I saw Franks post on
orablogs talking about Bruce's book last week some time and made a note to have a look. Franks post is titled "
Security: Secret & Lies, Digital Security in a Networked World, by Bruce Schneier" and in it Frank talks about Bruce Schneier's book
Secrets and Lies : Digital Security in a Networked World
. Frank has just finished reading it and recommends it highly. He also says that this book is a considered
must read in the security community. I have heard the same. Frank gives some good examples from the book and some good analysis. Basically security is not just about the technology. This I can agree with, as I always try to think like a hacker when I look at security of an Oracle database. You need to see the whole picture and not just a feature. Franks review is good, take a look. Also read Bruce's book which is excellent.