Quality Of Protection (eBook)

Security Measurements and Metrics

Dieter Gollmann, Fabio Massacci, Artsiom Yautsiukhin (Herausgeber)

eBook Download: PDF

2008 | 2006
XII, 198 Seiten
Springer US (Verlag)
978-0-387-36584-8 (ISBN)

Infos

Quality of Protection: Security Measurements and Metrics is an edited volume based on the Quality of Protection Workshop in Milano, Italy (September 2005). This volume discusses how security research can progress towards quality of protection in security comparable to quality of service in networking and software measurements, and metrics in empirical software engineering. Information security in the business setting has matured in the last few decades. Standards such as IS017799, the Common Criteria (ISO15408), and a number of industry certifications and risk analysis methodologies have raised the bar for good security solutions from a business perspective.

Designed for a professional audience composed of researchers and practitioners in industry, Quality of Protection: Security Measurements and Metrics is also suitable for advanced-level students in computer science.

Inhalt

Table of Contents 6
Preface 8
Conference Organization 10
External Reviewers 11
Why to adopt a security metric? A brief survey 12
Service-oriented Assurance-Comprehensive Security by Explicit Assurances 24
Software Security Growth Modeling: Examining Vulnerabilities with Reliability Growth Models 36
A Discrete Lognormal Model for Software Defects Affecting Quality of Protection 48
Time-to-Compromise Model for Cyber Risk Reduction Estimation 59
Assessing the risk of using vulnerable components 75
Collection and analysis of attack data based on honeypots deployed on the Internet 88
Multilevel Security and Quality of Protection 101
A Conceptual Model for Service Availability 114
A SLA evaluation methodology in Service Oriented Architectures 126
Towards a Notion of Quantitative Security Analysis 138
The Lower Bound of Attacks on Anonymity Systems - A Unicity Distance Approach 151
Intersection Attacks on Web-Mixes: Bringing theTheory into Praxis 165
Using Guesswork as a Measure for Confidentiality of Selectively Encrypted Messages 178
Measuring Inference Exposure in Outsourced Encrypted Databases 190
Author Index 201

Produkt-Details

• Erscheint lt. Verlag: 6.5.2008
• Reihe/Serie: Advances in Information Security
• Reihe/Serie: Advances in Information Security
• Zusatzinfo: XII, 198 p. 20 illus.
• Verlagsort: New York
• Sprache: englisch
• Themenwelt: Mathematik / Informatik ► Informatik ► Datenbanken
• Themenwelt: Informatik ► Netzwerke ► Sicherheit / Firewall
• Themenwelt: Mathematik / Informatik ► Informatik ► Software Entwicklung
• Themenwelt: Informatik ► Theorie / Studium ► Kryptologie
• Themenwelt: Naturwissenschaften
• Schlagworte: Information • Information Security • measurements • metrics • Modeling • Monitor • object oriented design • protection • quality • security
• ISBN-10: 0-387-36584-2 / 0387365842
• ISBN-13: 978-0-387-36584-8 / 9780387365848