Search CSRC

Journal: Proceedings of the IEEE Abstract: The authors examine the past and future of the Data Encryption Standard (DES), which is the first, and to the present date, only, publicly available cryptographic algorithm that has been endorsed by the US government of the standard during the early 1970s, the controversy regarding the proposed stan...

Abstract: The National Bureau of Standards Message Authentication Code (MAC) Validation System (MVS) tests message authentication devices for conformance to two data authentication standards: Federal Information Processing Standard Publication (FIPS PUB) 113, "Computer Data Authentication," and American Natio...

Abstract: This guide addresses auditing the system development life cycle (SDLC) process for an automated information system (AIS), to ensure that controls and security are designed and built into the system. The guide also presents a process for deciding which system to audit among an organization's universe...

Abstract: The selective application of technological and related procedural safeguards is an important responsibility of every Federal organization in providing adequate security to its ADP systems. This publication provides a standard to be used by Federal organizations when these organizations specify that...

Conference: 10th National Computer Security Conference Abstract: The Proceedings of the 10th National Computer Security Conference, "Computer Security...from principles to practices.," held September 21-24, 1987, in Baltimore, Maryland. It includes refereed papers and panel summaries from the conference (listed on pp. ii-vii).

Conference: 9th National Computer Security Conference Abstract: The Proceedings of the 9th National Computer Security Conference, "Computer Security--for today...and for tomorrow," held September 15-18, 1986, in Baltimore, Maryland. It includes refereed papers and panel summaries from the conference (listed on pp. ii-iv of Vol. 1).

Abstract: This publication describes a set of solutions to the problem of intrusion into government and private computers via dial-up telephone lines, the so-called "hacker problem". There are a number of minimum protection techniques against these people and more nefarious intruders that should be used in al...

Abstract: The Rainbow Series of Department of Defense standards is outdated, out of print, and provided here for historical purposes ONLY. The following is only a partial list--a more complete collection is available from the Federation of American Scientists: DoD 5200.28-STD "Orange Book", ...

Abstract: This publication addresses the issue of selecting ADP backup processing support in advance of events that cause the loss of data processing capability. The document emphasizes the need for managers at all levels of the organization to support the planning, funding, and testing of an alternate proces...

Abstract: This technology assessment constitutes a summary and assessment of methods for measuring the level of computer security in computer applications, systems, and installations. The initial draft report for this document was produced in June 1981 for the National Bureau of Standards (NBS) by the System...

Conference: 8th National Computer Security Conference Abstract: The Proceedings of the 8th National Computer Security Conference, held September 30-October 3, 1985, in Gaithersburg, Maryland.

Abstract: This publication specifies a standard to be used by Federal organizations which require that the integrity of computer data be cryptographically authenticated. In addition, it may be used by any organization whenever cryptographic authentication is desired. Cryptographic authentication of data durin...

Abstract: The document specifies basic security criteria for two different uses of passwords in an ADP system, (I) personal identity authentication and (2) data access authorization. It establishes the basic criteria for the design, implementation and use of a password system in those systems where passwords...

Abstract: [Originally published as Federal Standard 1028 (FED-STD-1029) by the General Services Administration. Note on Cover: "Federal Standard 1028 has been redesignated as Federal Information Processing Standards Publication (FIPS PUB) 141." Per Federal Register Notice FR 53 41221, October 20, 19...

Abstract: The use of personal computer systems (often called desktop or professional computers) in the office and home environment has placed increasingly powerful information system technology in the hands of growing numbers of users. While providing many benefits, the use of such small computer systems may...

Conference: 7th DoD/NBS Computer Security Conference Abstract: The Proceedings of the 7th DoD/NBS Computer Security Conference, held September 24-26, 1984, in Gaithersburg, Maryland. [The following year, this was renamed the "National Computer Security Conference."]

Abstract: This overview is intended to provide ADP policy managers, information resource managers, ADP technical managers, and ADP staff with a comprehensive summary of and guide to FIPS PUB 102, "Guideline to Computer Security Certification and Accreditation," September 27, 1983. FIPS PUB 102 presents in det...

Conference: 6th Seminar on the DoD Computer Security Initiative Abstract: The Proceedings of the 6th Seminar of the DoD Computer Security Initiative, held November 15-17, 1983, in Gaithersburg, Maryland.

Abstract: This Guideline is intended for use by ADP managers and technical staff in establishing and carrying out a program and a technical process for computer security certification and accreditation of sensitive computer applications. It identifies and describes the steps involved in performing computer se...

Abstract: [Originally published as Federal Standard 2016 (FED-STD-1026) by the General Services Administration, prepared by the National Communications System. Note on Cover: "Federal Standard 1026 has been redesignated as Federal Information Processing Standards publication (FIPS PUB) 139."] This standard s...

Journal: Computers & Security Abstract: The progress in computer security in the last ten years is reviewed by the authors of the “Executive Guide for Computer Security.” This Guide was based on the results of a Workshop on Controlled Accessibility held ten years ago in December 1972.

Conference: 5th Seminar on the DoD Computer Security Initiative Abstract: The Proceedings of the Fifth Seminar of the DoD Computer Security Initiative, held Mary 24-26, 1982, in Gaithersburg, Maryland. [This seminar later became the National Computer Security Conference, in 1985.]

Abstract: [Originally published as Federal Standard 1027 (FED-STD-1027) by the General Services Administration. Note on Cover: "Federal Standard 1027 has been redesignated as Federal Information Processing Standards Publication (FIPS PUB) 140." Per Federal Register Notice FR 53 41221, October 20, 1988.]...

Abstract: This document provides, in the form of questions and answers, the background and basic essential information required to understand the developmental process for Automatic Data Processing (ADP) contingency plans. The primary intended audience consists of executives and managers who depend on ADP res...

Conference: 4th Seminar on the DoD Computer Security Initiative Abstract: The Proceedings of the Fourth Seminar of the DoD Computer Security Initiative, held August 10-12, 1981, in Gaithersburg, Maryland. [This seminar later became the National Computer Security Conference, in 1985.]