NDLI: “Mainstreaming” automated information systems security engineering (a case study in security run amok)

Please wait, while we are loading the content...

Support for the file system security requirements of computational E-mail systems

Secure wireless LANs

The design and implementation of tripwire: a file system integrity checker

Exchange of patient records-prototype implementation of a security attributes service in X.500

A process-oriented methodology for assessing and improving software trustworthiness

Towards acceptable key escrow systems

Protocol failure in the escrowed encryption standard

Secure agreement protocols: reliable and atomic group multicast in rampart

On key distribution via true broadcasting

Conditionally secure secret sharing schemes with disenrollment capability

Meta-ElGamal signature schemes

Anonymous credit cards

An efficient multiversion algorithm for secure servicing of transaction reads

A temporal authorization model

Propagation of authorizations in distributed database systems

The design of substitution-permutation networks resistant to differential and linear cryptanalysis

Information leakage of boolean functions and its relationship to other cryptographic criteria

Authentication codes that are r-fold secure against spoofing

Endorsements, licensing, and insurance for distributed system services

New protocols for third-party-based authentication and secure broadcast

How to simultaneously exchange secrets by general assumptions

A key distribution method for object-based protection

How to break Gifford's cipher (extended abstract)

Parallel collision search with application to hash functions and discrete logarithms

Application access control at network level

Network security probe

Security modelling for organisations

“Mainstreaming” automated information systems security engineering (a case study in security run amok)

The compatibility of policies

An entropy conservation law for testing the completeness of covert channel analysis

Prerequisite confidentiality

“Mainstreaming” automated information systems security engineering (a case study in security run amok)

Content Provider	ACM Digital Library
Author	Kluksdahl, Norman C. Coyne, James W.
Abstract	Since mid-1992, the National Aeronautics and Space Administration (NASA) Mission Control Center (MCC) in Houston has pursued commonality and consolidation of facilities and equipment to reduce the implementation costs associated with the modernization of the control center, as well as the on-going operations and sustaining costs. In December of 1993, a management team, comprised almost entirely of individuals with manned spaceflight operations experience, was given the charter of completing the development. Past practices and conventional thinking have been set aside in an effort to deliver the new control center “better, faster, and cheaper”. This new paradigm has carried-over to the engineering associated with securing the control center's information resources. The group originally tasked with ensuring the security of the MCC's information resources was not directly associated with development or operations of the MCC, and thus had lost sight of the fact that the MCC's mission is the command and control of space vehicles, not the pursuit of information security. Under the new paradigm for control center development, responsibility for ensuring system security and integrity has been brought into the development organization. Old methods and approaches to security have been replaced by a new approach which emphasizes the implementation of an automated information systems security architecture that is both logical and cost effective.In both Government, and industry, it is common for those tasked with information security responsibilities to be separated from the mainstream of engineering. This separation often results in conflict during requirements definition, design, implementation and testing. The following is a case study of such an information security organization, and process, run amok. It also discusses the steps required to bring the process back into line with the goals of cost-effective development and operation.
Starting Page	251
Ending Page	257
Page Count	7
File Format	PDF
ISBN	0897917324
DOI	10.1145/191177.191241
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1994-11-02
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A case-study of security policy for manual and automated systems

Linus Pauling: A case study in counterintelligence run amok

Bachelor of information security: ("automated systems security profile")

Homely housewives run amok: lesbians in marital fixes.

Regulation has run amok (Published 10 December 2008)

Security audit: a case study [information systems]

On analysis of secure information systems: a case study

Automated healthcare information privacy and security: UAE case

Wolbachia run amok.

“Mainstreaming” automated information systems security engineering (a case study in security run amok)

Similar Documents

A case-study of security policy for manual and automated systems

Linus Pauling: A case study in counterintelligence run amok

Bachelor of information security: ("automated systems security profile")

Homely housewives run amok: lesbians in marital fixes.

Regulation has run amok (Published 10 December 2008)

Security audit: a case study [information systems]

On analysis of secure information systems: a case study

Automated healthcare information privacy and security: UAE case

Wolbachia run amok.

“Mainstreaming” automated information systems security engineering (a case study in security run amok)