Access Control, Security, and Trust: A Logical Approach

ISBN-13: 9781584888628 / Angielski / Twarda / 2010 / 352 str.

Shiu-Kai Chin;Susan Beth Older;Douglas R. Stinson

Opis

Developed from the authors' courses at Syracuse University and the U.S. Air Force Research Laboratory, Access Control, Security, and Trust: A Logical Approach equips readers with an access control logic they can use to specify and verify their security designs. Throughout the text, the authors use a single access control logic based on a simple propositional modal logic. The first part of the book presents the syntax and semantics of access control logic, basic access control concepts, and an introduction to confidentiality and integrity policies. The second section covers access control in networks, delegation, protocols, and the use of cryptography. In the third section, the authors focus on hardware and virtual machines. The final part discusses confidentiality, integrity, and role-based access control. Taking a logical, rigorous approach to access control, this book shows how logic is a useful tool for analyzing security designs and spelling out the conditions upon which access control decisions depend. It is designed for computer engineers and computer scientists who are responsible for designing, implementing, and verifying secure computer and information systems.

Using propositional modal logic to explain access control principles, this workprovides the mathematical means to comprehend, analyze, create and verify the policies and control mechanisms used to protect resources. It starts with a preliminary introduction and then covers distributed access control, resources and sharing, and security monitors, the latter of which serves as a bridge to classical security models. While structured as a text for advanced undergraduates and graduate students, the book also meets the reference needs of those computer engineers, computer scientists, and information technologists responsible for designing, implementing, and verifying computer and information systems.

Recenzje

Focusing on the logic of access control, more than on actual computer programming, this volume is designed as a textbook for undergraduates. Each chapter ends with exercises and a concise description of expected learning outcomes. The authors, both in electrical engineering and computer science at Syracuse University, also teach an intensive summer course on access control for hundreds of ROTC cadets. It contains a useful selection of tables and figures, a notation index and a brief bibliography.
—SciTech Book News, February 2011

Spis treści

Preliminaries. Distributed Access Control. Isolation and Sharing. Access Policies. Appendix. Index.