Flegel Privacy-Respecting Intrusion Detection

1. Auflage 2007
ISBN: 978-0-387-68254-9
Verlag: Springer-Verlag
Format: PDF
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 307 Seiten

Computer and network security is an issue that has been studied for many years. The Ware Report, which was published in 1970, pointed out the need for c- puter security and highlighted the di?culties in evaluating a system to determine if it provided the necessary security for particular applications. The Anderson Report, published in 1972, was the outcome of an Air Force Planning Study whose intent was to de?ne the research and development paths required to make secure computers a reality in the USAF. A major contribution of this report was the de?nition of the reference monitor concept, which led to security kernel architectures. In the mid to late 1970s a number of systems were designed and implemented using a security kernel architecture. These systems were mostly sponsored by the defense establishment and were not in wide use. Fast forwarding to more recent times, the advent of the world-wide web, inexp- sive workstations for the o?ce and home, and high-speed connections has made it possible for most people to be connected. This access has greatly bene?ted society allowing users to do their banking, shopping, and research on the Int- net. Most every business, government agency, and public institution has a public facing web page that can be accessed by anyone anywhere on the Internet. - fortunately, society’s increased dependency on networked software systems has also given easy access to the attackers, and the number of attacks is steadily increasing.

Autoren/Hrsg.

Flegel, Ulrich

Inhaltsverzeichnis

1;Contents;6
2;List of Figures;9
3;List of Tables;12
4;Foreword;13
5;Acknowledgements;16
6;Introduction and Background;17
6.1;1 Introduction;18
6.2;2 Authorizations;24
6.3;3 An Architectural Model for Secure Authorizations;28
6.4;4 Traditional Security Objectives;41
6.5;5 Personal Data Protection Objectives;45
6.6;6 The Challenge: Technical Enforcement of Multilateral Security;57
6.7;7 Pseudonyms – A Technical Point of View;61
6.8;8 An Architectural Model for Pseudonymous and Secure Authorizations;69
6.9;9 Comparing Architectures;78
6.10;10 Audit Data Pseudonymization;89
7;Set-based Approach;100
7.1;11 Requirements, Assumptions and Trust Model;101
7.2;12 Modeling Conditions for Technical Purpose Binding of Controlled Pseudonym Disclosure;106
7.3;13 Cryptographic Enforcement of Disclosure Conditions;112
7.4;14 The Mismatch Problem;117
7.5;15 Operational Pseudonymization and Pseudonym Disclosure;122
7.6;16 Extensions;129
8;Application to Unix Audit Data;141
8.1;17 Unix Audit Data;142
8.2;18 Syslog;146
8.3;19 Instantiating the Set-based Approach for Syslog- style Audit Data;151
8.4;20 Implementation: Pseudo/CoRe;163
9;Evaluation;172
9.1;21 APES: Anonymity and Privacy in Electronic Services;173
9.2;22 Evaluating the Design Using Basic Building Blocks for Anonymity;179
9.3;23 Evaluating the Performance of the Implementation;189
10;Refinement of Misuse Scenario Models;198
10.1;24 Motivating Model Refinements;199
10.2;25 Models of Misuse Scenarios;202
10.3;26 Pseudonymization Based on Serial Signature- Nets;228
10.4;27 Pseudonym Linkability;231
10.5;28 Pseudonym Disclosure;244
11;Summary;280
12;A Threshold Schemes for Cryptographic Secret Sharing;282
13;References;284
14;Index;300