GOLSCO
Books Online Store
UK | Germany
books   baby   camera   computers   dvd   games   electronics   garden   kitchen   magazines   music   phones   software   tools   toys   video  
 Help  
Books - Biographies & Memoirs - Leaders & Notable People - Military - The Evolution of Information Security

1-9 of 9       1
Featured ListSimple List

  • General (favr)  (list)
  • United States Civil War (favr)  (list)
  • Go to bottom to see all images

    Click image to enlarge

    The American Black Chamber (Bibliographies of Modern Authors,)
    by Herbert Yardley
    Average Customer Review: 5.0 out of 5 stars
    Paperback (01 November, 1989)
    list price: $28.80 -- our price: $28.80
    (price subject to change: see help)
    US | Canada | United Kingdom | Germany | France
    Reviews (3)

    5-0 out of 5 stars Yardley Uncovered!
    I read this book first about 40 years ago. Yardley published it after SecState Stimson withdrew funds with the famous "Gentlemen do not read other people's mail." It revealed, the details of breaking Japaneseciphers while they were still in use and caused a political furor. It ledto legislation against revealing state secrets, and the book itself wasprohibited from re-publication by Act of Congress, apparently nowexpired.

    Yardley was an egotist, and never hesitated to take first personcredit for work actually performed by subordinates, according to people whoknew him. In any case, it makes a great read!

    5-0 out of 5 stars Both astonishing and fascinating for me
    Our American government?Diplomacy?Non-fiction? 20th century era to 1931?I thoroughly enjoyed the read.Very informative (for me).When you get to the end, you may smile at this question:Do you (can you) reallybelieve the part about gentlemen not reading other people's mail?:-) Thesort of book I'd say to thoughtful friends, "If you don't enjoy thisone, I'll give you your money back". The sort of book that makes youwish you could have met the author...

    5-0 out of 5 stars A great inside look at the earliest days of cryptography
    Anyone interested in the inner workings of ANY cryptoanalyst needs to read this book.Told in the first person Yardley reveals the amazing amount of genius and hard work cryptography required before the days of calculators and computers.It really is a great read. ... Read more

    Isbn: 0894121545
    Sales Rank: 697407
    Subjects:  1. Biography & Autobiography    2. Biography/Autobiography    3. Cryptography    4. History    5. Military Intelligence Division    6. Military intelligence    7. Political    8. Secret service    9. Section No. 8    10. United States    11. War Dept    12. World War, 1914-1918   


    $28.80

    The Codebreakers : The Comprehensive History of Secret Communication from Ancient Times to the Internet
    by David Kahn
    Average Customer Review: 4.0 out of 5 stars
    Hardcover (05 December, 1996)
    list price: $70.00 -- our price: $44.10
    (price subject to change: see help)
    US | Canada | United Kingdom | Germany | France

    Editorial Review

    "Few false ideas have more firmly gripped the minds of so many intelligent men than the one that, if they just tried, they could invent a cipher that no one could break," writes David Kahn in this massive (almost 1,200 pages) volume. Most of The Codebreakers focuses on the 20th century, especially World War II. But its reach is long. Kahn traces cryptology's origins to the advent of writing. It seems that as soon as people learned how to record their thoughts, they tried to figure out ways of keeping them hidden. Kahn covers everything from the theory of ciphering to the search for "messages" from outer space. He concludes with a few thoughts about encryption on the Internet. ... Read more

    Reviews (24)

    5-0 out of 5 stars Comprehensive
    The Codebreakers provides an excellent thorough history of cryptography.(Keeping in mind that it was written in the 1960's.)

    I tried to read this book straight through.In retrospect that wasn't the best idea.The writing is very dry.I got through it by stopping to work out the cryptographic systems described with pencil and paper.I guess I understand cryptography better but it took lots of paper and time (well that's cryptography for you;).Well actually I started skimming after a month of that so I didn't quite get through it.What I am trying to illustrate is that the writing is very dry.I'm interested in the subject and I had trouble slugging straight through.Be forewarned.

    So what to say what to say?If it happened in cryptography before the 60's then its in here, or at least I don't know the subject well enough to notice omissions.If you are into cryptographic history then get your hot little hands on this book.

    I recommend this book highly for university libraries (you need it) and maybe for some public libraries (just so someone can get to it with interlibrary loan).The Codebreakers is great as reference material.Anybody writing a paper on cryptography is going to want it if they are doing a good job with writing that paper.If you are the type of person who would benefit from owning such a reference then you already know who you are and you might just own this book already too.

    5-0 out of 5 stars Truly a History
    As a historian, with a particular interest in other than "American History", I found this book particularly compelling.I read the Earlier edition at least three times.

    Yes, I found that, at times, the text gets bogged down in minutae that may not appeal to a particular reader, but in a volume of this magnitude, with this scope, and this ambition, that is virtually a lock.

    What many of the reviewers don't seem to realize that the book was written in the context of the 1960s and that not only the writing, but also events described must be put into context.David Kahn does an excellent job of doing just that.To illustrate, I might simply point out his portrait of Herbert O. Yardley.One only has to read Yardley's "Education of a Poker Player" to understand just how accurate Kahn was in describing Yardley and his role.

    Like all history books of a more specialized nature, there is a serious advantage to having enough background information to understand where events, people, and technology fit into the puzzle.

    If you are seriously interested in what went on "behind the scenes" in much of the historical events of the 19th and 20th centuries,this book provides information that is an essential part of the puzzle.

