. Sensible security --
1. All security involves trade-offs --
2. Security trade-offs are subjective --
3. Security trade-offs depend on power and agenda --
pt. 2. How security works --
4. Systems and how they fail --
5. Knowing the attackers --
6. Attackers never change their tunes, just their instruments --
7. Technology creates security imbalances --
8. Security is a weakest-link problem --
9. Brittleness makes for bad security --
10. Security revolves around people --
11. Detection works where prevention fails --
12. Detection is useless without response --
13. Identification, authentication, and authorization --
14. All countermeasures have some value, but no countermeasure is perfect --
15. Fighting terrorism --
pt. 3. The game of security --
16. Negotiating for security --
17. Security demystified.

Explains in detail, for example, why we need to design security systems that don't just work well, but fail well, and why secrecy on the part of government often undermines security.