Reseña del libro "Intelligent Security Engineering (en Inglés)"
Security is not simply about preventing unauthorized access. The greater challenge is controlling what an authenticated user, compromised server, privileged administrator, or autonomous AI agent can do once access has been granted.Intelligent Security Engineering: Enterprise Security Architecture from Foundational Controls to Adaptive Deception presents a comprehensive approach to designing enterprise systems that limit authority, contain compromise, protect critical data, and recover without relying on already-compromised components.Across 66 chapters organized into 12 parts, the book connects established security engineering principles with advanced architectural strategies and emerging approaches to intelligent defense.Key Topics Include:Identity and Privileged Access: Context-aware authentication, temporary privileges, human approval, session boundaries, and multi-person authorization.Enterprise Network and Data Security: Network segmentation, zero-trust design principles, customer isolation, transaction integrity, encryption, and key custody.Deception and Active Defense: Decoy systems, honeytokens, adaptive tarpits, attacker diversion, and containment strategies.Cloud and Software Supply-Chain Security: API security, SaaS trust paths, workload identities, CI/CD protection, infrastructure provenance, and runtime admission.Intelligent and Autonomous Security: Authority graphs, consequence forecasting, security digital twins, AI agent boundaries, adaptive friction, and autonomous containment.Enterprise Resilience: Incident response, immutable evidence, disaster recovery, cryptographic agility, hardware roots of trust, and clean-room restoration.Architecture Verification: Security design reviews, failure-injection testing, quantitative security metrics, implementation guidance, and enterprise case studies.The book examines not only how security controls operate individually, but also how they interact across complex enterprise environments—and how those interactions can create unexpected paths to compromise.Practical review frameworks, technical examples, validation methods, and extensive appendices help readers evaluate architectural decisions, identify hidden dependencies, and measure the consequences of security failures.Importantly, the book distinguishes established security practices and published technical standards from the author's proposed architectural models and forward-looking defensive concepts.Who Should Read This Book?Written for security architects, senior software engineers, cloud and infrastructure professionals, cybersecurity consultants, CISOs, technical leaders, and advanced practitioners responsible for designing or evaluating enterprise security systems.The central engineering objective is clear: Build systems that limit the consequences of compromise, preserve trustworthy evidence, and remain recoverable when individual defenses fail. Read more