    5-0 out of 5 stars Must be the bible of cryptography
    Weighty and thorough.
    Between this , Simon Singh and Helen Fouche Gaines, one has reason to assume that an extensive introduction to this field of knowledge has been gained. ... Read more

    Isbn: 0684831309
    Subjects:  1. Cryptography    2. History    3. History - General History    4. History: American    5. Military - Intelligence/Espionage    6. History / General   


    $44.10

    The Code Book : The Evolution Of Secrecy From Mary, To Queen Of Scots To Quantum Crytography
    by SIMON SINGH
    Average Customer Review: 5.0 out of 5 stars
    Hardcover (14 September, 1999)
    list price: $24.95
    US | Canada | United Kingdom | Germany | France

    Editorial Review

    People love secrets, and ever since the first word was written, humans have written coded messages to each other. In The Code Book, Simon Singh, author of the bestselling Fermat's Enigma, offers a peek into the world of cryptography and codes, from ancient texts through computer encryption. Singh's compelling history is woven through with stories of how codes and ciphers have played a vital role in warfare, politics, and royal intrigue. The major theme of The Code Book is what Singh calls "the ongoing evolutionary battle between codemakers and codebreakers," never more clear than in the chapters devoted to World War II. Cryptography came of age during that conflict, as secret communications became critical to either side's success.

    Confronted with the prospect of defeat, the Allied cryptanalysts had worked night and day to penetrate German ciphers. It would appear that fear was the main driving force, and that adversity is one of the foundations of successful codebreaking.

    In the information age, the fear that drives cryptographic improvements is both capitalistic and libertarian--corporations need encryption to ensure that their secrets don't fall into the hands of competitors and regulators, and ordinary people need encryption to keep their everyday communications private in a free society. Similarly, the battles for greater decryption power come from said competitors and governments wary of insurrection. The Code Book is an excellent primer for those wishing to understand how the human need for privacy has manifested itself through cryptography. Singh's accessible style and clear explanations of complex algorithms cut through the arcane mathematical details without oversimplifying. Can't get enough crypto?Try solving the Cipher Challenge in the back of the book--$15,000 goes to the first person to crack the code! --Therese Littleton ... Read more

    Reviews (207)

    5-0 out of 5 stars Very Interesting History
    I thought it got off to a bit of a slow start, but about a quarter of the way through it, it became almost impossible to put down.The history of code makers and code breakers is very well put together with inteesting stories.The details on the methods used to break the Enigma ciphers (finding cycles that allow automated searching for correct wheel alignments independent of the scrambling patch cables) was new to me and fascinating.Good description of quantum techniques (which would be the ultimate win for the code makers side of the "arms race").

    5-0 out of 5 stars incredibly interesting
    Simon Singh has a true gift for writing. In the wrong hands the material presented in this book could have been dull. Mr. Singh, however, turns this material into what reads likes a page-turning novel. This book is loaded with fastinating information presented in clearly written manner. If you have even the slightest interest in the subject matter, I promise you that you will love this book. One of the things that makes it great is that it looks as deeply at people as it does at the science and math involved. You will find yourself getting attached to the men and women who were so heavily involved in the developments in this subject matter throughtout history. For a top-notch learning and entertainment experience, go read this book now.

    5-0 out of 5 stars Missing History
    I saw a book, Fermat's Enigma, many times at the store. Many times I saw it, and walked right by it - not interested. The best thing I can say about "The Code Book" (by the same author) is that before I even finished it I went back to that store and bought Fermat's Engima, not wanting to risk it being sold out.
    The Code Book was that good of a read.

    Why? It is because it took a subject I knew almost nothing about, and by time I was done made me feel like an expert.In the process I got a precious insight into many historical events I had read about my whole life but, in some part, I had only a superficial understanding.

    For example, in College we studied the execution of Mary Queen of Scotts. Our professor told us that the conspiracy was suspect at best and probably was just the result of a vindictive Elizabeth trying to secure her throne. Really?Mr. Singh explains how the Queen's servants broke a code being sent to the Mary and how she authorized an assassination of Elizabeth.By authorizing the assassination, she justified her own execution.An execution which sounds much more rational then "vindictive."At the end, Mr. Singh describes the great dignity Mary displayed at her death and a particularly pathetic scene as her little dog was searching through Mary's effects for Mary, not realizing that she was dead. I can somehow still hear that little dog barking.

    This is but one of many stories in this book from Ancient Greece to Modern Washington where Mr. Singh shows (1) the importance of ciphering (2)and its great effect on world history.I almost felt like the FreeMasons were right, there is history and "history." By reading this book, you get a first hand tour of "history" while, at the same time, learning about the incredible changes in the science of spys.

    I only had one criticism, which is quite small.Towards the final chapters the author seems more negative as he discusses the tragic ends to many great minds connected to ciphering.I guess there are few nice ways to say bad things but the tone of the book does change. Still, all in all, this is an excellent book which you should read. ... Read more

    Isbn: 0385495315
    Subjects:  1. Cryptography    2. Cryptography/Access Control    3. Data encryption (Computer scie    4. Data encryption (Computer science)    5. History    6. Language Arts / Linguistics / Literacy    7. Linguistics    8. Military - Intelligence/Espionage    9. Science    10. Science/Mathematics    11. Security    12. Science / History   


    Applied Cryptography: Protocols, Algorithms, and Source Code in C, 2nd Edition
    by BruceSchneier
    Average Customer Review: 4.5 out of 5 stars
    Hardcover (19 October, 1995)
    list price: $85.00 -- our price: $78.21
    (price subject to change: see help)
    US | Canada | United Kingdom | Germany | France

    Editorial Review

    Cryptographic techniques have applications far beyond the obvious uses of encoding and decoding information. For Internet developers who need to know about capabilities, such as digital signatures, that depend on cryptographic techniques, there's no better overview than Applied Cryptography, the definitive book on the subject. Bruce Schneier covers general classes of cryptographic protocols and then specific techniques, detailing the inner workings of real-world cryptographic algorithms including the Data Encryption Standard and RSA public-key cryptosystems. The book includes source-code listings and extensive advice on the practical aspects of cryptography implementation, such as the importance of generating truly random numbers and of keeping keys secure. ... Read more

    Reviews (91)

    5-0 out of 5 stars The Bible of the Crypto-world
    For anyone working or studying the crypto-world (IT Security, Cryptographer, Cryptologists, PKI/PGP/SecureID Technologists, etc.) this is a must read.

    For the fascinating world of Cryptography (the practical application of Cryptology) this is an essential textbook that any graduate course of digital security and cryptology should include.It is inteded as a reference book as well as a practical book to have handy for the working professional.

    It's no wonder the NSA had asked the author not to publish this book.It leaves the Crypto-world naked to the average viewer/reader.

    5-0 out of 5 stars Excellent Text - Not Too Mathematical
    This book provides excellent coverage of the mayor cryptography algorithms.It is a must have (for academic study or implementation), if only for the completeness of coverage and the comprehensive references.The C code provided is adequate, but reasonable programming skills are assumed.The book is not overly mathematical (which many of the other cryptography texts are - this is great for me, as I am more intereseted in practice).There is also good information on assessing / comparing the merits of different algorithms.Great for the practictioner or student taking a first course (it's still not bedtime reading).Mathematicians will look for more ......

    5-0 out of 5 stars Essential reference for any programmer
    Over the long term, this is the applied math book that I come back to most often.

    The first quarter of the book may come as a surprise. It's not about encryption, it's about secure protocols. This is great stuff. It includes secure key exchange, where you and I can agree on an encryption key in a public conversation, but none of the other listeners know what we agreed on. It includes zero-knowledge proofs, ways of establishing authorization without releasing your identity. It includes lots more, as well. The next brief section discusses different modes for using encryption algorithms, key management, and other logistics.

    The third section is what you might have expected: detailed descriptions of many encryption schemes, taking up at least half the book. That includes public key schemes, private key codes, secure hashing algorithms, and all the other details needed for implementing the algorithms. One of the most useful subsections here is a set of pseudorandom number generators. It's not exhaustive, by any means - it omits the Mersenne Twister, for example. Still, it gives a fair set of algorithms, some of which are "cryptographically secure". That means the generator's output strongly resists attempts to find regularities, just the way a truly random sequence would.

    The last two chapters give a brief summary of the practice, legalities, and even culture around cryptography.

    This won't make you into a crypto professional. Despite its600+ pages, it barely introduces the world of crypto and certainly doesn't release anything from the "closed" world of government agencies. It will, however, give you useful algorithms, a basic background, and an appreciation of just what real crypto is about. That last may be the most important part. Too many people think inventing a good code is like making love: anyone can do it, and they instinctively do it better than most people. Wrong! Real crypto is not for dabblers, and this book gives some sense of what is involved.

    The first edition of "Applied Cryptography" was a landmark text, but the second edition is even better. It's so much better that, if you just have the first edition, you really should upgrade to the second, and I've never said that about any other book. ... Read more

    Isbn: 0471128457
    Subjects:  1. Computer Bks - Languages / Programming    2. Computer security    3. Cryptography    4. Cryptography/Access Control    5. Programming Languages - General    6. Science/Mathematics    7. Security    8. Security measures    9. Telecommunication    10. Telecommunication (Engineering)    11. Computers / Security    12. Data security & data encryption   


    $78.21

    Venona : Decoding Soviet Espionage in America
    by John Haynes, Harvey Klehr
    Average Customer Review: 4.5 out of 5 stars
    Hardcover (10 April, 1999)
    list price: $50.00 -- our price: $50.00
    (price subject to change: see help)
    US | Canada | United Kingdom | Germany | France

    Editorial Review

    With this new volume, John Earl Haynes and Harvey Klehr build upon their groundbreaking work inThe Secret World of American Communism and solidify their reputations as the foremost historians of Soviet espionage in America. In Venona, they provide a detailed study of how the United States decrypted top-secret Communist cables moving between Washington and Moscow. This account, based on information unavailable to researchers for decades, reveals the full extent of the Communist spy network in the 1940s. At least 349 citizens, immigrants, and permanent residents of the United States had a covert relationship with Soviet intelligence agencies, among them Harry White (assistant secretary of the treasury in FDR's administration and the Communists' highest-ranking asset) and State Department official Alger Hiss, whose association with the Soviets had been hotly debated since the moment he was first publicly accused in 1948.

    "The Soviet assault was of the type a nation directs at an enemy state," write Haynes and Klehr. They go on to suggest that Venona's code-breaking "indicated that the Cold War was not a state of affairs that had begun after World War II but a guerilla action that Stalin had secretly started years earlier." Moreover, "espionage saved the USSR great expense and industrial investment and thereby enabled the Soviets to build a successful atomic bomb years before they otherwise would have." Haynes and Klehr deliver what is at once a real-life spy thriller and a vital piece of scholarship. A grand achievement. --John J. Miller ... Read more

    Reviews (13)

    5-0 out of 5 stars professional, scholarly history
    This is a scholarly history without the flash, trash, hype, and jive of journalism.The authors had access to the decrypt of Soviet messages from the 1941-1945 period as well as the Soviet espionage archives and the FBI archives.They explain in detail how they obtained their information and then described the activities of Soviet agents.At the end is a list of about 450 people who were Soviet agents.For those of you who are not interested in the historic details, the bottom line is that everyone who was publicly accused of being a Soviet agent was one.Senator McCarthy was right and the professors and journalists were wrong.

    I also recommend The Venona Secrets : Exposing America's Cold War Traitors by Herb Romerstein if you want more detailed information from an experienced espionage agent of the time.This other book, available here on Amazon, will tell you many more interesting things.

    5-0 out of 5 stars "TO VOTE FOR BILL CLINTON."
    In 1943, the U.S. Navy intercepted word that Josef Stalin was going to sue for a separate peace with Adolf Hitler. They also discovered that Alger Hiss, a leading New Deal Democrat and top advisor to President Roosevelt, was a Soviet spy. In addition, numerous high-level Democrats in FDR's Administration were Soviet spies and "fellow travelers." They approached FDR, whose response was "f--k off." The Navy, during this time of greatest national security threat, reached the conclusion that the Democrats could not be trusted!In response to this, they began the Venona Project, designed to read all the Soviet cable dispatches. Venona continued to confirm that the American government and society was rife with Soviet espionage from within the ranks of the anti-American Democrat Left.

    When the war ended, the Republicans began to investigate these rumors. Richard Nixon asked FBI Director J. Edgar Hoover to assist. Hoover told him he could not let him view Venona because it was too important to the on-going Cold War vs. Soviet Communism, but that Nixon's instincts, particularly about Hiss, were right. Hiss was convicted. Numerous Leftists were convicted or exposed, as were many in Hollywood. When McCarthy went after them, the Left attempted to discredit him. Venona would have justified him, but Hoover refused to disclose Venona's secret. McCarthy was sacrificed and allowed to twist in the end, and for decades the Left proffered the lie that there were no Communists in Hollywood, the government, the Army or in America.

    After Ronald Reagan won the Cold War, Soviet archives were opened. Venona was discovered and became the Venona Papers. It verified that Hiss and all the accused and convicted Communists in Hollywood, the government, the Army and in America were in fact Soviet spies or "fellow travelers." One of those fellow travelers had escaped to Russia, but returned when the Statute of Limitations ran out. He returned to the U.S. in 1996. He was asked why.

    "To vote for Bill Clinton," he replied.

    Is further commentary really necessary?(...)

    5-0 out of 5 stars Decoding Soviet Espionage
    Venona is an outstanding history lesson.It clearly illustrates the pervasiveness of Soviet Espionage in the United States during (and after) World War II.

    Unlike many such studies, this is well researched and utilizes not only US but also period Soviet sources.

    Highly recommended. ... Read more

    Isbn: 0300077718
    Subjects:  1. Communism    2. Communist Party of the United    3. Espionage, Soviet    4. History    5. History - General History    6. Intelligence Operations    7. Military - Intelligence/Espionage    8. Political Freedom & Security - International Secur    9. Political History    10. Political Ideologies - Communism & Socialism    11. Political Science    12. Politics/International Relations    13. Sources    14. Soviet Union    15. Spies    16. United States    17. United States - 20th Century   


    $50.00

    Between Silk and Cyanide: A Codemaker's War, 1941-1945
    by Leo Marks
    Average Customer Review: 4.5 out of 5 stars
    Paperback (12 September, 2000)
    list price: $17.00 -- our price: $11.56
    (price subject to change: see help)
    US | Canada | United Kingdom | Germany | France

    Editorial Review

    At the age of 8, Leo Marks discovered the great game of code-making and -breaking in his father's London bookshop, thanks to a first edition of Poe's The Gold-Bug. At 23, as World War II was being played out in earnest, he hoped to use his strengths for the Allies. But Marks's urgent, witty memoir, Between Silk and Cyanide, begins with his failure to get into British Intelligence's cryptographic department. As everyone else on his course heads off to Bletchley Park ("the promised land"), he is sent to what his sergeant terms "some potty outfit in Baker Street, an open house for misfits." In fact, the Special Operations Executive's mandate was, in Churchill's stirring phrase, to "Set Europe Ablaze," and Marks's was to monitor code security so that agents could could report back as safely as possible. When he arrived, the common wisdom was that it was easiest for men and women in the field to memorize and use well-known poems.

    Unfortunately, since the Germans had equal access to the classics--"Reference books," Marks quips, "are jackboots when used by cryptographers"--Marks thought agents should write their own poems (or use his) instead, several of which are cheerily obscene. After all, no son or daughter of the Fatherland could ever know the rest of a verse that began "Is de Gaulle's prick / Twelve inches thick," and continued on in a similar, shall we say, vein. But Marks soon felt that original doggerel was just as dangerous, since even slight misspellings could render messages indecipherable and risk agents' lives. His first solution? WOKs (worked-out keys) printed on silk. An operative would use one key, send the message, and immediately tear off the strip. Marks had a hard time proving that swaths of silk would save his people from swallowing their "optional extra," a cyanide pill. His efforts were dead serious, but often landed him in comic terrain.

    In one of the book's great set pieces, Marks visits Colonel Wills--surely the model for Ian Fleming's Q--in order to sort out the best ways to print his code keys. Before solving this minor problem (invisible ink!), Wills showed Marks several new projects--one of which involves an exotic array of dung, courtesy of the London Zoo. This gifted gadgetmeister planned to model life-sized reproductions of these droppings and pack them with explosives, personalized for all parts of Europe, Africa, and Asia. "Once trodden on or driven over (hopefully by the enemy) the whole lot would go off with a series of explosions even more violent than the ones which had produced it," Marks explains.

