Reports and Papers Archive
Combining Optimism and Intrusion Detection
Applicability of Temporal Data Models to Query Multilevel Security Databases: A Case Study
In a multilevel security database there are multiple beliefs about a given real world object. The ability of a database model to accommodate multiple beliefs is termed polyinstantiation in the multilevel security literature. In thi paper we remark that in an abstract sense polyinstantiation is a priori present in all models for temporal and spatial datbass. In particular we investigate the applicability of the paramtric models for temporal data to query multilevel security data nd, as a case study, compare it to model for multilevel scurity given by Winslett, Smith, and Qian.
A Network Audit System for Host-based Intrusion Detection (NASHID)
Recent work has shown that conventional operating system audit trails are insufficient to detect low-level network attacks. Because audit are typically based upon system calls or application sources, operations in the network protocol stack go unaudited. In our earlier work, we determined the audit data needed to detect low-level network attacks. in this paper we describe an implementation of an audit system which collects this data and analyze th issues that guided th implementation. Finally, we report the performance impact on th systm and the rat of audit data accumulation in a test network.
Information Security Staffing Levels and the Standard of Due Care
CyberHealthcare: Reshaping the Physician-Patient Relationship
Common Criteria 2
The CC combines the best aspects of existing criteria for the security evaluation of information technology systems and products.
Synthetic Economies: The Application of Distributed Interactive Computing Environments for Policy and Management Decision Making
This paper explains how distributed, interactive computing can be used to assist decision makers to investigate alternative courses of action in complex, dynamic businesses and policy environments. The military\‘s use of computer-generated synthetic battlefields for training is the metaphor; the creation of synthetic economies within which to practice policy and management prerogatives is the goal. Wxposition proceeds by example, while methodological excursions and underlying theory are provided in supporting appendices.
New Security Paradigms Workshop 2001
Computer Investigations Training Program
White Paper: The Clinton Administration's Policy on Critical Infrastructure Protection: Presidential Decision Directive 63
This White Paper explains key elements of the Clinton Administration\‘s policy on critical infrastructure protection. It is intended for dissemination to all interested parties in both the private and public sectors. It will also be used in U.S. Government professional education institutions, such as the National Defense University and the National Foreign Affairs Training Center, for coursework and exercises on iteragency practices and procedures. Wide dissemination of this unclassified White Paper is encouraged by all agencies of the U.S. Government.

