Principles of Data Security

ISBN-13: 9781468443189 / Angielski / Miękka / 2012 / 238 str.

Ernst L. Leiss

Opis

With the greatly increased use of electronic media for processing and storing data, data security became an important practical issue. This is especially true for the extensively shared and distributed systems which are more and more being accepted in commercial operations. Essen tially, the problem is that of protecting data, including all the impli cations which this has to the end user as well as the systems or database designer. However, usually the term data security refers to protection by technical, i.e., computer science specific, means; if one wants to in clude issues such as physical security, how to select the group of people who should have authority to perform certain operations, etc., the term computer security is more appropriate. The object of this book is to provide technical solutions to (facets of) the problem of achieving data security. The reader who hopes to find clever recipes which allow circumventing protection mechanisms will, however, be sadly disappointed. In fact, we deliberately kept the presentation of the material at a fairly general level. While the short term benefit of such an approach may be somewhat smaller, we feel that without a thorough understanding of the fundamental issues and problems in data security there will never be secure systems. True, peo ple probably always considered certain security aspects when designing a system. However, an integrated approach is absolutely imperative."

Spis treści

1. Data Security: Introduction and Motivation.- 2. Statistical Database Security.- 2.1. Introduction.- 2.1.1. Motivation.- 2.1.2. Models and Methodology.- 2.2. Security with Characteristic-Specified Queries.- 2.2.1. Queries of Type Sum: A Case Study.- 2.2.2. The Notion of a Tracker.- 2.3. Security in the Key-Specified Model.- 2.3.1. Compromisable Databases.- 2.3.2. Secure Databases.- 2.4. Conclusion.- 3. Authorization Mechanisms.- 3.1. Introduction.- 3.2. The Undecidability of the Safety Problem for General Authorization Systems.- 3.2.1. Relevance and Implications of the Result.- 3.2.2. The Model and Its Safety Problem.- 3.2.3. The Main Theorem.- 3.3. Authorization Systems with Tractable Safety Problem.- 3.3.1. Grammatical Authorization Systems.- 3.3.2. Regular Authorization Systems.- 3.3.3. An Application: The Take-Grant System.- 3.4. Overview of a Practical Implementation.- 3.4.1. Motivation.- 3.4.2. The Model.- 3.4.3. Implementation Considerations.- 3.4.4. Bounded Propagation of Privileges.- 4. Cryptosystems.- 4.1. Introduction and Motivation.- 4.1.1. The Notion of Encryption.- 4.1.2. Applications.- 4.1.3. Limitations.- 4.2. Symmetric Cryptosystems.- 4.3. Public Key Cryptosystems.- 4.3.1. The Concept of Public Key Cryptography.- 4.3.2. An Implementation Based on Factoring and Primes.- 4.3.3. Code Breaking and Factorization.- 4.3.4. An Implementation Based on the Knapsack Problem.- 4.3.5. Privacy Homomorphisms.- 4.4. Authentication and Digital Signatures.- 4.4.1. Introduction.- 4.4.2. Signatures and Public Key Cryptography.- 4.4.3. Signatures Based on Probabilistic Logic.- 4.5. Protecting Ownership of Proprietary Data and Software.- 4.5.1. Introduction and Motivation.- 4.5.2. Dynamic Information.- 4.5.3. Static Information.- References.