Security Engineering
A guide to building dependable distributed systems. The book is written by Ross John Anderson, Professor of Computer Security at University of Cambridge. It covers a wide range of distributed systems from a security professional's perspective. Very thorough and highly recommed for all security enthusiasts.
Stats for nerds
38recommend
60mentions
49people
2008–2026years
77% recommend23% neutral
Mentions per year
What Hacker News says
- They main defense against internal attacks is bookkeeping. Banks have been dealing with this for thousands of years. I recommend the corresponding chapter in Security Engineering by Ross Anderson: https://www.cl.cam.ac.uk/archive/rja14/Papers/SEv3-ch12.pdf
- Another +1 for Ross Anderson's book Security Engineering. I bought it a few months ahead of starting a Cybersecurity MSc, so I could try to get my head in the right place in advance. My first thought was "it's £$*&in huge" but then I read the whole thing in about 3 months. A real page-turner!
- If you've not seen it already, Ross Anderson's book is both excellent and free (second edition at least, third edition has free chapters and doesn't cost much)
Security Engineering: https://www.cl.cam.ac.uk/~rja14/book.html
His student network social's are filled with examples of defeating various commercial security systems.
- Ross Anderson was so awesome. I loved his Security Engineering book, it was the only course that I read the recommended chapters for.
- Ross Anderson embodied a lot of positive principles in the security community. His book on Security Engineering (2nd edition is the biggest book on my bookshelf) patiently laid out principles of good security design, and tied it to examples in the real world for designs and bugs. Releasing old editions for free was the cherry on top for making his knowledge available to others.
- Hopefully its not pedantic or unwelcome of me to make the distinction between spread-spectrum and frequency hopping.
With frequency hopping only one frequency is used at once, and they're selected according to a sequence that matches a shared PRNG. As I understand it, that's what Bluetooth and some Wifi links do. They switch between discrete bands very fast.
Spread spectrum is a little different. During modulation, as with FM a series of side bands spread out. Normally we would limit these as they're considered "interference". But with the right modulator you can spread (and indeed encrypt at the RF link level) information into some bands but not others. Although all sidebands are present, to an observer who can't tell which ones carry the data at any moment, it makes no sense to even try demodulating the signal.
Neither solutions are much use if you need to communicate back because triangulation alone is enough to find you.
Curious if this tallys with your understanding, its over a decade since I had anything to so with this sort of thing. The best summary I recall was in Ross Anderson's "Security Engineering" book (first ed.)
Related
Cryptography engineering
50 recommend · 116
Understanding Privacy
2 recommend · 3
Practical Reverse Engineering
6 recommend · 10
The Code Book
98 recommend · 148
Handbook of applied cryptography
14 recommend · 25
The art of software security assessment
21 recommend · 43
