Search CSRC

Abstract: This is a reprint of SRI International Report ITSTD-721-FR-90-21 (April 1990), "Improving the Security of Your Unix System", by David A. Curry.

Abstract: The goal of the Computer Security Act of 1987 (Public Law 100-235) (the Act) is to prompt federal agencies to take measures to improve the security and privacy of sensitive information in federal computer systems. The Act requires federal agencies to prepare and submit for review security plans for...

Abstract: This publication is a reprint of the U.S. Department of State's Domestic Disaster Recovery Plan for PCs, OIS, and Small VS systems.

Conference: DocProcess88: Conference on Document Processing Systems Abstract: The DTD editing tool is a window and icon based tool for creation, manipulation and comprehension of SGML Document Type Definitions (DTDs). This tool allows users to manipulate SGML DTDs without any knowledge of the rather complex SGML syntax. More generally, the tool allows users to manipulate cont...

Journal: Communications of the ACM Abstract: The following excerpts have been gleaned from a 130-page report of potential inaccuracies and fraud in computerized voting systems. Recent difficulties in automated vote-tallying, including specific legal cases, are detailed along with a summary of conclusions and recommendations.

Abstract: The selective application of technological and related procedural safeguards is an important responsibility of every Federal organization in providing adequate security to its ADP systems. This publication provides a standard to be used by Federal organizations when these organizations specify that...

Abstract: The Rainbow Series of Department of Defense standards is outdated, out of print, and provided here for historical purposes ONLY. The following is only a partial list--a more complete collection is available from the Federation of American Scientists: DoD 5200.28-STD "Orange Book", ...

Abstract: This Guideline is intended for use by ADP managers and technical staff in establishing and carrying out a program and a technical process for computer security certification and accreditation of sensitive computer applications. It identifies and describes the steps involved in performing computer se...

Abstract: This document provides guidelines to be used in the preparation of ADP contingency plans. The objective is to ensure that ADP personnel, and others who may be involved in the planning process, are aware of the types of information which should be included in such plans; to provide a recommended stru...

Abstract: This Guideline provides information and guidance to Federal agencies on techniques and practices which can be used to control access to computer resources via remote terminals and networks. A variety of methods are described for verifying the identity of persons using remote terminals, as a safeguar...

Abstract: Security decisions should be an integral part of the entire planning, development, and operation of a computer application. This guideline describes the technical and managerial decisions that should be made in order to assure that adequate controls are included in new and existing computer applicat...

Abstract: This document presents a technique for conducting a risk analysis of an ADP facility and related assets. Risk analysis produces annual loss exposure values based on estimated costs and potential losses. The annual loss exposure values are fundamental to the cost effective selection of safeguards for...

Abstract: This publication reports on the Workshop on Cryptography in Support of Computer Security held at the National Bureau of Standards on September 21-22, 1976. The workshop was organized to obtain expert opinions on the mathematical and statistical characteristics of the proposed Data Encryption Standar...

Abstract: This publication provides a guideline to be used by Federal organizations in the selection and evaluation of techniques for automatically verifying the identity of individuals seeking access to computer systems and networks via terminals, where controlled accessibility is required for security purpo...

Abstract: The selective application of technological and related procedural safeguards is an important responsibility of every Federal organization in providing adequate security to its ADP systems. This publication provides a standard to be used by Federal organizations when these organizations specify that...

Abstract: This Workshop was conducted at the National Bureau of Standards (NBS), Gaithersburg, Maryland, on August 30-31, 1976, to provide the NBS Institute for Computer Sciences and Technology (ICST) with current scientific and technical information on advances in computer technology which could signifi...

Abstract: This glossary provides an alphabetic listing of approximately 170 terms and definitions pertaining to privacy, and security related to data, information systems hardware and software. Multiple word terms are listed in natural order, synonyms are referenced, and glossary terms appearing within a defi...

Abstract: The work presented on these pages represents, to our knowledge, a uniquely concrete and objective approach to evaluating some of the economic considerations resulting from the Privacy Act of 1974 (PL 93 579) . By using a computer model to simulate the cost impact of the Act's requirements, one can d...

Abstract: This index is a list of certain requirements which must be considered by Federal technical and administrative personnel in order to comply with those provisions of the Privacy Act of 1974* relating to automated systems design and development . This index has been derived from the Office of Managemen...

Abstract: On February 20, 1975, nine informed EDP professionals were invited by the Systems and Software Division of the Institute for Computer Sciences and Technology to discuss the costs Federal agencies should anticipate in complying with the Privacy Act of 1974. The invitees came from Federal agencies, pr...

Abstract: A report has been prepared of the NBS/ ACM Workshop on Controlled Accessibility, December 1972, Rancho Santa Fe, California. The Workshop was divided into five separate working groups: access controls, audit, EDP management controls, identification, and measurements. The report contains t...

Abstract: This publication summarizes the proceedings of a conference held for the purpose of highlighting the needs and problems of Federal, State, and local governments in safeguarding individual privacy and protecting confidential data contained in computer systems from loss or misuse. The Conference was h...

In: Abstract: This booklet has been prepared for an audience of executives and managers, other than computer and ADP managers, in organizations using computers to help them understand the necessity for computer security and the problems encountered in providing for it. There are still many gaps in our knowledge....

Abstract: A bibliography of 96 references on controlled accessibility has been compiled. The purpose in compiling this limited bibliography was to free the effort to solve the problems of controlled accessibility from domination by discussion of the issues of privacy. Insofar as possible, except when the two...

Type: Presentation