Actually Useful Internet Security Techniques.

Experienced computer professionals will find this clearheaded Internet security text a useful new resource. The book is divided into four parts: encryption and authentication; communications and data-sharing applications; firewalls and Web security; and appendices, including a list of computer security organizations, a bibliography, and other materials.

Of special note is the author's inclusion of notes, tips, and warnings in sidebars. Notes provide supplemental information. Tips supply quick instructions. And warnings discuss when a recommended procedure might lead to problems - and how to avoid them.

Author Larry Hughes discusses the traditional conflicts between security and ease of use. As he points out, convenience always wins until some form of crisis occurs.

The author's treatment of SATAN (Security Administrator's Tool for Analyzing Networks) and SANTA (Security Analysis Network Tool for Administrators) are highlights of the book, effectively and humorously presented. Another standout is chapter twelve, "Actually Useful Internet Security Tools," which gets to the heart of the book. The chapter does an excellent job of acquainting the reader with many of the security programs in use today.

In all, this book is a good reference work for experienced computer security professionals. It is solidly written and clearly presented.

Reviewer: Howard Keough, CPP, is a computer security consultant in Baltimore, Maryland. He is a longstanding member of the ASIS Standing Committee on Computer Security.