Security Training and Education
March/April 2012
From confusing online terms of use to changing forms of data collection, users must make difficult decisions about protecting their work and themselves online. This special issue addresses key issues in providing effective training and education to users of all kinds. Read full article »
About IEEE Security & Privacy
IEEE Security & Privacy magazine provides articles with both a practical and research bent by the top thinkers in the field along with case studies, tutorials, columns, and in-depth interviews and podcasts for the information security industry.
Articles from IEEE Security & Privacy
Driving Secure Software Development: Experiences in a Diverse Product Environment
Siemens’ security team drives secure software development across a diverse product portfolio through activities such as standardizing roles, threat and risk analysis, and product security risk management. Read full article »
Lost Decade or Golden Era: Computer Security since 9/11
In this point/counterpoint article, Gary McGraw and Anup Ghosh address whether the US is better off today in all aspects of security than we were 10 years ago. Read full article »
A Research Agenda Acknowledging the Persistence of Passwords
Despite attempts to replace passwords, they're more widely used than ever. Microsoft researchers assert that, in many instances, passwords are the best-fit solution and suggest better means to concretely identify actual requirements. Read full article »
Cybersecurity and Economics
For bank robbery, we spend more on prevention than we lose; for cybercrime, the reverse is true. How can we increase the effort on cybersecurity so that the situation improves? Read full article »
Announcements
IEEE Security & Privacy Seeks Editor in Chief for 2013–2014 Term
The IEEE Computer Society seeks applicants for the position of editor in chief, serving a two-year term starting 1 January 2013.
Prospective candidates are asked to provide (as PDF files) by the extended deadline of 30 March 2012, a complete curriculum vitae, a brief plan for the publication's future, and a letter of support from their institution or employer. Read more »
All IEEE Computer Society magazines are being published in ePub format.
Multimedia
Podcast: Silver Bullet
Shari Lawrence Pfleeger
Gary chats with Shari Lawrence Pfleeger, Director of Research for the Institute for Information Infrastructure Protection at Dartmouth College. They discuss the difference between safety-critical software and security-critical software, why measuring software is hard (security notwithstanding), how to speed up tech transfer, and why there are so few women in computer science. More podcast episodes »