Ross Anderson

TL;DR: In this paper, the authors present a security policy model for clinical information systems, which is driven by medical ethics and can restrict both the number of users who can access any record and the maximum number of records accessed by any user.

TL;DR: It would be economically rational to spend less in anticipation of cybercrime (on antivirus, rewalls, etc.) and more on response, and to be particularly bad at prosecuting criminals who operate infrastructure that other wrongdoers exploit.

TL;DR: This work describes two ways of using LEAVE, an existing protocol which allows devices to vote by exchanging signed claims of impropriety, and Stinger, a new protocol where a device unilaterally removes a misbehaving neighbor by agreeing to limit its own participation, and outlines a combined protocol that balances the security and performance characteristics of both strategies.

TL;DR: Interim guidelines on maintaining security in computerised patient information systems are drawn up to help tackle the pressing short term concerns and are supplementary to existing documentation such as The Handbook of Information Security.

TL;DR: An even more radical strategy is considered - suicide attacks - in which a node on perceiving another node to be misbehaving simply declares both of them to be dead, and other nodes thereafter ignore them both.