Found through Schneier on Security: The Evolution of Security. I didn’t have time to read this carefully yet, but it seems to contain some good points relevant for my writings.