Search CSRC

Conference: 14th National Computer Security Conference Abstract: The Proceedings of the 14th National Computer Security Conference, "Information Systems Security: Requirements & Practices," held October 1-4, 1991 in Washington, D.C. It includes refereed papers and panel summaries from the conference (listed on pp. iv-ix of Vol. 1).

Abstract: An electronic bulletin board system (BBS) is similar to a regular bulletin board, except that all posted information is stored on a computer rather than on a wall. A BBS has several features which a regular bulletin board does not have. For example, on a BBS, one person can leave a message for anoth...

Abstract: This National Institute of Standards and Technology Interagency Report (NISTIR) presents a glossary of computer security terminology, whose development was sponsored under the auspices of the National Security Telecommunications and Information Systems Security Committee (NSTISSC) . This glossary is...

Abstract: The Integrated Services Digital Network (ISDN) standards will provide worldwide digital communications service and will play a key role in the transition to electronic documents and business transactions. ISDN has been developed with little thought to security. ISDN security will become a pressing c...

Abstract: On April 9 and 10, 1991 the Protocol Security Group at NIST held its Second Workshop on Security Labels. Forty representatives from the U.S. Government, Industry, and the Canadian Government gathered for two days to discuss a NIST proposed Standard Security Label for the U.S. Government Open Systems...

Abstract: CSL recognizes that the development of EDI standards is continuing. This CSL Bulletin provides initial information to federal agencies. Agencies should consider developments of supporting standards, particularly in the area of cryptography, and plan accordingly so that the integration of future tech...

Abstract: This National Institute of Standards and Technology Internal Report (NISTIR) presents nine articles which represent a wide spectrum of computer security information. The articles were selected by the staff of the Computer Security Division, Computer Systems Laboratory, at the National Institute of S...

Abstract: The Computer Systems Laboratory (CSL) of the National Institute of Standards and Technology (NIST) receives many inquiries regarding the implementation of Federal Information Processing Standard (FIPS) 140, General Security Requirements for Equipment Using the Data Encryption Standard. Since FIPS 14...

Abstract: This publication presents a state-of-the-art survey of public-key cryptography, circa 1988-1990, and covers the following topics: 1) the theory of public-key cryptography; 2) comparisons to conventional (secret-key) cryptography; 3) a largely self-contained summary of relevant mathematics; 4) a surv...

Abstract: This National Institute of Standards and Technology Interagency Report (NISTIR) presents the National Aeronautics and Space Administration's (NASA) Automated Information Security Handbook . The Handbook provides NASA's overall approach to automated information systems security including: program goa...

Abstract: The passage of the Computer Security Act of 1987 and the recent issuance of the "National Policy for the Security of National Security Telecommunications and Information Systems," a classified Presidential directive, has clarified the division of responsibilities between the National Institute of St...

Journal: SIGNAL Abstract:

In: The Analysis, Communication, and Perception of Risk Abstract: For the past few years, the National Institute of Standards and Technology (NIST; formerly the National Bureau of Standards) and the National Security Agency (NSA) have been jointly developing a framework for computer security risk management. The need for this framework became increasingly apparent...

Abstract: This bibliography cites selected books and articles on computer security published from January 1980 through October 1989. To have been selected, an article had to be substantial in content and have been published in professional or technical journals, magazines, or conference proceedings. Only very...

Abstract: This National Institute of Standards and Technology Interagency Report (NISTIR) presents the Methodology for Certifying Sensitive Computer Applications developed by the U.S. Department of Commerce, Office of Information Resources Management. The National Institute of Standards and Technology (NIST)...

Abstract: This is a reprint of SRI International Report ITSTD-721-FR-90-21 (April 1990), "Improving the Security of Your Unix System", by David A. Curry.

Conference: 13th National Computer Security Conference Abstract: The Proceedings of the 13th National Computer Security Conference, "Information Systems Security: Standards--the Key to the Future," held October 1-4, 1990 in Washington, D.C. It includes refereed papers and panel summaries from the conference (listed on pp. iv-xi of Vol. 1).

Conference: 10th Annual Conference on Control, Audit and Security of Information Systems Abstract:

Abstract: The goal of the Computer Security Act of 1987 (Public Law 100-235) (the Act) is to prompt federal agencies to take measures to improve the security and privacy of sensitive information in federal computer systems. The Act requires federal agencies to prepare and submit for review security plans for...

Abstract: This National Institute of Standards and Technology Interagency Report (NISTIR) presents the Simplified Risk Analysis Guidelines developed by the U.S. Department of Justice, Justice Management Division, Security and Emergency Planning Staff, ADP/Telecommunications Group. The National Institute of St...

Abstract: This publication is a reprint of the U.S. Department of State's Domestic Disaster Recovery Plan for PCs, OIS, and Small VS systems.

Abstract:

Abstract: This National Institute of Standards and Technology Interagency Report (NISTIR) presents the Federal Aviation Administration's Automated Information System Security Accreditation Guidelines. This document provides procedures for the preparation of documentation for the security accreditation of auto...

Abstract: [NISTIR 90-4267] This report describes a conformance test for the Fiber Distributed Data Interface (FDDI) Medium Access Control (MAC) standard [1]. FDDI is a layered OSI protocol consisting of four sublayers at the data link or physical layers as illustrated in Figure 1. At the lowest level is...

Abstract: On May 30 and 31, 1990 the Protocol Security Group at NIST held a Workshop on Security Labels. Thirty-Five representatives from the U.S. Government, industry, and the United Kingdom gathered for two days to discuss security Labels for open systems. The discussion went from the generalities of labels...