The most complete book on information security theory, technology, and practice from a well-recognized security authority and educator.
Matt Bishop is an expert in information assurance and robust, safe code- important topics today.
Current with the latest developments.
Well-suited to become the leading security textbook.
The importance of computer security has increased dramatically during the past few years. Bishop provides a monumental reference for the theory and practice of computer security. This is a textbook intended for use at the advanced undergraduate and introductory graduate levels, non-University training courses, as well as reference and self-study for security professionals. Comprehensive in scope, this covers applied and practical elements, theory, and the reasons for the design of applications and security techniques. Bishop treats the management and engineering issues of computer. Excellent examples of ideas and mechanisms show how disparate techniques and principles are combined (or not) in widely-used systems. Features a distillation of a vast number of conference papers, dissertations and books that have appeared over the years, providing a valuable synthesis. This book is acclaimed for its scope, clear and lucid writing, and its combination of formal and theoretical aspects with real systems, technologies, techniques, and policies. Matt Bishop a recognized authority in computer security research. He is Assistant Professor in the Department of Computer Science at the University of California at Davis. Recent efforts involve improving education in the field of information assurance and teaching robust and safe programming. His expertise is in vulnerability analysis, the design of secure systems and software, network security, formal models of access control, user authentication, and UNIX security. Ph.D. Purdue University, 1984.
Product Description
The importance of computer security has increased dramatically during the past few years. Bishop provides a monumental reference for the theory and practice of computer security. This is a textbook intended for use at the advanced undergraduate and introductory graduate levels, non-University training courses, as well as reference and self-study for security professionals. Comprehensive in scope, this covers applied and practical elements, theory, and the reasons for the design of applications and security techniques. Bishop treats the management and engineering issues of computer. Excellent examples of ideas and mechanisms show how disparate techniques and principles are combined (or not) in widely-used systems. Features a distillation of a vast number of conference papers, dissertations and books that have appeared over the years, providing a valuable synthesis. This book is acclaimed for its scope, clear and lucid writing, and its combination of formal and theoretical aspects with real systems, technologies, techniques, and policies.
Features + Benefits
The most complete book on information security theory, technology, and practice from a well-recognized security authority and educator.
° Matt Bishop is a well-recognized authority and educator in computer security. He is an expert in information assurance and robust, safe code; important topics today.
° Current with the latest developments.
° Well-suited to become the leading security textbook.
Backcover
This is an excellent text that should be read by every computer security professional and student.
-Dick Kemmerer, University of California, Santa Barbara.
This is the most complete book on information security theory, technology, and practice that I have encountered anywhere!
-Marvin Schaefer, Former Chief Scientist, National Computer Security Center, NSA
This highly anticipated book fully introduces the theory and practice of computer security. It is both a comprehensive text, explaining the most fundamental and pervasive aspects of the field, and a detailed reference filled with valuable information for even the most seasoned practitioner. In this one extraordinary volume the author incorporates concepts from computer systems, networks, human factors, and cryptography. In doing so, he effectively demonstrates that computer security is an art as well as a science.
Computer Security: Art and Science includes detailed discussions on:
The nature and challenges of computer security
The relationship between policy and security
The role and application of cryptography
The mechanisms used to implement policies
Methodologies and technologies for assurance
Vulnerability analysis and intrusion detection Computer Security discusses different policy models, and presents mechanisms that can be used to enforce these policies. It concludes with examples that show how to apply the principles discussed in earlier sections, beginning with networks and moving on to systems, users, and programs.
This important work is essential for anyone who needs to understand, implement, or maintain a secure network or computer system.
0201440997B10252002
(NOTE: Each chapter, except chapter 29, concludes with a Summary, Research Issues, Further Reading, and Exercises.)
Preface.
Goals.
Philosophy.
Organization.
Roadmap.
Dependencies.
Background.
Undergraduate Level.
Graduate Level.
Practitioners.
Special Acknowledgment.
Acknowledgments.
I. INTRODUCTION.
1. An Overview of Computer Security.
The Basic Components.
Confidentiality.
Integrity.
Availability.
Threats.
Policy and Mechanism.
Goals of Security.
Assumptions and Trust.
Assurance.
Specification.
Design.
Implementation.
Operational Issues.
Cost-Benefit Analysis.
Risk Analysis.
Laws and Customs.
Human Issues.
Organizational Problems.
People Problems.
Tying It All Together.
II. FOUNDATIONS.
2. Access Control Matrix.
Protection State.
Access Control Matrix Model.
Access Control by Boolean Expression Evaluation.
Access Controlled by History.
Protection State Transitions.
Conditional Commands.
Copying, Owning, and the Attenuation of Privilege.
Copy Right.
Own Right.
Principle of Attenuation of Privilege.