    Despite such larky sentences and sections, the author never loses sight of the importance of his vocation, and Between Silk and Cyanide is as elegiac as it is engaging. Marks knows when to cut the laugh track, particularly as his book becomes a despairing record of agents blown--lost to torture, prison, the camps, and execution. Readers will never forget the valor of Violette Szabo, Noor Inayat Kahn, and the White Rabbit himself, Flight Lieutenant Yeo-Thomas. Poem-cracking, as Marks again and again makes clear, was far more than a parlor game. --Kerry Fried ... Read more

    Reviews (83)

    5-0 out of 5 stars He is cleverer than us!
    This book is one of the most entertaining i have read in years, and is enjoyable to the last.

    To add to the reviews by others i would like to chip in that:
    1) He is cleverer than the vast majority of people. That is how he became one of the top codes people in the country at at time when the whole country was mobilised to fight a war.
    2) I LOVED the slightly cocky tone. For me it was this real human element that made the book so good. Works on this topic like Sabags

    3-0 out of 5 stars Room for improvement
    This is quite a lengthy book, about 600 pages, and at times it does seem to drag on.The topic itself is quite interesting--during WWII, the author at the young age of 22 shows himself to be a brilliant codemaker/codebreaker, and eventually rises to the highest levels, despite his unconventional relations to authority figures.The book is not really about coding, however.

    The book presented a side of WWII that is not often heard--that of the courageous agents dropped into occupied territory to sabotage and to prepare the Resistance for D-Day.It was especially sad to note that often the author, while preparing them for deployment, knew that their capture by the enemy was imminent, because the enemy had already captured many of their comrades and was forging messages back to London in their names--however, Marks' superiors were unwilling to acknowledge this, for reasons which remain in debate to this day.

    I have to agree with many of the other reviewers on several points.Marks' wit, while humerous at times, does tend to get old by the end of the book.The author was unnecessarily vulgar at times, as well.In addition, it was sometimes tedious to wade through all the acronyms and code-names.

    5-0 out of 5 stars Something new among the WWII babble
    First I must say this: if you have any interest in the interaction between, on the one hand, people willing to sacrifice themselves for their beliefs and their country, and on the other, office-political self-interest, read this book if you can.As an eye-opener, it bitterly counter-echoes Macaulay's "None were for the party, all were for the state."Irrespective of anybody's opinion, adverse or otherwise, read it if you want unusual material on several subjects, including Giske's masterful exploitation of his penetration of the WWII Dutch resistance.Read it also if you simply are interested in cryptology, the history of cryptology or the development of cryptology (or of cryptologists).Read it if you want a vivid portrayal of the fog of war as seen from the back room, the frustration, the obsession, the pressures, the fear and the grief.Prepare yourself to control your blood pressure if you have views (from EITHER perspective) on the subject of boffin versus boss.The book is a primary and secondary document of great interest.

    "Between silk and cyanide" includes plenty of humour of all shades, mainly dark, but don't read it for fun unless you are totally insensitive; it deals with harrowing events in harrowing times and I found it very upsetting on several levels.It would be wasteful to read it in a hurry just because you are a fast reader.This is a labyrinth of a book and there are many mazes of twisty little passages, all alike, that you very likely will miss if you are not careful. Heaven knows how many I myself skated over in my innocence.

    This is a large book, but that is not why it is not to be read at a sitting.Nor is the reason that it is hard to read; I had to stop repeatedly to rest and to digest (or recover from) the situations and implications described.I am not so sure how well I like the style, but it impressed me as true to life.It includes a great deal of oral boffinese, not the technospeak, but the throw-away witticisms that bubble up from the depths of overactive or overwrought minds.Boffins are not supposed to laugh at them because they understand them and non-boffins rarely do because they seldom enjoy them when they do understand them.The problem is that such wit is more irritating in the written than the oral medium.After all, most of such cracks are tasteless or trivial.In other respects the writing itself is clear, natural, and far more literate than most wartime reminiscences.Mind you, Marks, intelligent and compelling as he is, is no John Masters or R. V. Jones, but then, comparison with such would set unrealistic standards for anyone.Be all that as it may, the sheer tragedy of the times repeatedly yielded nightmares painful to a reader conditioned to quips."... I found myself staring into eyes full of dead pilots."If you really want to understand the intensity of the hurt or the nausea of such remarks, read the book.

    On technical and historical matters also, this book is of interest at several levels.On one hand it repeatedly amazes one with the brilliance of some the work they did, and on the other it leaves one breathless at some of the things they apparently struggled to achieve.To anyone with modern computer experience, the idea of having difficulty in designing a letter-based one time pad surely must be totally bemusing; am I too blasé because of long occupational exposure to the concept of arbitrary radix arithmetic?I am not stupid enough to think that I would have done any better in their place at that time, but I still do not quite know what to make of this.Several other cryptographic inventions discussed (but not all) are pretty trivial in terms of information theory, which is puzzling in the light of the highly non-trivial minds that are generally known to have been employed in the field at that time.Also, there are non-cryptographic technical details that I should have loved to discuss.For example, in a period of desperate austerity the insistence on printing agents' reference material on silk puzzles me.The justification was that silk fabric was easy to burn and to conceal in clothing.I should have thought that treating rayon or even very fine cotton with nitrocellulose would have been cheaper and more effective.

    But I don't know the real-life situation.I wish I did.

    But not at first hand, thank you.

