[Spearchucker]

In 2010 Ross Anderson pointed out (stated rather emphatically actually) that security is driven by only two things - psychology and economics. Software is no different.

Security Engineering - http://www.amazon.co.uk/gp/aw/d/B004BDOZI0/ref=mp_s_a_1_2?qi...

[plainOldText]

Or if you want to read it online for free: http://www.cl.cam.ac.uk/~rja14/book.html