Papers

Minimizing the Cost of Information Assurance. A white paper that describes the process that Information Security Systems Inc. has traditionally used to maximize security and minimize cost.

Integrating Security Into Your System An outline that probably has some points that you may not have thought of.

Risk Management- a non-numeric solution An approach to risk management that has been well-received by Information Security Systems Inc. clients.  It provides the decision-maker with easy to understand results from an easy to understand method.

A New Risk Management Paradigm This paper by George Jelen is similar to the one above but provides more background and references. 

Using Operations Security Techniques to Reduce Security Risk and Cost This paper by George Jelen describes how OPSEC can supplement technical security--some really good ideas about controlling security costs rationally.

 

Papers by Others

Factoring Large Numbers with the Twinkle Device (Abstract) This paper by Adi Shamir should give us pause when considering 1024 bit asymmetrical keys.

The Thickness of Concrete on the Maginot Line A paper by Joel Strassmann that points out the need for flexible, layered defenses in any system, not necessarily huge monolithic defenses.