    Marks himself was an unusual, brash, understandably not very modest, and clearly insecure young man, and he conveys his unusualness with a clinical wryness that spares neither himself nor anyone else.He is too skilled to leave me convinced that he is artless in every word he writes about himself, his favourites or his unfavourites, but if his story is substantially imaginary, this book is one of the greatest works of art of the twentieth century.If you disagree, try reading any (and I mean ANY) fictional blockbuster of comparable size and themes, whether historical romances or hard fiction, and try to find one that carries anything like the same conviction.Don't hurry to call me to compare notes.For my part I accept the book at face value as reminiscences from a retentive memory, supported by notes, slanted by personal perspective, and eroded by time.One can hardly demand better than that, especially in the light of the nauseating closing chapters, the loss of history and the closing in of the janitors and the of the vultures and parasites after the fray.As I read it, the book is a striking work dealing with arresting material, and it is absorbing, though heartbreaking, material to read. ... Read more

    Isbn: 068486780X
    Subjects:  1. Biography & Autobiography    2. Biography / Autobiography    3. Biography/Autobiography    4. Cryptography    5. Great Britain    6. Literary    7. Military    8. Military - World War II    9. Personal narratives, British    10. Secret service    11. World War, 1939-1945    12. Biography & Autobiography / Military   


    $11.56

    Handbook of Applied Cryptography
    by Alfred J. Menezes, Paul C. Van Oorschot, Scott A. Vanstone
    Average Customer Review: 4.5 out of 5 stars
    Hardcover (16 October, 1996)
    list price: $99.95 -- our price: $87.31
    (price subject to change: see help)
    US | Canada | United Kingdom | Germany | France
    Reviews (16)

    5-0 out of 5 stars Advanced Crypto for the college mind.
    This very detailed work is not for the light hearted. It's an in depth look at the mathmatics behind cryptography. If you're looking for a book to help you program then look for Applied Cryptography by Bruce the crypto king instead. If you're looking for something to help you learn cryptoanalysis and how to break codes then this is the first step.

    5-0 out of 5 stars Fantastic traditional reference
    The Chapter 14 - Efficient Implementation - shows several multiple precision algorithms. They are very easy to understand and implement under any microprocessor. It is a very good complement to the book set written by Donald Knuth (The Art of Computer Programming, Volumes 1-3 Boxed Set), another fantastic traditional reference.

    4-0 out of 5 stars A very detailed book, but not for everyone.
    This is a fairly strong book on crypto, with heavy detail on the math involved.The upside is that the second chapter is devoted to most of the important mathematical theory you'll need to understand for the rest of the book.The downside?That chapter tries to cover just about the same breadth of information as a semester long course in Number Theory.

    If you don't have a ton of mathematical background and are scared of having to take a crash course in number theory, or are looking for a higher level view of things, I'd suggest something more along the lines of Bruce Schneier's 'Applied Cryptography' (ASIN 0471117099). If you have some mathematical background, but want to get into things in detail, this is probably for you.

    If you're not sure whether you'll like the book, you should definitely take a look at it. While Amazon currently doesn't have sample pages, if you do a Web Search on "Handbook of Applied Cryptography", you can find Sample Chapters hosted online to give you a good feel for the book's style. ... Read more

    Isbn: 0849385237
    Sales Rank: 118544
    Subjects:  1. Access control    2. Algorithms (Computer Programming)    3. Computer Bks - General Information    4. Computers    5. Cryptography    6. Cryptography/Access Control    7. Discrete Mathematics    8. Handbooks, manuals, etc    9. Reference    10. Security   


    $87.31

    Computer Security Handbook
    by Seymour Bosworth, Arthur E. Hutt, Douglas B. Hoyt
    Average Customer Review: 5.0 out of 5 stars
    Paperback (September, 1995)
    list price: $100.00
    US | Canada | United Kingdom | Germany | France
    Reviews (11)

    3-0 out of 5 stars Not for computer professionals
    I was expected much more of this book. It is very general. It is meant for general public not for computer professionals. There is lots of repeating. 1200 pages of text with just a few pictures. Very boring. It is meant more for lawyers and philosophers than for other population. I don't recommend for system or network administrators.

    5-0 out of 5 stars Handy sec reference
    this is good stuff.

    A bit wordy, but good!

    5-0 out of 5 stars Computer Security Handbook
    This book is a must have for anyone working in the Information Assurance/Computer Security field."Big Blue" was written by experienced professionals who are considered experts in their field. The book contains sections pertaining to every conceivable aspect of Infomation Assurance. I am currently using this book in my Masters program at Norwich University, and will continue to use it as a reference for many years to come.Mich Kabay and Sy Bosworth are to be commended for consolidating all of this information into one superb book.Great job!! ... Read more

    Isbn: 0471118540
    Sales Rank: 597197
    Subjects:  1. Computer Books: General    2. Electronic data processing departments    3. Security measures    4. Data security & data encryption   


    Secrets and Lies: Digital Security in a Networked World
    by Bruce Schneier
    Average Customer Review: 4.5 out of 5 stars
    Hardcover (14 August, 2000)
    list price: $29.99
    US | Canada | United Kingdom | Germany | France

    Editorial Review

    Whom can you trust? Try Bruce Schneier, whose rare gift for common sensemakes his book Secrets and Lies: Digital Security in a Networked World bothenlightening and practical. He's worked in cryptography and electronic securityfor years, and has reached the depressing conclusion that even the loveliestcode and toughest hardware still will yield to attackers who exploit humanweaknesses in the users. The book is neatly divided into three parts, coveringthe turn-of-the-century landscape of systems and threats, the technologies usedto protect and intercept data, and strategies for proper implementation ofsecurity systems. Moving away from blind faith in prevention, Schneier advocatesswift detection and response to an attack, while maintaining firewalls andother gateways to keep out the amateurs.

