Security in Computing Systems : Challenges, Approaches and Solutions

With **Security in Computing Systems**, Joachim Biskup introduces, surveys and assesses the fundamentals of security with respect to all activities that individuals or groups directly or indirectly perform by means of computers and computer networks. He has organized his comprehensive overview on multilateral security into four cross-referencing parts: challenges and basic approaches; fundamentals of information flow and inference control; security mechanisms with an emphasis on control and monitoring on the one hand and on cryptography on the other; and implementations. Besides presenting informal surveys and introductions to these topics, the book carefully elaborates the fundamental ideas by at least partially explaining the required precise formalizations and outlining the achieved mathematical verifications. Moreover, the need to employ the various security enforcement methods in a well-coordinated way is emphasized and thoroughly exemplified, and this includes case studies on UNIX, Oracle/SQL, CORBA, Kerberos, SPKI/SDSI and PGP. Overall, this monograph provides a broad and comprehensive description of computer security threats and countermeasures, ideal for graduate students or researchers in academia and industry who require an introduction to the state of the art in this field. In addition, it can be used as the basis for graduate courses on security issues in computing. This monograph on Security in Computing Systems: Challenges, Approaches and Solutions aims at introducing, surveying and assessing the fundamentals of se- rity with respect to computing. Here, “computing” refers to all activities which individuals or groups directly or indirectly perform by means of computing s- tems, i. e., by means of computers and networks of them built on telecommuni- tion. We all are such individuals, whether enthusiastic or just bowed to the inevitable. So, as part of the ‘‘information society'', we are challenged to maintain our values, to pursue our goals and to enforce our interests, by consciously desi- ing a ‘‘global information infrastructure''on a large scale as well as by approp- ately configuring our personal computers on a small scale. As a result, we hope to achieve secure computing: Roughly speaking, computer-assisted activities of in- viduals and computer-mediated cooperation between individuals should happen as required by each party involved, and nothing else which might be harmful to any party should occur. The notion of security circumscribes many aspects, ranging from human qua- ties to technical enforcement. First of all, in considering the explicit security requirements of users, administrators and other persons concerned, we hope that usually all persons will follow the stated rules, but we also have to face the pos- bility that some persons might deviate from the wanted behavior, whether ac- dently or maliciously.

with Security In Computing Systems, Joachim Biskup Introduces, Surveys And Assesses The Fundamentals Of Security With Respect To All Activities That Individuals Or Groups Directly Or Indirectly Perform By Means Of Computers And Computer Networks.

he Has Organized His Comprehensive Overview On Multilateral Security Into Four Cross-referencing Parts: Challenges And Basic Approaches; Fundamentals Of Information Flow And Inference Control; Security Mechanisms With An Emphasis On Control And Monitoring On The One Hand And On Cryptography On The Other; And Implementations. Besides Presenting Informal Surveys And Introductions To These Topics, The Book Carefully Elaborates The Fundamental Ideas By At Least Partially Explaining The Required Precise Formalizations And Outlining The Achieved Mathematical Verifications. Moreover, The Need To Employ The Various Security Enforcement Methods In A Well-coordinated Way Is Emphasized And Thoroughly Exemplified, And This Includes Case Studies On Unix, Oracle/sql, Corba, Kerberos, Spki/sdsi And Pgp.

overall, This Monograph Provides A Broad And Comprehensive Description Of Computer Security Threats And Countermeasures, Ideal For Graduate Students Or Researchers In Academia And Industry Who Require An Introduction To The State Of The Art In This Field. In Addition, It Can Be Used As The Basis For Graduate Courses On Security Issues In Computing.

Front Matter....Pages i-xxvii Front Matter....Pages 1-1 Introduction....Pages 3-28 Fundamental Challenges....Pages 29-51 Computing Systems and Their Basic Vulnerabilities....Pages 53-64 Front Matter....Pages 65-65 Messages, Inferences, Information and Knowledge....Pages 67-92 Preventive Inference Control....Pages 93-153 Front Matter....Pages 155-155 Key Ideas and Examples....Pages 157-180 Combined Techniques....Pages 181-202 Techniques of Control and Monitoring: Essentials....Pages 203-208 Conceptual Access Rights....Pages 209-301 Elements of a Security Architecture....Pages 303-354 Monitoring and Intrusion Detection....Pages 355-367 Techniques of Cryptography: Essentials....Pages 369-427 Encryption....Pages 429-478 Authentication....Pages 479-512 Anonymization....Pages 513-525 Some Further Cryptographic Protocols....Pages 527-557 Front Matter....Pages 559-559 Design of Selected Systems....Pages 561-623 Back Matter....Pages 625-694 With this volume, Joachim Biskup introduces, surveys and assesses the fundamentals of security with respect to all activities that individuals or groups directly or indirectly perform by means of computers and computer networks