Access the full text.
Sign up today, get DeepDyve free for 14 days.
Loading next page...
/lp/association-for-computing-machinery/a-university-course-in-computer-security-fpgK6V0LdA
References (7)
-
I) To what extent is testing needed in a general evaluation? Only to determine the existence of controls defined in or above the functional specification -
Non-real-tlme techniques include journals (audit trails) of accesses, errors, and transactions; trend analysis; reports; and journal query capabilities -
I) What criteria influence the level of detail necessary in a security evaluation for certification? Sensitivity, evidence, the degree of embedded control -
Real-time techniques are those involving direct notification of a security authority or direct initiation of detection and surveillance actions requested by a security authority -
33. (I) Should a security evaluation report discuss only vulnerabilities or should it also address aspects of security that are acceptably treated? Both -
32. (I) What is the value of stress testing for security? It often reveals unanticipated problems too complex to be easily detected by analysis of system documentation -
Istinguish between real-tlme and non-real-time detection and surveillance techniques
- Publisher
- Association for Computing Machinery
- Copyright
- Copyright © 1982 by ACM Inc.
- ISSN
- 0277-920X
- DOI
- 10.1145/1058230.1058232
- Publisher site
- See Article on Publisher Site
Abstract
This article presents an overview of a graduate-level course in computer security that I created and presented at The American University in Washington D.C. It should be of interest to SIGSAC Review readers who want an overview of the subject or who are teaching similar courses. There are three key elements:1. Course syllabus. This includes a course outline. Emphasis is placed on balanced coverage of all major relevant issues rather than specialized coverage of a few.2. List of research assignments. Twenty two projects are listed. These are areas where computer security research is needed. Work in any area should provide good material for a paper.3. Examinations. Seventy five questions are listed, along with their answers. These can serve as an introduction and reference for computer security neophytes.
Journal
ACM SIGSAC Review – Association for Computing Machinery
Published: Apr 1, 1982