    Newcomers to the world of Schneier will be surprised at how funny he can be,especially given a subject commonly perceived as quiet and dull. Whether he'sanalyzing the security issues of the rebels and the Death Star in StarWars or poking fun at the giant software and e-commerce companies thatconsistently sacrifice security for sexier features, he's one of the few techwriters who can provoke laughter consistently. While moderately pessimistic onthe future of systems vulnerability, he goes on to relieve the reader's tensionby comparing our electronic world to the equally insecure paper world we'veendured for centuries--a little smart-card fraud doesn't seem so bad after all.Despite his unfortunate (but brief) shill for his consulting company in thebook's afterword, you can trust Schneier to dish the dirt in Secrets andLies. --Rob Lightner ... Read more

    Reviews (112)

    4-0 out of 5 stars Book stradles both worlds: academia and corporate world ...
    of IT Security.

    While Bruce Schneider rehashes old ideas discussed in his other IT Sec books, this read is well organized, with lots of practical examples and quite thorough in his extensive coverage of all security measures.

    The best thing about this book is how the presentation of various IT Security measures makes the reader aware of how imporatnt security policies are and what the important aspects of security management are.This read is definitely beneficial for IT and Security managers.

    When reading this book I could not help but get annoyed with how verbose this book is.One could easily eliminate various paragraphs and still maintain the integrity of the books message.

    4-0 out of 5 stars Great perspective on cybersecurity
    As a graduate student in computer science, I can attest that the book is technically accurate with light-to-modereate depth.Bruce Schneier's use of real-life examples (along with a salting of imagined scenarios) and just good plain sense allows him the freedom to provide sufficient detail for the informed reader without ailienating newcomers.This is a great book for anyone interested in putting digital security in perspective from the owner of a company to an academic researcher.The narrative is witty and entertaining, while still being informative, although some people may find him a little condescending at times.

    The most interesting part of the book for me was Part I: The Landscape, where Schneier describes security threats in general.My only real criticism is that the book felt repeatative towards then end; the examples were refreshing and informative at the beginning, but were old news by the end of the book.A more condensed version would be suitable for most people.

    4-0 out of 5 stars Very good, but with some caveats
    I finished the entire Bruce Schneier book "Secrets and Lies". I thought it was excellent but also I think it suffers from some very deep flaws.

    1) While Schneier goes a long way to prove his point that open-source, non-proprietary software is, in general, more secure than closed-source, proprietary software, he fails to consider critical differences between types of open-source projects. All open-source, in other words, is not created equal. There are critical distinctions between the open-source projects undertaken by ANSI or other standards-making bodies and the open-source world of projects like, say, linux.

    Under ANSI, standards are created by a consortium of business, government and industry bodies, usually employing the top people in the business. This consortium is structured like a giant software company designing a proprietary product, with all the checks and balances, redundancies, code testing, spec designs, etc. ANSI then asks for feedback from the entire user community, with the whole process from specs to product often taking years. Contrast this with the world of nobodies and semi-somebodies that often lead open-source linux and other projects like Mozilla. Such projects are more or less led by hobbyists in an ad-hoc fashion since the resources to do proprietary-style software development are not there.

    The question is how much of open-source linux's reputation is riding on the reputation of open-source ANSI? How often is the quality between the two confused?

    2) Schneier fails to fully consider problems with his suggestion that insurance companies market liability insurance to handle the cost of security breaches. They know the risk business, he claims, and, therefore, they are in a position to estimate the risks of such security. A laudable idea, except what happens if insurance companies know their business well enough not to provide any coverage at all? There is, in fact, a historical analogy: vaccines.

    In 1976, an unusual epidemic of "swine flu" occurred at Fort Dix. The federal government decided to vaccinate the entire country. The Congressional Budget Office predicted that, with 45 million Americans inoculated, there would be 4,500 injury claims and 90 damage awards, totaling $2 million. Despite these statistics, insurance companies refused to participate. Amid denunciations of corporate greed, Congress decided to provide the insurance.

    It turned out that the CBO was about half right. A total of 4,169 damage claims were filed. However, not 90 but more than 700 lawsuits were successful and the total bill to Congress came to $100 million, 50 times their initial estimate. Insurance companies knew their business well.

    The point that Schneier needs to understand is the concept of "strict liability" that has replaced the older concept of "negligence." Under negligence, a plaintiff had to prove intent or fault. Under strict liability, a plaintiff does not. In effect, the theory says that damage has occurred and that someone has to pay. How does a cyberspace security company insure itself under such circumstances, at least at a premium that is not the value of the entire company? It cannot and like most of the vaccine business, such cyber security companies would simply leave the market.

    3) Equally silly are some of the analogies Schneier uses to describe the state of the software industry and his laments about the lack of institutions to enforce solutions: "Skyscraper 1.0 collapses, but we will get it right in Skyscraper Version 1.1" or "a defective automobile gets recalled, but no one recalls software" or "we have the FDA, the UL or other institutions but nothing similar for software."

    A skyscraper collapsing is not an example of a security problem. It is an example of a functionality problem. A skyscraper collapsing because a plane crashed into it is an example of a security problem. A skyscraper collapsing on its own means someone did not pay enough attention in architecture school: not enough schooling in statics or finite element analysis. But no amount of schooling could anticipate a plane crashing into a building, let alone prevent a collapse...unless an architectural equivalent of the Multics operating system were erected with all the functionality problems that such a building would have.

    The same is true for automobiles. A car running off the road because the brakes stop working or the accelerator sticks is an example of a functionality problem. A car running off the road because another car hits it is an example of a security problem. And no amount of engineering is going to prevent an accident (or car thefts, for that matter.)

