• Simson Garfinkel and Eugene Spafford, Practical UNIX and Internet Security, Second Edition O'Reilly & Associates, Inc., 1996 1004 pages. ISBN: 1-56592-148-8. $39.95. Review by Peter Neumann (from RISKS 17 May): This book is an extraordinarily successful effort to cram into a mere thousand pages (971+xxix+ORAads) almost everything you need to know about Unix and Internet security. It is a complete rewrite of the First Edition of 1991, and contains much new material. In terms of pages per dollar or cents per page, or much more important, the amount of money it can save you by keeping you away from a horrendous array of potential security problems, it is an incredible bargain. This is a keeper -- at least until the Third Edition comes out, perhaps in 2001. By then, the authors will be able to write much more definitively about Java and web browsers, which are treated only lightly in the Second Edition. (Too much happening, too fast?) Everything else, however, seems well covered and very nicely written. This is a very readable and very useful book, and deserves to be looked at by all of you.
•