On Sat, Mar 8, 2008 at 10:08 AM, Gloria Petron <[EMAIL PROTECTED]> wrote:
> David Platt devotes Chapters 3 & 4 of his book, *Why Software Sucks...And > What You Can Do About > It*< > http://www.amazon.com/Why-Software-Sucks-What-About/dp/0321466756/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1204999335&sr=1-1 > >, > to this very issue. His quote: "The No.1 threat of security isn't the > packet > sniffer...it's the Post-it Note." > ... > Kevin Mitnick, *The Art of Deception: Controlling the Human Element of > Security*< > http://www.amazon.com/Art-Deception-Controlling-Element-Security/dp/076454280X/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1204999227&sr=8-1 > >(Wiley, > 2002). > Another for your book list: Corporate Espionage by Ira Winkler http://www.amazon.com/Corporate-Espionage-Happening-Company-About/dp/0761508406/ Former NSA computer security spook (hi guys, hope you get this message, tell Verizon I'll pay my bill soon, OK? :-) delivers case studies that read like spy stories. My favorite was the Japanese Documentary Film Crew caper. His recommendation for the most effective thing a company can do to promote security: a company-wide security awareness program. The weak point of most of the cases discussed in the book are the humans in the system; a security education awareness program helps them make better decisions. Michael Micheletti ________________________________________________________________ Welcome to the Interaction Design Association (IxDA)! To post to this list ....... [EMAIL PROTECTED] Unsubscribe ................ http://www.ixda.org/unsubscribe List Guidelines ............ http://www.ixda.org/guidelines List Help .................. http://www.ixda.org/help