3. Foundational Results.
The General Question.
Basic Results.
The Take-Grant Protection Model.
Sharing of Rights.
Interpretation of the Model.
Theft in the Take-Grant Protection Model.
Conspiracy.
Summary.
Closing the Gap.
Schematic Protection Model.
Expressive Power and the Models.
Brief Comparison of HRU and SPM.
Extending SPM.
Simulation and Expressiveness.
Typed Access Matrix Model.
III. POLICY.
4. Security Policies.
Security Policies.
Types of Security Policies.
The Role of Trust.
Types of Access Control.
Policy Languages.
High-Level Policy Languages.
Low-Level Policy Languages.
Example: Academic Computer Security Policy.
General University Policy.
Electronic Mail Policy.
Security and Precision.
5. Confidentiality Policies.
Goals of Confidentiality Policies.
The Bell-LaPadula Model.
Informal Description.
Example: The Data General B2 UNIX System.
Formal Model.
Example Model Instantiation: Multics.
Tranquility.
The Controversy over the Bell-LaPadula Model.
McLean's *-Property and the Basic Security Theorem.
McLean's System Z and More Questions.
Summary.
6. Integrity Policies.
Goals.
Biba Integrity Model.
Low-Water-Mark Policy.
Ring Policy.
Biba's Model (Strict Integrity Policy).
Lipner's Integrity Matrix Model.
Lipner's Use of the Bell-LaPadula Model.
Lipner's Full Model.
Comparison with Biba.
Clark-Wilson Integrity Model.
The Model.
Comparison with the Requirements.
Comparison with Other Models.
7. Hybrid Policies.
Chinese Wall Model.
Informal Description.
Formal Model.
Bell-LaPadula and Chinese Wall Models.
Clark-Wilson and Chinese Wall Models.
Clinical Information Systems Security Policy.
Bell-LaPadula and Clark-Wilson Models.
Originator Controlled Access Control.
Role-Based Access Control.
8. Noninterference and Policy Composition.
The Problem.
Composition of Bell-LaPadula Models.
Deterministic Noninterference.
Unwinding Theorem.
Access Control Matrix Interpretation.
Security Policies That Change over Time.
Composition of Deterministic Noninterference-Secure Systems.
Nondeducibility.
Composition of Deducibly Secure Systems.
Generalized Noninterference.
Composition of Generalized Noninterference Systems.
Restrictiveness.
State Machine Model.
Composition of Restrictive Systems.
IV. IMPLEMENTATION I: CRYPTOGRAPHY.
9. Basic Cryptography.
What Is Cryptography?
Classical Cryptosystems.
Transposition Ciphers.
Substitution Ciphers.
Data Encryption Standard.
Other Classical Ciphers.
Public Key Cryptography.
Diffie-Hellman.
RSA.
Cryptographic Checksums.
HMAC.
10. Key Management.
Session and Interchange Keys.
Key Exchange.
Classical Cryptographic Key Exchange and Authentication.
Kerberos.
Public Key Cryptographic Key Exchange and Authentication.
Key Generation.
Cryptographic Key Infrastructures.
Merkle's Tree Authentication Scheme.
Certificate Signature Chains.
Summary.
Storing and Revoking Keys.
Key Storage.
Key Revocation.
Digital Signatures.
Classical Signatures.
Public Key Signatures.
11. Cipher Techniques.
Problems.
Precomputing the Possible Messages.
Misordered Blocks.
Statistical Regularities.
Summary.
Stream and Block Ciphers.
Stream Ciphers.
Block Ciphers.
Networks and Cryptography.
Example Protocols.
Secure Electronic Mail: PEM.
Security at the Transport Layer: SSL.
Security at the Network Layer: IPsec.
Conclusion.
12. Authentication.
Authentication Basics.
Passwords.
Attacking a Password System.
Countering Password Guessing.
Password Aging.
Challenge-Response.
Pass Algorithms.
One-Time Passwords.
Hardware-Supported Challenge-Response Procedures.
Challenge-Response and Dictionary Attacks.
Biometrics.
Fingerprints.
Voices.
Eyes.
Faces.
Keystrokes.
Combinations.
Caution.
Location.
Multiple Methods.
V. IMPLEMENTATION II: SYSTEMS.
13. Design Principles.
Overview.
Design Principles.
Principle of Least Privilege.
Principle of Fail-Safe Defaults.
Principle of Economy of Mechanism.
Principle of Complete Mediation.
Principle of Open Design.
Principle of Separation of Privilege.
Principle of Least Common Mechanism.
Principle of Psychological Acceptability.
14. Representing Identity.
What Is Identity?
Files and Objects.
Users.
Groups and Roles.
Naming and Certificates.
Conflicts.
The Meaning of the Identity.
