Computers at Risk


Book Description

Computers at Risk presents a comprehensive agenda for developing nationwide policies and practices for computer security. Specific recommendations are provided for industry and for government agencies engaged in computer security activities. The volume also outlines problems and opportunities in computer security research, recommends ways to improve the research infrastructure, and suggests topics for investigators. The book explores the diversity of the field, the need to engineer countermeasures based on speculation of what experts think computer attackers may do next, why the technology community has failed to respond to the need for enhanced security systems, how innovators could be encouraged to bring more options to the marketplace, and balancing the importance of security against the right of privacy.










IT-Security and Privacy


Book Description

Invasion of privacy and misuse of personal data are among the most obvious negative effects of today's information and communication technologies. Besides technical issues from a variety of fields, privacy legislation, depending on national activities and often lacking behind technical progress, plays an important role in designing, implementing, and using privacy-enhancing systems. Taking into account technical aspects from IT security, this book presents in detail a formal task-based privacy model which can be used to technically enforce legal privacy requirements. Furthermore, the author specifies how the privacy model policy has been implemented together with other security policies in accordance with the Generalized Framework for Access Control (GFAC). This book will appeal equally to R&D professionals and practitioners active in IT security and privacy, advanced students, and IT managers.




Proceedings


Book Description




Information Systems Security


Book Description

This book constitutes the refereed proceedings of the Second International Conference on Information Systems Security, ICISS 2006, held in Kolkata, India in December 2006. The 20 revised full papers and five short papers presented together with four invited papers and three ongoing project summaries were carefully reviewed and selected from 79 submissions. The papers discuss in depth the current state of the research and practice in information systems security.




ESEC '89


Book Description

The book is concerned with the broad topic of software engineering. It comprises the proceedings of the European Software Engineering Conference (ESEC) held at the University of Warwick in the United Kingdom in September 1989 and its primary purpose is to summarise the state of the art in software engineering as represented by the papers at that conference. The material covers both submitted papers and a number of invited papers given at the conference. The topics covered include: metrics and measurement, software process modelling, formal methods including their use in industry, software configuration management, software development environments, and requirements engineering. The book is most likely to be of interest to researchers and professionals working in the field of software development. The primary value of the book is that it gives an up-to-date treatment of its subject material and includes some interesting discussions of the transfer of research ideas into industrial practice.




Understanding Intrusion Detection through Visualization


Book Description

Computer security - the protection of data and computer systems from intentional, malicious intervention - is attracting increasing attention. Much work has gone into development of tools to detect ongoing or already perpetrated attacks, but a key shortfall in current intrusion detection systems is the high number of false alarms they produce. This book analyzes the false alarm problem, then applies results from the field of information visualization to the problem of intrusion detection. Four different visualization approaches are presented, mainly applied to data from web server access logs.