These files can be used directly from the CD-ROM or copied onto your hard drive. It explains core security issues such as risk analysis, threats, authentication, authorization, and privacy, and then discusses ways to apply the appropriate security to an application to mitigate risk. This work provides detailed instructions on how to protect Web-based information systems. It's a complete engineering document with considerable information on identifying security threats, giving them relative weight, and deciding how to deal with them in the designs of your systems. The authors has both done their homework and worked in the industry, and it's a pleasure to read their distilled knowledge.
Early sections are rather academic bringing the reader up to speed on basics.
Later sections deal with specific security strategies and the security features of particular products. The authors avoid vagueness. This is a great volume for anyone designing Windows software that will share information over a network and need to use authentication, nonrepudiation, encryption, and other security techniques to guard the integrity of information systems and databases.