Modern Cybersecurity: Theories and Practices - Newton Lee

This book emphasizes three modes of cybersecurity reasoning: Property Reasoning to identify which security properties are essential for a given mission and understand how their failures manifest; System Reasoning to map security properties to controls across different layers (application, host, network, identity, data) and across different stakeholders (users, administrators, third parties); and Adversarial Reasoning to model threat actors, potential attack paths, their incentives, and constraints to prioritize defenses effectively.

Cybersecurity is a socio-technical discipline that requires the alignment of people, processes, and technology to protect organizations under the constant pressure of adversarial action and operational constraints. This book builds upon cutting-edge technologies and systematic security thinking instead of a traditional combination of cryptography, access control, and protocols.  It presents cybersecurity from foundational principles to emerging technologies and advanced threats, maintaining both theoretical rigor and practical engineering perspectives.

This book also presents three core positioning principles: Frontier-Technology Driven Principle focusing on cloud, multi-cloud, IoT/edge, 5G/6G, AI security, APT, OSN, biometrics, robotics, and drones; Architecture-Oriented Principle guided by the CIA (Confidentiality, Integrity, and Availability) triad and policy–people–technology pillars; and Case-Based Principle involving MOVEit, Snowflake, SolarWinds, OSN privacy events, deepfakes, biometric spoofing, and drone hijacking. It is a must-read reference book for computer security and cybersecurity professionals. Undergraduate and graduate students will find this book useful as a secondary textbook in cybersecurity.