Enterprise Level Security: Securing Information Systems in an Uncertain World

ISBN-13: 9780367658519 / Angielski / Miękka / 2020

William R. Simpson

Opis

This book provides a modern alternative to the fortress approach to security. The new approach is more distributed and has no need for passwords or accounts. Global attacks become much more difficult, and losses are localized, should they occur. The security approach is derived from a set of tenets that form the basic security model requirements

Spis treści

Introduction. BASICS AND PHILOSOPHY. Identity. Attributes. Access and Privilege. Cryptography. The Cloud. The Network. TECHNICAL DETAILS. Claims-Based Authentication. Credentials for Access Claims. Claims Creation. Invoking an Application. Cascading Authorization. Federation. Content Access Control. Delegation. The Enterprise Attribute Ecosystem. Database Access. Building Enterprise Software. Vulnerability Analyses. An Enterprise Support Desk. Network Defense. Concluding Remarks. Appendix. Bibliography.

O autorze

Dr. William R. Simpson earned his bachelor of science in aerospace engineering from Virginia Polytechnic Institute and State University, a master of science and a doctor of philosophy in aeronautical and astronautical engineering from Ohio State University, and a master of science in administration from George Washington University. He has held academic positions at George Mason University, Old Dominion University, the University of Maryland, and Ohio State University. He has held industry positions at the US Naval Air Test Center, the Center for Naval Analyses, the ARINC Research Corporation, and the Institute for Defense Analyses.