Computer System and Network Security

Gregory B. White (SecureLogix, San Antonio, Texas, USA) (Author) ,  Eric A. Fisch (KPMG LLP, Plano, Texas, USA) (Author) ,  Udo W. Pooch (Texas A & M University, College Station, Texas, USA) (Author)

• Computer Security FundamentalsObjectives of Computer SecurityIssues Involved in Computer SecurityPrivacy and EthicsRisk AnalysisTheoryPossible Loss (L)Probability of Loss Occurrence (P)Burden of Preventing Loss (B)Applying the Risk Analysis EquationRisk Analysis in Computer SecurityTerminologyApplicationDeveloping Secure Computer SystemsExternal Security MeasuresStructure of a Computer SystemSecure Computer System IssuesSecurity ModelsSpecification and VerificationSecurity ModelsBell and LaPadulaClark-WilsonGoguen-MeseguerTCSECDiscretionary Access RequirementsMandatory Access RequirementsUser AuthenticationAuthentication ObjectivesAuthentication MethodsInformational KeysPhysical KeysBiometric KeysAccess and Information Flow ControlsFile PasswordsCapabilities BasedAccess Control ListsProtection BitsControls for Mandatory AccessTrojan HorsesAUDITING and INTRUSION DETECTIONAudit Trail FeaturesIntrusion Detection SystemsUser ProfilingIntruder ProfilingSignature AnalysisAction BasedIDESMIDASHaystackNetwork Intrusion DetectionNetwork Attack CharacteristicsNSMDIDSNADIRCSMMonitoring and the LawDamage Control and AssessmentDamage ControlInform the AuthoritiesBackup System DataRemove the IntruderContain and Monitor the IntruderLock Stolen AccountsRequire Additional AuthenticationDamage AssessmentAttack RecoveryDamage PreventionNetwork SecurityNetwork FundamentalsNetwork Security IssuesBasic Network Security Objectives and ThreatsSecurity ServicesThe Trusted Network InterpretationTNI Security ServiceAIS Interconnection IssuesDistributed Systems SecurityFirewallsSimple Damage Limiting ApproachesNetwork FirewallsPacket Filtering GatewaysCircuit Level GatewaysApplication Level GatewaysFirewall Costs and EffectivenessDatabase SecurityDatabase Management System PrimerDBMS Vulnerabilities and ResponsesInferenceAggregationData IntegrityTrojan HorsesCryptographySubstitution CiphersCaesar CipherROT13Substitution Cipher VariationsVigenere CiphersOne Time PadsTransposition CiphersEncrypting Digital CommunicationDESIDEAKey EscrowPublic Key CryptographyDigital SignaturesMalicious SoftwareVirusesWormsTrojan HorsesTime BombsSecurity StandardsThe Federal CriteriaThe Common CriteriaThe Trusted Computer System Evaluation CriteriaThe Information Technology Security Evaluation CriteriaCase StudyThe Hannover HackersAn Evening With BerferdThe Internet WormAppendix: Information Warfare