Defining Information Security

Defining and Enforcing Referential Security

Referential integrity, which guarantees that named resources can be accessed when referenced, is an important property for reliability and security. In distributed systems, however, the attempt to provide referential integrity can itself lead to security vulnerabilities that are not currently well understood. This paper identifies three kinds of referential security vulnerabilities related to t...

Defining a Security Reference Architecture

This report discusses the definition and modeling of reference architectures that specify the security aspects of distributed systems. NSA’s MISSI (Multilevel Information System Security Initiative) security reference architecture is used as an illustrative example. We show how one would define such a reference architecture, and how one could use such a definition to model as well as check impl...

Defining security in steganographic systems

Risk-based Principles for Defining and Managing Water Security 1. Defining Water Security

The concept of water security implies concern about potentially harmful states of coupled human and natural water systems. Those harmful states may be associated with water scarcity (for humans and/or the environment), floods or harmful water quality. The theories and practices of risk analysis and risk management have been developed and elaborated to deal with the uncertain occurrence of harmf...

security of information laws

0