COMPREHENSIVE SECURITY IN DATA PROCESSING SYSTEMS - THE STATE OF THE ART

• NCJ Number: 31375
• Author(s): E GRAPA
• Date Published: 1975
• Length: 41 pages
• Corporate Author: University of Illinois
• Sale Source: National Institute of Justice/
• Publication Type: Best Practice/State-of-the-Art Review
• Language: English
• Country: United States of America

Annotation

THIS PAPER DESCRIBES FIVE TYPES OF SECURITY SYSTEMS BUILT INTO DATA PROCESSING SYSTEMS AND DISCUSSES THEIR ADVANTAGES AND DISADVANTAGES.

Abstract

THE SYSTEMS DESCRIBED ARE AS FOLLOWS: A MULTI-DIMENSIONAL SECURITY PROGRAM FOR A GENERALIZED INFORMATION RETRIEVAL SYSTEM, THE FORMULARY MODEL FOR FLEXIBLE PRIVACY AND ACCESS CONTROLS; THE IMPLEMENTATION OF SECURITY MEASURES IN INFORMATION SYSTEMS; SECURITY CONTROLS IN THE ADEPT-50 TIME-SHARING SYSTEM; AND PROTECTION IN AN INFORMATION PROCESSING UTILITY. THIS STATE-OF-THE-ART REVIEW REVEALS THAT NONE OF THE SYSTEMS OFFERS 'COMPREHENSIVE' SECURITY, BUT RATHER COVER EITHER SECURITY FROM THE FILE UP (OPERATING SYSTEM, MEMORY RESIDUES) OR FROM THE FILE LEVEL DOWN (RECORDS WITHIN A FILE, FIELDS WITHIN A RECORD). THE REQUIREMENTS FOR SUCH A COMPREHENSIVE SYSTEM ARE SUGGESTED. REFERENCES ARE INCLUDED.