

On average, authorized network users gain access to 10 to 20 times more resources than they need to perform their jobs, and this extra access leads to most network security breaches. With that as its starting point, Enemy at the Water Cooler looks at the problem of the trusted insider and how to reduce both the threat and the vulnerability. Author Brian Contos astutely notes that insider attacks are the hardest ones to defend against, detect, and manage.

The first part of the book sketches the risks that insiders pose to an organization. It also details mechanisms that can be used to control these risks.

One such solution is ESM (Enterprise Security Management) software. (Full disclosure: the author is the CSO for a leading ESM vendor and some of the illustrations in the book are screenshots from this vendor's product.) ESM software centrally collects and analyzes log data from various entities within a network. When correctly deployed, ESM can be used to discover internal risks, in addition to correlating security information and performing other valuable tasks.

The final chapters of the book run through real-life case studies in which Contos shows how ESM mitigated, or could have mitigated, the risk.

Although the book has a lot of information, at $49.95 for fewer than 250 pages, the book is overpriced. Even though it can come across as self-serving, the book should be commended for tackling a vital and often neglected topic.

Comment Comment | Permalink | Was this review helpful to you? Yes No (Report this)

5 of 6 people found the following review helpful:

4.0 out of 5 stars Real Life Security Stories, April 13, 2007

By	Daniel McKinnon (Tewksbury, MA USA) - See all my reviews (TOP 500 REVIEWER)

'Enemy at the Water Cooler: Real-Life Stories of Insider Threats and Enterprise Security Management Countermeasures' by Brian Contos is an interesting look at some real-life situations that have occurred where nasties have gotten into systems and wrecked the havoc that they are looking to cause. While some reviewers have argued that this book is just a sales pitch to go out and buy anti-hacker software and hardware to combat these criminals, they are probably right!!! Security is always a matter of finding the right balance but certainly erring on the side of caution certainly is the safer way to go in most cases!!

Good book for IT people and specifically security whizzes to take a look at.

**** RECOMMENDED

Comment Comment | Permalink | Was this review helpful to you? Yes No (Report this)

Share your thoughts with other customers: Create your own review

› See all 8 customer reviews...

Most Recent Customer Reviews

5.0 out of 5 stars Great information and case studies - great book
This book was extremely easy to read and enjoyable. The case studies made complex concepts such as collaborative attacks and advanced intruder discovery/remediation techniques... Read more

Published on November 15, 2006 by Security in Texas

4.0 out of 5 stars too relevant for today's security world
great problem statement and introduction to the overall issues and background surrounding insider threat. Read more

Published on November 14, 2006 by sec-wiz

1.0 out of 5 stars Great Fiction, though bad -- forced to give 1 star
Since the author checked his facts out about as much as a third-grader, i thought this book was more sci-fi than fact-based. Read more

Published on November 13, 2006 by Buddha Fever

4.0 out of 5 stars Reads like a conversation
This book starts off nice and easy, giving a good introduction to cyber crime before getting into the more technical aspects of mitigating insider threats. Read more

Published on September 28, 2006 by Harrison Holland

4.0 out of 5 stars Great insider threat overview
I've ordered a couple of books on insider threat, and this is the first one I actually read. This book gives a good, broad overview of the types of threats facing companies. Read more

Published on September 27, 2006 by Steve94304

› See all 8 customer reviews...

.jsOffDisplayBlock { display: block; } .jsOffDisplayInline { display: inline; } .jsOffVisibility { visibility: visible; } .jsOnDisplayBlock { display: none; } .jsOnDisplayNoneBlock { display: block; } .jsOnDisplayNoneInline { display: inline; } .jsOnDisplayInline { display: none; } .jsOnVisibility { visibility: hidden; } .jqOnDisplayBlock { display: none; } .jqOnDisplayInline { display: none; } .jqOnVisibility { visibility: hidden; } .jqOnDisplayNoneBlock { display: block; } .jqOnDisplayNoneInline { display: inline; }