Erann Gat <gNOSPAMat@flownet.com> wrote:
+---------------
| > Other suggestions?
|
| I'd start by reading Bruce Schneier's "Applied Cryptography."
| (Actually, it's not a bad idea to read everything that Bruce Schneier
| has ever written.)
+---------------
Given the OP's level of (non-)experience with security, I'd suggest
Schneier's "Secrets & Lies: Digital Security in a Networked World"
<URL:http://www.schneier.com/book-sandl.html> as being a better book to
read first.
+---------------
| Then read all the comp.risks archives.
+---------------
Yup. They're easy to read at <URL:http://catless.ncl.ac.uk/Risks/>.
Also read the sci.crypt newsgroup...
+---------------
| As Joe said, computer security is hard. Really really hard. (And
| designing a system that is secure against dishonest insiders is really
| really really hard!) There are no shortcuts. (That includes, by the
| way, hiring self-styled "security experts" because they often don't know
| what they're talking about either.)
+---------------
I would 2nd, 3rd, and 4th this!!
-Rob
-----
Rob Warnock <rpw3@rpw3.org>
627 26th Avenue <URL:http://rpw3.org/>
San Mateo, CA 94403 (650)572-2607