What is computer security?

Bishop, Matt

doi:10.1109/msecp.2003.1176998

Cited by 167 publications

(57 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Security policy is a specific statement of what is and is not allowed and security mechanisms enforce the policies [25]. In practice this means, for example, that it is not enough to have a secure tag authentication protocol if the people using the system do not verify the tag-product integrity.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

Trust and Security in RFID-Based Product Authentication Systems

Lehtonen

Michahelles

Fleisch

2007

IEEE Systems Journal

View full text Add to dashboard Cite

Abstract-Product authentication is needed to detect counterfeit products and to prevent them from entering the distribution channels of genuine products. Security is a critical property of product authentication systems. In this paper, we study trust and security in RFID-based product authentication systems. We first present a formal definition for product authentication process and then derive the general chain of trust as well as functional and nonfunctional security requirements for product authentication. Most of the scientific literature that covers the topic focuses on cryptographic tag authentication only. This paper, however, provides a broader view including also other known approaches, most notably location-based authentication. To derive the functional security requirements, we employ the concept of misuse cases that extends the use case paradigm well known in the field of requirements engineering. We argue that the level of security of any RFIDbased product authentication application is determined by how it fulfills the derived set of functional and nonfunctional requirements. The security of different RFID-based product authentication approaches is analyzed. To study how RFID supports secure product authentication in practice, we investigate how the current EPC standards conform to the functional security requirements of product authentication and show how the unaddressed requirements could be fulfilled. The benefits of implementing a service that detects the cloned tags in the level of the network's core services are identified.Index Terms-Product authentication, product codes, radio frequency identification (RFID), security, system analysis and design.

show abstract

Section: Discussionmentioning

confidence: 99%

“…Security requirements define the security goals of the system that answer the question, "What do you expect security to do for you?" [25]. Moreover, security differs from all other specification areas in that someone is deliberately threatening to break the system [1].…”

Section: Requirements Analysismentioning

confidence: 99%

Trust and Security in RFID-Based Product Authentication Systems

Lehtonen

Michahelles

Fleisch

2007

IEEE Systems Journal

View full text Add to dashboard Cite

show abstract

“…He also added that computer security is a process of achieving a state that is optimally desirable for an information system; stating clearly that the main goal of an information system security is to optimize the performance of the system with respect to the measure of risk to which the system is exposed to. [6] describes Computer security in this form and he states; "If a system always stays in states that are allowed, and users can only perform actions that are allowed, the system is secure. But if the system can enter a disallowed state, or if a user can successfully execute a disallowed action, the system is non-secure" [6].…”

Section: Computer Securitymentioning

confidence: 99%

“…[6] describes Computer security in this form and he states; "If a system always stays in states that are allowed, and users can only perform actions that are allowed, the system is secure. But if the system can enter a disallowed state, or if a user can successfully execute a disallowed action, the system is non-secure" [6]. …”

Section: Computer Securitymentioning

confidence: 99%

Securing an Information Systems from Threats: A Critical Review

Samson

Usman

2015

IJCATR

View full text Add to dashboard Cite

Abstract:The technology behind information systems in today's world has been embedded in nearly every aspect of our lives. Thus, the idea of securing our information systems and/or computer networks has become very paramount. Owing to the significance of computer networks in transporting the information and knowledge generated by the increased diversity and sophistication of computational machinery, it would be very imperative to engage the services of network security professionals to manage the resources that are passed through the various terminals (end points) of the these network, so as to achieve a maximum reliability of the information passed, making sure that this is achieved without creating a discrepancy between the security and usability of such network. This paper examines the various techniques involved in securely maintaining the safe states of an active computer network, its resources and the information it carries. We examined techniques of compromising an information system by breaking into the system without authorised access (Hacking), we also looked at the various phases of digital analysis of an already compromised system, and then we investigated the tools and techniques for digitally analysing a compromised system in other to bring it back to a safe state.

show abstract

“…Стратегия управления качеством и сохранение конкурентоспособно-сти организации требуют непрерывной деятельности, направленной на улучшение управления качеством. Здесь можно провести аналогию с политикой безопасности [8], которая существует всегда и постоянно направлена на улучшение. Тенденция улучше-ния имеет важное значение для организации для поддержания текущего уровня произ-водительности, чтобы реагировать на изменения своих внутренних и внешних условий и создавать новые возможности.…”

unclassified

Evolution of the quality management

Tsvetkov¹

2017

ERT

View full text Add to dashboard Cite

ВведениеРазличают менеджмент качества [1] и систему менедж-мента качества [2]. Управление качеством направлено на про-дукцию, обслуживание и на средства достижения качества. Управление качеством использует контроль качества, кон-троль процессов, а также средства повышения качества. Со-временное управление качеством представляет собой комплекс технологий и методов, тесно связанных с технологиями и си-стемами управления и международными стандартами [3]. Со-временное управление качеством широко применяет информа-ционные технологии и информационные модели. Принципы управления качеством.Международный стандарт управления качеством (ISO 9001: 2015) содержит ряд принципов [4] управле-ния качеством: ориентация на клиента (QMP 1 -Customer focus), лидерство (QMP 2 -Leadership), привлечение людей (QMP 3 -Engagement of people), процессный подход (QMP 4 -Process approach), непрерывное улучшение качества (QMP 5 -Improvement), управление на основе фактических данных (QMP 6 -Evidence-based decision making), управление отношениями (QMP 7 -Relationship management). Рассмотрим эти принци-пы.Ориентация на клиента. Основное внимание менеджмента качества направлено на удовлетворение потребностей клиентов. Устойчивый успех достигается, когда орга-низация привлекает и сохраняет доверие клиентов и других заинтересованных сторон. Каждый процесс взаимодействия с клиентами дает возможность создать большую цен-ность для клиента [5]. Понимание текущих и будущих потребностей клиентов и других заинтересованных сторон способствует устойчивому успеху организации.Лидерство. Лидеры на всех уровнях обеспечивают единство цели и создают условия, в которых сотрудники объединяются в области качества организации. Созда-ние единства цели и привлечения сотрудников позволяют организации согласовать свои стратегии, политику, процессы и ресурсы для достижения поставленных целей [4].

show abstract

What is computer security?

Cited by 167 publications

References 1 publication

Trust and Security in RFID-Based Product Authentication Systems

Trust and Security in RFID-Based Product Authentication Systems

Securing an Information Systems from Threats: A Critical Review

Evolution of the quality management

Contact Info

Product

Resources

About