National Computer Security Conference, 1993 (16th) Proceedings


Book Description

Presentations of a conference. Covers a wide range of topics spanning the new draft Federal Criteria for Information Security, research and development activities, techniques for building secure computer systems and networks, and ethics issues. Papers and panels address harmonization of U.S. criteria for information technology security with international criteria, future techniques for integrating commercial off-the-shelf products into secure systems, access control and other networking challenges, etc. Numerous tables and figures.




National Computer Security Conference Proceedings, 1992


Book Description

Held October 13-16, 1992. Emphasizes information systems security criteria (& how it affects us), and the actions associated with organizational accreditation. These areas are highlighted by emphasizing how organizations are integrating information security solutions. Includes presentations from government, industry and academia and how they are cooperating to extend the state-of-the-art technology to information systems security. 72 referred papers, trusted systems tutorial and 23 executive summaries. Very valuable! Must buy!










Proceedings


Book Description




Attribute-Based Access Control


Book Description

This comprehensive new resource provides an introduction to fundamental Attribute Based Access Control (ABAC) models. This book provides valuable information for developing ABAC to improve information sharing within organizations while taking into consideration the planning, design, implementation, and operation. It explains the history and model of ABAC, related standards, verification and assurance, applications, as well as deployment challenges. Readers find authoritative insight into specialized topics including formal ABAC history, ABAC’s relationship with other access control models, ABAC model validation and analysis, verification and testing, and deployment frameworks such as XACML. Next Generation Access Model (NGAC) is explained, along with attribute considerations in implementation. The book explores ABAC applications in SOA/workflow domains, ABAC architectures, and includes details on feature sets in commercial and open source products. This insightful resource presents a combination of technical and administrative information for models, standards, and products that will benefit researchers as well as implementers of ABAC systems in the field.




IT-Security and Privacy


Book Description

Invasion of privacy and misuse of personal data are among the most obvious negative effects of today's information and communication technologies. Besides technical issues from a variety of fields, privacy legislation, depending on national activities and often lacking behind technical progress, plays an important role in designing, implementing, and using privacy-enhancing systems. Taking into account technical aspects from IT security, this book presents in detail a formal task-based privacy model which can be used to technically enforce legal privacy requirements. Furthermore, the author specifies how the privacy model policy has been implemented together with other security policies in accordance with the Generalized Framework for Access Control (GFAC). This book will appeal equally to R&D professionals and practitioners active in IT security and privacy, advanced students, and IT managers.




Policies for Distributed Systems and Networks


Book Description

Policy based systems are the subject of a wide range of activities in univer- ties, standardisation bodies, and within industry. They have a wide spectrum of applications ranging from quality of service management within networks to - curity and enterprise modelling. This Lecture Notes volume collects the papers presented at the workshop on Policies for Distributed Systems and Networks held at the Hewlett-Packard Laboratories in Bristol, UK in January 2001. After a rigorous review process 16 papers were selected from 43 submissions. Within the Internet community there is considerable interest in policy based networking. A number of companies have announced tools to support the sp- i?cation and deployment of policies. Much of this work is focused on policies for quality of service management within networks and the Internet Engineering and Distributed Management Task Force (IETF/DMTF) is actively working on standards related to this area. The security community has focused on the speci?cation and analysis of - cess control policy which has evolved into the work on Role-Based Access Control (RBAC). There has been work over a number of years in the academic c- munity on speci?cation and analysis of policies for distributed systems mostly concentrating on authorisation policies. Although there are strong similarities in the concepts and techniques used by the di?erent communities there is no commonly accepted terminology or notation for specifying policies.