linux_review: The Practice of Network Security by Allan Liska
The central dogma of the book is the organization of a security policy on a series of fronts that when implemented in their totality provide "layers of protection" against attackers. This is excellent advice. Liska also drums home the message that network security has to be a priority for the entire organization, not only the IT department or network administrator. Without the involvement of the organization, the resulting security policy is sub-optimal at best and next to useless at worst.
The link for this article located at Paul Barry is no longer available.