Beyond Fear: Thinking Sensibly About Security in an Uncertain World [Hardcover]

Take face recognition as an example. Even a system claiming 99.9% accuracy (which none are) will still fail 1 in 1000 times. How many times would it fail when used on football crowd? Or at an airport? How are the police better off when they have to deal with dozens of false positives from the most perfect system? What is the point of a system which requires every face to be logged in a database when terrorists are so sparse to begin with (and not necessarily in the database)? Obviously it's ridiculous, but this doesn't stop people claiming such nonsense will prevent another 9/11 or whatever.

Instead he advocates human intelligence - security guards who are trained to recognize signs that people are behaving oddly (or 'hinky' as one officer described a terrorist caught smuggling a bomb). This and common sense security based upon risk assessment. As one of the world's leading experts on security, his is a voice that should be listened to. Unlike his crypto books, there is no an equations to be found here. Instead he highlights his points with real world examples and analogy. This tends to become a little tiresome in places, but the point is well made.

It's too bad that someone as informed as Schneier isn't in charge of policy. Otherwise we might be in a world where money would be spent on systems which actually protect us, rather than offer faux security and inconvenience.

However, its not overtly political, and gives dozens (perhaps a 100) practical worked examples of good & bad, effective & ineffective, responses to security issues, whether it be physical, electronic etc.

There is a 5-step process which I found useful to apply to everyday situations; and (in highly abbreviated form) these are : what are you trying to protect; what are the risks; risk mitigation; risks caused by the solution; trade-offs

The core message is : "as both individuals and a society, we can make choices about our security", and this book helps you understand how to make those informed decisions.

Schneier's book expands on the ideas in the article. Although Schneier is a technology fan and it is his livelihood, he realizes that sometimes a live security guard can provide better security than cutting-edge (but still fallible) face-recognition scanners, for instance. He explains why national ID cards are not a good idea, and how iris-scanners can be fooled.

These are ideas for security on a large scale, for airports, nuclear and other power plants, and government websites. For security on an individual or small business scale, try Art of the Steal by Frank Abagnale. But even if you don't run a government, Beyond Fear is a fascinating read about how your government is making choices (and how they SHOULD be making choices about your security and about your rights.