Research Catalog

Title

Information security : an integrated collection of essays / [edited by] Marshall D. Abrams, Sushil Jajodia, Harold J. Podell.

Publication

Los Alamitos, Calif. : IEEE Computer Society Press, 1995.

Items in the Library & Off-site

Holdings

Details

Additional Authors

• Abrams, Marshall D.
• Jajodia, Sushil.
• Podell, Harold J.

Description

vii, 753 pages : illustrations; 26 cm

Summary

• This collection of essays provides a comprehensive summary of practice and research. The essays provide an overview of the vulnerabilities and threats to information security and introduce the important concepts and terms. In addition, the essays summarize the definitions and controls of the trusted computer system evaluation criteria and discuss information security policy focusing on information control and dissemination. Recommendations are presented based on practical experience.
• Other essays explore the architectures used in the development of trusted relational database management systems, discuss the effects that multilevel DBMS security requirements can have on the system's data integrity, and compare three research DBMS prototypes.
• Additional essays identify the motivation for using formal methods across different development stages of a trusted computer system, feature a new approach to formal modeling of a trusted computer system, and present a new security model for mandatory access controls in object-oriented database systems. The book concludes with a list of acronyms, a glossary offering multiple definitions of terms, and a list of references from the text.

Subject

Computer security

Bibliography (note)

• Includes bibliographical references (p. 635-671) and index.

Contents

• 1. What Is There to Worry About? An Introduction to the Computer Security Problem / Donald L. Brinkley and Roger R. Schell -- 2. Concepts and Terminology for Computer Security / Donald L. Brinkley and Roger R. Schell -- 3. A Philosophy of Security Management / David Bailey -- 4. Malicious Software / Marshall D. Abrams and Harold J. Podell -- 5. Abstraction and Refinement of Layered Security Policy / Marshall D. Abrams and David Bailey -- 6. Evaluation Criteria for Trusted Systems / Roger R. Schell and Donald L. Brinkley -- 7. Information Security Policy / Ingrid M. Olson and Marshall D. Abrams -- 8. Formal Methods and Models / James G. Williams and Marshall D. Abrams -- 9. Rule-Set Modeling of a Trusted Computer System / Leonard J. LaPadula -- 10. Representative Organizations That Participate in Open Systems Security Standards Development / Harold J. Podell -- 11. Penetration Testing / Clark Weissman -- 12. Evaluation Issues / Marshall D. Abrams and Harold J. Podell --
• 13. Supporting Policies and Functions / Marshall D. Abrams and Harold J. Podell -- 14. Security Engineering / Marshall D. Abrams, Harold J. Podell and Daniel W. Gambel -- 15. Cryptography / Marshall D. Abrams and Harold J. Podell -- 16. Local Area Networks / Marshall D. Abrams and Harold J. Podell -- 17. Internet Privacy Enhanced Mail / Stephen T. Kent -- 18. Electronic Data Interchange (EDI) Messaging Security / Ted Humphreys -- 19. Architectures for MLS Database Management Systems / LouAnna Notargiacomo -- 20. Toward a Multilevel Secure Relational Data Model / Sushil Jajodia and Ravi S. Sandhu -- 21. Solutions to the Polyinstantiation Problem / Sushil Jajodia, Ravi S. Sandhu and Barbara T. Blaustein -- 22. Integrity in Multilevel Secure Database Management Systems / Catherine Meadows and Sushil Jajodia -- 23. Multilevel Secure Database Management Prototypes / Thomas H. Hinke --
• 24. Inference Problems in Multilevel Secure Database Management Systems / Sushil Jajodia and Catherine Meadows -- 25. Logical Design of Audit Information in Relational Databases / Sushil Jajodia, Shashi K. Gadia and Gautam Bhargava -- 26. A Multilevel Secure Object-Oriented Data Model / Sushil Jajodia, Boris Kogan and Ravi S. Sandhu -- 27. Integrity Mechanisms in Database Management Systems / Ravi S. Sandhu and Sushil Jajodia.

ISBN

• 0818636629
• 0818636610 (fiche)

LCCN

94020899

OCLC

• 30593228
• ocm30593228

Owning Institutions

Columbia University Libraries