Trust.
Identity on the Web.
<
Matt Bishop is an expert in information assurance and robust, safe code- important topics today.
Current with the latest developments.
Well-suited to become the leading security textbook.
The importance of computer security has increased dramatically during the past few years. Bishop provides a monumental reference for the theory and practice of computer security. This is a textbook intended for use at the advanced undergraduate and introductory graduate levels, non-University training courses, as well as reference and self-study for security professionals. Comprehensive in scope, this covers applied and practical elements, theory, and the reasons for the design of applications and security techniques. Bishop treats the management and engineering issues of computer. Excellent examples of ideas and mechanisms show how disparate techniques and principles are combined (or not) in widely-used systems. Features a distillation of a vast number of conference papers, dissertations and books that have appeared over the years, providing a valuable synthesis. This book is acclaimed for its scope, clear and lucid writing, and its combination of formal and theoretical aspects with real systems, technologies, techniques, and policies. Matt Bishop a recognized authority in computer security research. He is Assistant Professor in the Department of Computer Science at the University of California at Davis. Recent efforts involve improving education in the field of information assurance and teaching robust and safe programming. His expertise is in vulnerability analysis, the design of secure systems and software, network security, formal models of access control, user authentication, and UNIX security. Ph.D. Purdue University, 1984.
Product Description
The importance of computer security has increased dramatically during the past few years. Bishop provides a monumental reference for the theory and practice of computer security. This is a textbook intended for use at the advanced undergraduate and introductory graduate levels, non-University training courses, as well as reference and self-study for security professionals. Comprehensive in scope, this covers applied and practical elements, theory, and the reasons for the design of applications and security techniques. Bishop treats the management and engineering issues of computer. Excellent examples of ideas and mechanisms show how disparate techniques and principles are combined (or not) in widely-used systems. Features a distillation of a vast number of conference papers, dissertations and books that have appeared over the years, providing a valuable synthesis. This book is acclaimed for its scope, clear and lucid writing, and its combination of formal and theoretical aspects with real systems, technologies, techniques, and policies.
Features + Benefits
The most complete book on information security theory, technology, and practice from a well-recognized security authority and educator.
° Matt Bishop is a well-recognized authority and educator in computer security. He is an expert in information assurance and robust, safe code; important topics today.
° Current with the latest developments.
° Well-suited to become the leading security textbook.
Backcover
This is an excellent text that should be read by every computer security professional and student.
-Dick Kemmerer, University of California, Santa Barbara.
This is the most complete book on information security theory, technology, and practice that I have encountered anywhere!
-Marvin Schaefer, Former Chief Scientist, National Computer Security Center, NSA
This highly anticipated book fully introduces the theory and practice of computer security. It is both a comprehensive text, explaining the most fundamental and pervasive aspects of the field, and a detailed reference filled with valuable information for even the most seasoned practitioner. In this one extraordinary volume the author incorporates concepts from computer systems, networks, human factors, and cryptography. In doing so, he effectively demonstrates that computer security is an art as well as a science.
Computer Security: Art and Science includes detailed discussions on:
The nature and challenges of computer security
The relationship between policy and security
The role and application of cryptography
The mechanisms used to implement policies
Methodologies and technologies for assurance
Vulnerability analysis and intrusion detection Computer Security discusses different policy models, and presents mechanisms that can be used to enforce these policies. It concludes with examples that show how to apply the principles discussed in earlier sections, beginning with networks and moving on to systems, users, and programs.
This important work is essential for anyone who needs to understand, implement, or maintain a secure network or computer system.
0201440997B10252002
(NOTE: Each chapter, except chapter 29, concludes with a Summary, Research Issues, Further Reading, and Exercises.)
Preface.
Goals.
Philosophy.
Organization.
Roadmap.
Dependencies.
Background.
Undergraduate Level.
Graduate Level.
Practitioners.
Special Acknowledgment.
Acknowledgments.
I. INTRODUCTION.
1. An Overview of Computer Security.
The Basic Components.
Confidentiality.
Integrity.
Availability.
Threats.
Policy and Mechanism.
Goals of Security.
Assumptions and Trust.
Assurance.
Specification.
Design.
Implementation.
Operational Issues.
Cost-Benefit Analysis.
Risk Analysis.
Laws and Customs.
Human Issues.
Organizational Problems.
People Problems.
Tying It All Together.
II. FOUNDATIONS.
2. Access Control Matrix.
Protection State.
Access Control Matrix Model.
Access Control by Boolean Expression Evaluation.
Access Controlled by History.
Protection State Transitions.
Conditional Commands.
Copying, Owning, and the Attenuation of Privilege.
Copy Right.
Own Right.
Principle of Attenuation of Privilege.
3. Foundational Results.
The General Question.
