Contents

Cover

Series Page

Title Page

Copyright

Dedication

Preface and Acknowledgment

Approach

Organization

Target Audience

Acknowledgments

Chapter 1: What is Security?

1.1 Introduction

1.2 The Subject of Security

1.3 A Twenty-First Century Tale

1.4 Why are You Important to Computer Security?

1.5 End of the Beginning

1.6 Chapter Summary

1.7 Further Reading and Resources

1.8 Questions

1.9 Exercises

Chapter 2: Systems Engineering

2.1 So What Is Systems Engineering?

2.2 Process Management

2.3 Organization Environments

2.4 Chapter Summary

2.5 Further Reading and Resources

2.6 Questions

2.7 Exercises

Chapter 3: Foundation Concepts

3.1 Security Concepts and Goals

3.2 Role of Cryptography in Information Security

3.3 Key Management Revisited

3.4 Chapter Summary

3.5 Further Reading and Resources

3.6 Questions

3.7 Exercises

Chapter 4: Authentication of Subjects

4.1 Authentication Systems

4.2 Human Authentication

4.3 Chapter Summary

4.4 Further Reading and Resources

4.5 Questions

4.6 Exercises

Chapter 5: Security Systems Engineering

5.1 Security Policy Development

5.2 Senior Management Oversight and Involvement

5.3 Security Process Management and Standards

5.4 Information Security Systems Engineering Methodology

5.5 Requirements Analysis and Decomposition

5.6 Access Control Concepts

5.7 Security Modeling and Security-Related Standards

5.8 Chapter Summary

5.9 Questions

5.10 Exercises

Chapter 6: Traditional Network Concepts

6.1 Networking Architectures

6.2 Types of Networks

6.3 Network Protocols

6.4 Chapter Summary

6.5 Further Reading and Resources

6.6 Questions

6.7 Exercises

Chapter 7: Next-Generation Networks

7.1 Framework and Topology of the NGN

7.2 The NGN Functional Reference Model

7.3 Relationship between NGN Transport and Service Domains

7.4 Enterprise Role Model

7.5 Security Allocation within the NGN Transport Stratum Example

7.6 Converged Network Management (TMN and eTOM)

7.7 General Network Security Architectures

7.8 Chapter Summary

7.9 Further Reading and Resources

7.10 Exercises

Chapter 8: General Computer Security Architecture

8.1 The Hardware Protects the Software

8.2 The Software Protects Information

8.3 Element Security Architecture Description

8.4 Operating System (OS) Structure

8.5 Security Mechanisms for Deployed Operating Systems (OSs)

8.6 Chapter Summary

8.7 Further Reading and Resources

8.8 Questions

8.9 Exercises

Chapter 9: Computer Software Security

9.1 Specific Operating Systems (OSs)

9.2 Applications

9.3 Example Detailed Security Requirements for Specific Operating Systems and Applications

9.4 Chapter Summary

9.5 Further Reading and Resources

9.6 Questions

9.7 Exercises

Chapter 10: Securitysystems Design–designingnetworksecurity

10.1 Introduction

10.2 Security Design for Protocol Layer 1

10.3 Layer 2—Data Link Security Mechanisms

10.4 Security Design for Protocol Layer 3

10.5 IP Packet Authorization and Access Control

10.6 Chapter Summary

10.7 Further Reading and Resources

10.8 Questions

10.9 Exercises

Chapter 11: Transport and Application Security Design and Use

11.1 Layer 4—Transport Security Protocols

11.2 Layer 5—User Service Application Protocols

11.3 Chapter Summary

11.4 Further Reading and Resources

11.5 Questions

11.6 Exercises

Chapter 12: Securing Management and Managing Security

12.1 Securing Management Applications

12.2 Operation, Administration, Maintenance, and Decommissioning

12.3 Systems Implementation or Procurement

12.4 Chapter Summary

12.5 Further Reading and Resources

12.6 Questions

12.7 Exercises

About the Author

Index

IEEE Press

445 Hoes Lane

Piscataway, NJ 08854

IEEE Press Editorial Board

Lajos Hanzo, Editor in Chief

R. Abari | M. El-Hawary | S. Nahavandi
J. Anderson | B. M. Hammerli | W. Reeve
F. Canavero | M. Lanzerotti | T. Samad
T. G. Croda | O. Malik | G. Zobrist

Kenneth Moore, Director of IEEE Book and Information Services (BIS)

IEEE PRESS SERIES ON INFORMATION & COMMUNICATION

NETWORKS SECURITY

SERIES EDITOR

Stamatios Kartalopoulos

Security of Information and Communication Networks

Stamatios Kartalopoulos

Engineering Information Security: The Application of Systems Engineering

Concepts to Achieve Information Assurance

Stuart Jacobs

Copyright © 2011 by Institute of Electrical and Electronics Engineers. All rights reserved.

Published by John Wiley & Sons, Inc., Hoboken, New Jersey.

Published simultaneously in Canada.

No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise, except as permitted under Section 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 750-4470, or on the web at www.copyright.com. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permission.

Limit of Liability/Disclaimer of Warranty: While the publisher and author have used their best efforts in preparing this book, they make no representations or warranties with respect to the accuracy or completeness of the contents of this book and specifically disclaim any implied warranties of merchantability or fitness for a particular purpose. No warranty may be created or extended by sales representatives or written sales materials. The advice and strategies contained herein may not be suitable for your situation. You should consult with a professional where appropriate. Neither the publisher nor author shall be liable for any loss of profit or any other commercial damages, including but not limited to special, incidental, consequential, or other damages.

For general information on our other products and services or for technical support, please contact our Customer Care Department within the United States at (800) 762-2974, outside the United States at (317) 572-3993 or fax (317) 572-4002.

Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic formats. For more information about Wiley products, visit our web site at www.wiley.com.

Library of Congress Cataloging-in-Publication Data:

Jacobs, Stuart.

Engineering information security: The application of systems engineering concepts to achieve information assurance / Stuart Jacobs.

p. cm.

ISBN 978-0-470-56512-4 (hardback)

1. Computer security. 2. Computer networks–Security measures. 3. Information technology–Security measures. 4. Data protection. I. Title.

QA76.9.A25J325 2010

005.8–dc22

2010028408

oBook ISBN: 978-0-470-94791-3

ePDF ISBN: 978-0-470-94783-8

ePub ISBN: 978-1-118-00901-7

This book is dedicated to my wife, Eileen, for her
patience with my spending so much time at the keyboard
rather than with her.

Preface and Acknowledgments

Approach

This book focuses on information security (information assurance) from the viewpoint of how to control access to information in a systematic manner. Many books on security primarily cover specific security mechanisms such as authentication protocols, encryption algorithms, and security related protocols. Other books on security are use case oriented, providing specific contexts for discussing vulnerabilities, threats, and countermeasures. Few books on security consider the planning, operations, and management aspects of protecting information. Unlike these other books that focus on security mechanisms, threats, and vulnerabilities, this book presents a methodology for addressing security concerns in any organization. The methodology is based on a set of concepts called systems engineering that are designed to methodologically examine, analyze, and document objectives and the functional and performance capabilities (requirements) that need exist to achieve the stated goals. Systems engineering concepts provide:

a framework for developing capabilities and solutions that ensure compliance with the aforementioned requirements;

traceability starting at objectives, progressing through requirements development, solution design/development/procurement into, and during, operation and administration; and

support for compliance evaluation of deployed systems and how these systems are used.

Another critical aspect of the systems methodology is the necessity to consider all aspects of a system, not just the technical components. All information processing infrastructures (networks and computing devices) exist within a context defined by:

how the deploying organization operates,

what the deploying organization provides as services or products,

who competes with the deploying organization,

what legal and regulatory burdens the deploying organization has to accommodate, and

who may target the deploying organization with the intent of personal or financial gain, political advantage, or ideological objectives.

Over time the technologies used for the processing, storage, and communicating of information have changed dramatically and rapidly. By presenting a systems engineering approach to information security, this book will assist security practitioners to cope with these rapid changes. Achieving information security is not a matter of dealing with specific technologies, rather information security is a process of managing technologies to ensure that information is only accessible to valid users.

Organization

The coverage of information security by this book covers all aspects of security in a systematic engineering approach:

Chapter 1 considers why information security is needed, how security problems can have widespread impacts, and what are the more common ways security is discussed and the deficiencies/limitations of these views.

Chapter 2 discusses the many legal, technical, competitive, criminal and consumer forces, and influences that are rapidly changing our information dependent society, along with exploring the concepts of systems engineering and the value these concepts provide to the development of new products and services along with the maintenance and evolution to existing products and services.

Chapter 3 reviews fundamental security concepts of subjects, objects, security services, and the role of cryptography in information security.

Chapter 4 considers different approaches for achieving authentication of individuals and systems.

Chapter 5 delves into how to establish and manage an information security program, evaluate vulnerabilities, threats, and risks, and develop security requirements, and the chapter considers the value and impact of security standards and the major organizations involved with developing these standards.

Chapter 6 describes the different forms and types of networks currently in use along with the protocols relied upon that are the cause of many security problems. All protocol layers are considered, and any security capabilities are analyzed for effectiveness and usability.

Chapter 7 focuses on the near future of next-generation network concepts and services defined within the developing Internet multimedia services framework.

Chapter 8 provides an in-depth discussion of computer hardware that impacts information security and the role of operating systems in supporting information security, and what security mechanisms an operating system should include.

Chapter 9 provides an examination of security capabilities in the major commercially available operating system (unix variants, Windows variants, and real time) and then considers security issues within applications software. This chapter concludes with a review of the different forms of malicious software (malware) encountered today and a number of anti-malware applications currently available.

Chapters 10 and 11 provide descriptions and analysis of the available networking security mechanisms within each protocol layer of networks. Both stand-alone applications (including their associated protocols) and the major application frameworks (e.g., Java, .NET, CORBA, and DCE) are discussed from a security capabilities perspective.

Chapter 12 explores the security issues within the management of networks, especially the management of security, considers the organizational needs for effective security management, operational security mechanisms, security operations, and other life-cycle security issues. This chapter concludes with consideration of security within development, integration, and component purchasing activity areas.

All appendices are available on the CD included with this book.

Color versions of all figures presented in this book can be found on the enclosed CD.

A solutions manual is available to accompany this book. To request a copy please visit ieeepress@ieee.org.

Target Audience

The major audience for this book include graduate and undergraduate students studying, but not limited to, computer/information sciences/engineering systems engineering, technology management, and public safety. The book also is written for professionals in the sciences, engineering, communications, and other fields that rely on reliable and trustable information processing and communications systems and infrastructures. The subject of information security (information assurance, computer security, and network security) is routinely covered as a set of individual subjects and rarely addressed from an engineering perspective. Most professional and academic books focus on the common body of knowledge promulgated by organizations, such as the (ISO)² and ISSA, or target specific subjects (database management systems, incident response/forensics, common criteria, risks, encryption, Java, windows, etc.).

This book considers the complete security life cycle of products and services starting with requirements and policy development and progressing through development, deployment, and operations, and concluding with decommissioning.

Acknowledgments

I would like to thank Thomas Plevyak for encouraging me to write this book, all of my former Verizon co-workers who routinely challenged my opinions regarding security, and Verizon's management who, over the years, provided me with many challenging and interesting security-related assignments. I also need to recognize four people, Allen H. Levesque, Richard Stanley, Fred Kotler, and George Wilson, who were instrumental in my mastering systems engineering concepts.

Chapter 1

What is Security?

1.1 Introduction

The central role of computer security for the working of the economy, the defense of the country, and the protection of our individual privacy is universally acknowledged today. This is a relatively recent development, it has resulted from the rapid deployment of Internet technologies in all fields of human endeavor and throughout the world that started at the beginning of the 1990s. Mainframe computers have handled secret military information and personal computers have stored private data from the very beginning of their existence in the mid-1940s and 1980s, respectively. However, security was not a crucial issue in either case: the information could mostly be protected in the old-fashioned way, by physically locking up the computer and checking the trustworthiness of the people who worked on it through background checks and screening procedures. What has radically changed and made the physical and administrative approaches to computer security insufficient is the interconnectedness of computers and information systems. Highly sensitive economic, financial, military, and personal information is stored and processed in a global network that spans countries, governments, businesses, organizations, and individuals. Securing this cyberspace is synonymous with securing the normal functioning of our daily lives.

Secure information systems must work reliably despite random errors, disturbances, and malicious attacks. Mechanisms incorporating security measures are not just hard to design and implement but can also backfire by decreasing efficiency, sometimes to the point of making the system unusable. This is why some programmers used to look at security mechanisms as an unfortunate nuisance; they require more work, do not add new functionality, and slow down the application and thus decrease usability. The situation is similar when adding security at the hardware, network, or organizational level: increased security makes the system clumsier and less fun to use; just think of the current airport security checks and contrast them to the happy (and now so distant) pre–September 11, 2001 memories of buying your ticket right before boarding the plane. Nonetheless, systems must work, and they must be secure; thus there is a fine balance to maintain between the level of security on one side and the efficiency and usability of the system on the other. One can argue that there are three key attributes of information systems:

1. Processing capacity—speed

2. Convenience—user friendliness

3. Secure—reliable operation

The process of securing these systems is finding an acceptable balance of these attributes.

1.2 The Subject of Security

Security is a word used to refer to many things, so its use has become somewhat ambiguous. Here we will try to clarify just what security focuses on. Over the years the subject of information security has been considered from a number of perspectives, as a concept, a function, and a subject area. We will discuss each of these perspectives and examine their value.

1.2.1 Branches of Security

A concept approach treats security as a set of related activity areas, or branches. Figure 1.1 shows the security-related areas typically considered. Note that all the areas are mutually dependant on each other.

Figure 1.1 Areas of security

Each security area focuses on a specific need to erect a barrier against inappropriate use of, or access to, the assets (information, capabilities, property, equipment, personnel, processes, etc.) considered valuable to an organization. Since there are now multiple avenues (approaches) by which assets can be targeted, multiple security area activities are necessary. Physical security capabilities are necessary to control physical access to:

buildings, rooms, and offices;

equipment used for the processing, storing, transferring, or accessing information; and

the cables used for communicating information between facilities, buildings, and even between individual systems within a building floor of rooms.

Personnel security processes and procedures are necessary to:

ensure that an organization's employees have been accurate in representing who they are and that academic or professional credentials and past experience are valid;

verify the identities and validate the reasons for nonemployee (guests, visitors, service/supply personnel) access to the organization's facilities or other assets;

ensure that the organization's security-related policies and procedures conform to legal constrains for employment, document disciplinary activities, and conditions for termination of employment; and

inform both new and continuing, employees as to what the organization considers necessary, acceptable, and unacceptable behavior.

Network security technology, processes, and procedures are necessary to ensure that:

data transferred between networked devices is adequately protected from tampering, misuse, or destruction;

networked devices are appropriately managed, monitored, and utilized; and

that networking resources are used only for acceptable activities.

Computer security spans all aspects of computing equipment hardware, software, usage, and administration (e.g., device, data, applications/operating systems, operations and database subareas), and is necessary to ensure that they are:

adequately protected from tampering, misuse, or destruction;

appropriately managed and monitored;

utilized for organization sanctioned activities and purposes; and

available to support organization activities, processes and functions.

Frequently security discussions focused primarily on networks, their links and interconnecting equipment, and on securing operating systems and applications. However, providing network security is just not enough. Attackers can leverage other weaknesses to bypass the network security mechanisms in place. Network and computer security both need to be considered along with the other branches of security. The reader needs to remember that the term “information security” is generally used to refer to concepts, mechanisms, activities, and objectives that span all of the security areas mentioned above.

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!

Lesen Sie weiter in der vollständigen Ausgabe!