16th Annual Computer Security Applications Conference (ACSAC '00)


Book Description

Annotation Forty-four papers from the December 2000 conference address challenges in the field of information security. The main areas of discussion are intrusion detection, security policy, public key infrastructure, access control, security architecture, e-commerce, and cryptography. Topics include extending Java for package-based access control, policy mediation for multi-enterprise environments, binding identities and attributes using digitally signed certificates, using operating system wrappers to increase the resiliency to commercial firewalls, calculating costs for quality of security service, and the Chinese Remainder Theorem and its application in a high-speed RSA crypto chip. No subject index. Annotation copyrighted by Book News, Inc., Portland, OR.
















Computer Security


Book Description

The Comprehensive Guide to Computer Security, Extensively Revised with Newer Technologies, Methods, Ideas, and Examples In this updated guide, University of California at Davis Computer Security Laboratory co-director Matt Bishop offers clear, rigorous, and thorough coverage of modern computer security. Reflecting dramatic growth in the quantity, complexity, and consequences of security incidents, Computer Security, Second Edition, links core principles with technologies, methodologies, and ideas that have emerged since the first edition’s publication. Writing for advanced undergraduates, graduate students, and IT professionals, Bishop covers foundational issues, policies, cryptography, systems design, assurance, and much more. He thoroughly addresses malware, vulnerability analysis, auditing, intrusion detection, and best-practice responses to attacks. In addition to new examples throughout, Bishop presents entirely new chapters on availability policy models and attack analysis. Understand computer security goals, problems, and challenges, and the deep links between theory and practice Learn how computer scientists seek to prove whether systems are secure Define security policies for confidentiality, integrity, availability, and more Analyze policies to reflect core questions of trust, and use them to constrain operations and change Implement cryptography as one component of a wider computer and network security strategy Use system-oriented techniques to establish effective security mechanisms, defining who can act and what they can do Set appropriate security goals for a system or product, and ascertain how well it meets them Recognize program flaws and malicious logic, and detect attackers seeking to exploit them This is both a comprehensive text, explaining the most fundamental and pervasive aspects of the field, and a detailed reference. It will help you align security concepts with realistic policies, successfully implement your policies, and thoughtfully manage the trade-offs that inevitably arise. Register your book for convenient access to downloads, updates, and/or corrections as they become available. See inside book for details.




Fourteenth Annual Computer Security Applications Conference


Book Description

The proceedings from the December 1998 conference consists of 35 papers, which have been kept in chronological order as they were presented, and provides practical solutions to real security problems. Day one addresses network intrusion detection, security administration, information infrastructure, and Internet technologies. The second day covers legal liability, electronic commerce, architectures, high-speed networks, cryptography, and intrusion detection. Subjects of the final day are digital signatures, assurance, and secure transactions. No index. Annotation copyrighted by Book News, Inc., Portland, OR.