Geekonomics: The Real Cost of Insecure Software (Paperback)

David Rice

  • 出版商: Addison Wesley
  • 出版日期: 2020-12-03
  • 售價: $1,450
  • 貴賓價: 9.5$1,378
  • 語言: 英文
  • 頁數: 384
  • 裝訂: Paperback
  • ISBN: 0321735978
  • ISBN-13: 9780321735973
  • 相關分類: 資訊安全
  • 立即出貨 (庫存=1)

商品描述

“The clarity of David’s argument and the strength of his conviction are truly inspiring. If you don’t believe the world of software affects the world in which you live, you owe it to yourself to read this book.”
–Lenny Zeltzer, SANS Institute faculty member and the New York Security Consulting Manager at Savvis, Inc.

 

Geekonomics stays with you long after you finish reading the book. You will reconsider every assumption you have had about software costs and benefits.”
–Slava Frid, Gemini Systems, CTO, Resilience Technology Solutions

 

“Information Security is an issue that concerns governments, companies and, increasingly, citizens. Are the computer systems and software to which we entrust our sensitive and critical information, technologies that are out of control? David Rice has written an important and welcome book that goes to the heart of this issue, and points to solutions that society as a whole needs to debate and embrace.”
–Nick Bleech, IT Security Director, Rolls-Royce

 

“If you are dependent upon software (and of course, all of us in the modern world are) this book is a fabulous discussion of how and why we should worry.”
–Becky Bace

 

The Real Cost of Insecure Software

•   In 1996, software defects in a Boeing 757 caused a crash that killed 70 people…

•   In 2003, a software vulnerability helped cause the largest U.S. power outage in decades…

•   In 2004, known software weaknesses let a hacker invade T-Mobile, capturing everything from passwords to Paris Hilton’s photos…

•   In 2005, 23,900 Toyota Priuses were recalled for software errors that could cause the cars to shut down at highway speeds…

•   In 2006 dubbed “The Year of Cybercrime,” 7,000 software vulnerabilities were discovered that hackers could use to access private information…

•   In 2007, operatives in two nations brazenly exploited software vulnerabilities to cripple the infrastructure and steal trade secrets from other sovereign nations…

Software has become crucial to the very survival of civilization. But badly written, insecure software is hurting people–and costing businesses and individuals billions of dollars every year. This must change. In Geekonomics, David Rice shows how we can change it.

 

Rice reveals why the software industry is rewarded for carelessness, and how we can revamp the industry’s incentives to get the reliability and security we desperately need and deserve. You’ll discover why the software industry still has shockingly little accountability–and what we must do to fix that.

Brilliantly written, utterly compelling, and thoroughly realistic, Geekonomics is a long-overdue call to arms. Whether you’re software user, decision maker, employee, or business owner this book will change your life…or even save it.

 

The Alarming Cost of Insecure, Badly Written Software...

and How to Finally Fix the Problem, Once and for All!

 

Six billion crash test dummies: why you’re at greater risk than you ever imagined.

You pay the price: why consumers are legally and financially responsible for the mistakes of software manufacturers.

Broken windows: how software promotes epidemic cyber crime and threatens national security.

Who runs the show?: Why software manufacturers fought against the U.S. Food and Drug Administration’s attempts to protect the U.S. blood supply.

Protecting national infrastructure: real incentives for transforming software manufacturing.

Surviving the information superhighway: practical, must-read advice in a world of insecure code.

 

Preface xiii

Acknowledgments xix

About the Author xx

 

Chapter 1: The Foundation of Civilization 1

Chapter 2: Six Billion Crash Test Dummies: Irrational Innovation and Perverse Incentives 19

Chapter 3: The Power of Weaknesses: Broken Windows and National Security 73

Chapter 4: Myopic Oversight: Blinded by Speed, Baffled by Churn 131

Chapter 5: Absolute Immunity: You Couldn’t Sue Us Even If You Wanted To 179

Chapter 6: Open Source Software: Free, But at What Cost? 243

Chapter 7: Moving Forward: Rational Incentives for a Different Future 273

 

Epilogue 321

Notes 325

Index 341

 

 

商品描述(中文翻譯)

「大衛的論點清晰明確,他的信念堅定令人鼓舞。如果你不相信軟體世界會影響你所生活的世界,你應該閱讀這本書。」
- Lenny Zeltzer,SANS Institute教職員及Savvis, Inc.紐約安全顧問經理

「《Geekonomics》讓你在閱讀完書後仍會深思。你將重新考慮對軟體成本和效益的所有假設。」
- Slava Frid,Gemini Systems首席技術官,Resilience Technology Solutions

「資訊安全是一個關乎政府、公司和越來越多公民的問題。我們所信任的電腦系統和軟體是否失控?大衛·賴斯寫了一本重要且受歡迎的書,深入探討了這個問題的核心,並指出整個社會需要辯論和接受的解決方案。」
- Nick Bleech,勞斯萊斯IT安全總監

「如果你依賴軟體(當然,現代世界的我們都是如此),這本書對於我們應該擔心的事情進行了精彩的討論。」
- Becky Bace

《不安全軟體的真實代價》
- 1996年,波音757的軟體缺陷導致一起造成70人死亡的空難...
- 2003年,軟體漏洞協助導致數十年來最大的美國停電...
- 2004年,已知的軟體弱點讓駭客入侵T-Mobile,竊取從密碼到Paris Hilton的照片等所有資料...
- 2005年,因軟體錯誤,23,900輛豐田Prius被召回,可能導致車輛在高速公路上熄火...
- 2006年被稱為「網絡犯罪之年」,發現了7,000個駭客可以利用的軟體漏洞,以獲取私人資訊...
- 2007年,兩個國家的特工公然利用軟體漏洞破壞基礎設施並竊取其他主權國家的商業機密...

軟體已經成為文明生存的關鍵。但是糟糕的、不安全的軟體正在傷害人們,並每年給企業和個人帶來數十億美元的損失。這必須改變。在《Geekonomics》中,大衛·賴斯展示了我們如何改變這一點。

賴斯揭示了為何軟體行業因為粗心而受到獎勵,以及我們如何重新調整行業的激勵機制,以獲得我們迫切需要和應得的可靠性和安全性。你將發現為什麼軟體行業仍然缺乏驚人的責任感,以及我們必須做些什麼來解決這個問題。

這本書寫得精彩,引人入勝,非常現實,《Geekonomics》是一個早該發出的號召。無論你是軟體使用者、決策者、員工還是企業主,這本書將改變你的生活,甚至可能拯救你的生命。

「不安全、糟糕的軟體的驚人代價...」
「以及如何最終解決這個問題!」
「六十億個碰撞測試假人...」