    It is just as pointless to expect regulations or some third-party government body to handle this problem. Product recalls, Underwriters Laboratories and the FDA all deal with functionality problems, not security problems. Even safety issues, which could be likened to protecting valuable assets (just like security), deal primarily with functionality (recalling a car because the engine computer could shut down your engine while driving is a functionality problem while an engine computer susceptible to some device that opens your doors is a security problem; making sure a drug's side effects don't kill you is a functionality problem while making sure the packaging is tamper-evident is a security problem).

    This should be obvious to Bruce since he himself admits that security testing is impossible, so what good is some outside regulator going to do, except institutionalize low standards? Automobile crash tests are one notorious example. Car manufacturers make a big deal out of them but what do they really test? An offset test, where half the front portion of a car is smashed against a heavy steel block just tells us how a car would behave if smashed into a heavy steel block. Specifically, since the mass of the block is greater than the car, the test simply measures how the cars structure reacts to the force generated by that car's own mass and acceleration. It tells us nothing about how it would react if, say, hit with a similar mass accelerated at the same rate as the approaching auto (presumably, it would do a lot worse).

    Ironically, government crash test ratings seem to operate under the same theory as the Orange Book. A Windows machine can get a C2 rating...as long as it doesn't have a floppy drive and is not networked. Similarly, a Honda Prius can get a government five-star crash-test rating...as long as it doesn't get hit by a 4,500 pound Lincoln Town Car or a 6,000 pound Cadillac Escalade. Can the government guarantee that such cars are not going to share the streets with a Prius?

    4) The most glaring problem in Schneier's book, however, is something that I call the "craft mentality." When I worked at Encyclopedia Britannica as a research analyst, I noticed that an inordinate amount of time and effort was spent by the management staff trying to preserve the quality of the research Britannica was putting into its products. Less time was spent trying to figure out how to price the products to capture the value of that research, or even trying to determine if that quality was evident or useful to the user (Articles on "Calculus", for example, were written by mathematicians and looked like they were taken out of graduate textbooks, obviously incomprehensible to the average user). Even in the face of hemorrhaging money, management still insisted on maintaining the standard...until they were replaced. In Britannica's case, research analysis was treated as a craft that needed to be preserved, even if that craft got in the way of selling encyclopedias.

    Schneier's book suffers from the same problem. There appears to be an underlying need to preserve and pursue security research, security knowledge and other related academic disciplines...to preserve and pursue the basic "craft" to which security reduces. The problem is at what point does the practice of security as a craft interfere with real security? To put it another way, how is it possible to have even rudimentary risk management of cyber space if everyone, including academics, has an unlimited right to know?

    We are in the situation of zero-day exploits, script-kiddies, malware, viruses and other problems precisely because of the craft mentality.

    Consider the old model of submitting known vulnerabilities to CERT, which would then propagate that information to the industries involved. This process was slow and cumbersome and did not result in the security (i.e. craft) improvements that the submitting parties wanted. In the hopes that it would stir security (i.e. craft) improvements, the vulnerabilities were announced to the world, to be done with as anyone pleased.

    Plenty of reasons are given for doing this...all of them specious. Claiming that the initial vulnerability is a problem is pointless if security vulnerabilities are ubiquitous, impossible to prevent, and even impossible to test. Improvements can be made, but true or perfect security is impossible. Claiming that the truly bad guys already know the vulnerabilities so it doesn't matter if everyone knows is equally pointless. No one really knows if the bad guys know the vulnerabilities. It is merely conjectured that they probably do. And the probability of the bad guys knowing is far more secure than the certainty of the bad guys knowing once the vulnerabilities are announced to the world (Imagine a national security agency with this attitude. All the other really bad national security agencies know, so it does not matter if everyone knows. Gee...that works). Claiming to be for publishing vulnerabilities while being against building exploits is pointless if public knowledge of those vulnerabilities leads to the building of the exploits. It is a distinction without a difference. Claiming that security by obscurity is not very good security does not imply that security by transparency is any better.

    Discipline needs to be brought back into security. Vulnerability announcements should go through the proper channels, should be treated like a national secret, and should carry very, very stiff penalties for violations. Research should be supervised. The spectacle of Def Con in Vegas and the hacker quarterlies needs to stop with most if not all of those people going to jail and all of them not ever being allowed near a computer again (they can all work at Subway). The law works. Digital content providers, for example, are defending their property rights with heavy handed lawsuits, not quietly going into other lines of business as Schneier suggests.

    None of this will happen if Schneier and others insist on maintaining their right to know and to spread that knowledge indiscriminately.

    "Shooting the messenger" is the common analogy, but it is a false one. The problem is not that the messenger is bringing bad news. The problem is that the messenger is bringing the bad news to all of the wrong people. That needs to be brought under control.

    Hopefully, Schneier will address these problems in another edition of his book. ... Read more

    Isbn: 0471253111
    Subjects:  1. Computer Bks - Communications / Networking    2. Computer Books: General    3. Computer Data Security    4. Computer networks    5. Computer security    6. Computers    7. Networking - General    8. Security    9. Security measures    10. Computer fraud & hacking    11. Data security & data encryption    12. Internet    13. Network security    14. Privacy & data protection   


    1-9 of 9       1
    Prices listed on this site are subject to change without notice.
    Questions on ordering or shipping? click here for help.

    Top 

     
    Books - Biographies & Memoirs - Leaders & Notable People - Military - The Evolution of Information Security   (images)

    Images - 1-9 of 9       1
    Click image to see details about the item
    Images - 1-9 of 9       1