Basic Results.
The Take-Grant Protection Model.
Sharing of Rights.
Interpretation of the Model.
Theft in the Take-Grant Protection Model.
Conspiracy.
Summary.
Closing the Gap.
Schematic Protection Model.
Expressive Power and the Models.
Brief Comparison of HRU and SPM.
Extending SPM.
Simulation and Expressiveness.
Typed Access Matrix Model.
III. POLICY.
4. Security Policies.
Security Policies.
Types of Security Policies.
The Role of Trust.
Types of Access Control.
Policy Languages.
High-Level Policy Languages.
Low-Level Policy Languages.
Example: Academic Computer Security Policy.
General University Policy.
Electronic Mail Policy.
Security and Precision.
5. Confidentiality Policies.
Goals of Confidentiality Policies.
The Bell-LaPadula Model.
Informal Description.
Example: The Data General B2 UNIX System.
Formal Model.
Example Model Instantiation: Multics.
Tranquility.
The Controversy over the Bell-LaPadula Model.
McLean's *-Property and the Basic Security Theorem.
McLean's System Z and More Questions.
Summary.
6. Integrity Policies.
Goals.
Biba Integrity Model.
Low-Water-Mark Policy.
Ring Policy.
Biba's Model (Strict Integrity Policy).
Lipner's Integrity Matrix Model.
Lipner's Use of the Bell-LaPadula Model.
Lipner's Full Model.
Comparison with Biba.
Clark-Wilson Integrity Model.
The Model.
Comparison with the Requirements.
Comparison with Other Models.
7. Hybrid Policies.
Chinese Wall Model.
Informal Description.
Formal Model.
Bell-LaPadula and Chinese Wall Models.
Clark-Wilson and Chinese Wall Models.
Clinical Information Systems Security Policy.
Bell-LaPadula and Clark-Wilson Models.
Originator Controlled Access Control.
Role-Based Access Control.
8. Noninterference and Policy Composition.
The Problem.
Composition of Bell-LaPadula Models.
Deterministic Noninterference.
Unwinding Theorem.
Access Control Matrix Interpretation.
Security Policies That Change over Time.
Composition of Deterministic Noninterference-Secure Systems.
Nondeducibility.
Composition of Deducibly Secure Systems.
Generalized Noninterference.
Composition of Generalized Noninterference Systems.
Restrictiveness.
State Machine Model.
Composition of Restrictive Systems.
IV. IMPLEMENTATION I: CRYPTOGRAPHY.
9. Basic Cryptography.
What Is Cryptography?
Classical Cryptosystems.
Transposition Ciphers.
Substitution Ciphers.
Data Encryption Standard.
Other Classical Ciphers.
Public Key Cryptography.
Diffie-Hellman.
RSA.
Cryptographic Checksums.
HMAC.
10. Key Management.
Session and Interchange Keys.
Key Exchange.
Classical Cryptographic Key Exchange and Authentication.
Kerberos.
Public Key Cryptographic Key Exchange and Authentication.
Key Generation.
Cryptographic Key Infrastructures.
Merkle's Tree Authentication Scheme.
Certificate Signature Chains.
Summary.
Storing and Revoking Keys.
Key Storage.
Key Revocation.
Digital Signatures.
Classical Signatures.
Public Key Signatures.
11. Cipher Techniques.
Problems.
Precomputing the Possible Messages.
Misordered Blocks.
Statistical Regularities.
Summary.
Stream and Block Ciphers.
Stream Ciphers.
Block Ciphers.
Networks and Cryptography.
Example Protocols.
Secure Electronic Mail: PEM.
Security at the Transport Layer: SSL.
Security at the Network Layer: IPsec.
Conclusion.
12. Authentication.
Authentication Basics.
Passwords.
Attacking a Password System.
Countering Password Guessing.
Password Aging.
Challenge-Response.
Pass Algorithms.
One-Time Passwords.
Hardware-Supported Challenge-Response Procedures.
Challenge-Response and Dictionary Attacks.
Biometrics.
Fingerprints.
Voices.
Eyes.
Faces.
Keystrokes.
Combinations.
Caution.
Location.
Multiple Methods.
V. IMPLEMENTATION II: SYSTEMS.
13. Design Principles.
Overview.
Design Principles.
Principle of Least Privilege.
Principle of Fail-Safe Defaults.
Principle of Economy of Mechanism.
Principle of Complete Mediation.
Principle of Open Design.
Principle of Separation of Privilege.
Principle of Least Common Mechanism.
Principle of Psychological Acceptability.
14. Representing Identity.
What Is Identity?
Files and Objects.
Users.
Groups and Roles.
Naming and Certificates.
Conflicts.
The Meaning of the Identity.
Trust.
Identity on the Web.
<