...d set out a few tips of the trade. I invite others to chip in. We could all use some practical guidance. They don'tteach this stuff in schools and universities. You have to discover it by trial and error or at the feet of an experienced practitioner...
http://www.computerweekly.com/blogs/david_lacey/security-solutions/