| U. Lindqvist, T. Olovsson, , and E. Jonsson. An Analysis of a Secure System Based on Trusted Components. In Proc. 11th Ann. Conf. Computer Assurance, pages 213--223. IEEE Press, 1996. |
.... unauthorized disclosure of information Integrity: prevention of unauthorized modification of information Availability: prevention of unauthorized withholding of information or resources The definitions above are quoted verbatim from ITSEC [51] but are basically the same in the Common Criteria [11] and in the British code of practice [9] These three aspects cover much of what security is about, but not everything. For example, we might wish to add authenticity, meaning verification of the identity of a communicating party, and non repudiation, meaning prevention of the possibility for a ....
....British Standards Institution. Code of Practice for Information Security Management, 1995. BS 7799. 10] CERT Coordination Center, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA 15213 3890, USA. xterm Logging Vulnerability, November 11, 1993. CERT Advisory CA 93:17. [11] Common Criteria Implementation Board. Common Criteria for Information Technology Security Evaluation, May 1998. Version 2.0. See also ISO IEC 15408. 12] Mark Crosbie, Bryn Dole, Todd Ellis, Ivan Krsul, and Eugene Spafford. IDIOT users guide. Technical Report TR 96 050, COAST Laboratory, ....
[Article contains additional citation context not shown here]
Ulf Lindqvist, Tomas Olovsson, and Erland Jonsson. An analysis of a secure system based on trusted components. In Proceedings of the Eleventh Annual Conference on Computer Assurance (COMPASS '96), pages 213--223, Gaithersburg, Maryland, June 17--21, 1996. IEEE, Piscataway, New Jersey.
....recorded data for research purposes becomes much more difficult because most of the work needs to be done manually. Two other experiments should also be mentioned. First, procedures inspired by the intrusion experiments were used in an analysis of a secure system based on trusted components. See [16, 17] for a detailed description of this experiment. Second, a similar procedure was used to evaluate the security of Windows NT, see [7, 8] for an in depth description. These two experiments differ from those described earlier in one important aspect: we did not engage students as attackers. Instead, ....
Ulf Lindqvist, Tomas Olovsson, and Erland Jonsson. An analysis of a secure system based on trusted components. In Proceedings of the Eleventh Annual Conference on Computer Assurance, COMPASS'96, pages 213-- 223, Gaithersburg, MD, USA, June 17-21 1996. IEEE.
....the operational security of NT using penetration experiments. These may reveal vulnerabilities in the design, implementation as well as in the installation. Other penetration experiments have been carried out at our department, the most similar being a security analysis of a secure database [68]. However, most of our previous studies differ from the present. Firstly, the object systems were different: a networked UNIX operating system [62] 63] and a PC Network [66] Secondly, the attackers were final year university students. Thirdly, the attackers had to follow some rules, since the ....
Ulf Lindqvist, Thomas Olovsson and Erland Jonsson, An analysis of a secure system based on trusted components." In Proceedings of the Eleventh Annual Conference on Computer Assurance (COMPASS'96), pp. 213--223, Gaithersburg, Maryland, USA, June 17--21, 1996.
....These may reveal vulnerabilities in the design, implementation as well as in the installation. Other penetration experiments have been carried out at the Department of Computer Engineering at Chalmers University of Technology, the most similar being a security analysis of a secure database [9]. However, most of the previous works differ from the present. Firstly, the object systems were different: a networked UNIX operating system [13] 14] and a PC Network [7] Secondly, the attackers were final year university students. Thirdly, the attackers had to follow a number of quite specific ....
Ulf Lindqvist, Tomas Olovsson and Erland Jonsson, An analysis of a Secure System Based on Trusted Components. In Proceedings of the Eleventh Annual Conference on Computer Assurance (COMPASS '96), pp. 213--223, Gaithersburg, Maryland, USA, June 17--21, 1996.
No context found.
U. Lindqvist, T. Olovsson, , and E. Jonsson. An Analysis of a Secure System Based on Trusted Components. In Proc. 11th Ann. Conf. Computer Assurance, pages 213--223. IEEE Press, 1996.
No context found.
U. Lindqvist, T. Olovsson, and E. Jonsson, "An Analysis of a Secure System Based on Trusted Components," Proc. Eleventh Annual Conf. on Computer Assurance (COMPASS '96), pp. 213--223, Gaithersburg, Maryland, 1996.
No context found.
U. Lindqvist, T. Olovsson, and E. Jonsson, "An Analysis of a Secure System Based on Trusted Components," Proc. Eleventh Annual Conf. on Computer Assurance (COMPASS '96), pp. 213--223, Gaithersburg, Maryland, 1996
No context found.
U. Lindqvist, T. Olovsson, and E. Jonsson, "An Analysis of a Secure System Based on Trusted Components," Proc. 11th Ann. Conf. Computer Assurance, IEEE Press, Piscataway, N.J., 1996, pp. 213-223.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC