NCJ Number
89656
Date Published
1974
Length
19 pages
Annotation
This paper develops a methodology for addressing the computer security problem, defines computer security, considers three basic elements of protection, and discusses security testing.
Abstract
Installation, security, and technical requirements should be developed to assure secure operating systems. Three issues involved in certifying a system as secure -- semantic, technological, and administrative issues -- are reviewed. The three basic elements of protection discussed are isolation, controlled access, and identification. Design approaches available to achieve these elements of protection are discussed and illustrated. The paper also reviews the problems involved in failure testing. It notes that future efforts need to be spent on model development, production methodology, and automated test tools. Diagrams are presented.