The Comprehensive Guide to Computer Security, Extensively Revised with Newer Technologies, Methods, Ideas, and Examples

In this updated guide, University of California at Davis Computer Security Laboratory co-director Matt Bishop offers clear, rigorous, and thorough coverage of modern computer security. Reflecting dramatic growth in the quantity, complexity, and consequences of security incidents, Computer Security, Second Edition, links core principles with technologies, methodologies, and ideas that have emerged since the first edition's publication.

Writing for advanced undergraduates, graduate students, and IT professionals, Bishop covers foundational issues, policies, cryptography, systems design, assurance, and much more. He thoroughly addresses malware, vulnerability analysis, auditing, intrusion detection, and best-practice responses to attacks. In addition to new examples throughout, Bishop presents entirely new chapters on availability policy models and attack analysis.

• Understand computer security goals, problems, and challenges, and the deep links between theory and practice
• Learn how computer scientists seek to prove whether systems are secure
• Define security policies for confidentiality, integrity, availability, and more
• Analyze policies to reflect core questions of trust, and use them to constrain operations and change
• Implement cryptography as one component of a wider computer and network security strategy
• Use system-oriented techniques to establish effective security mechanisms, defining who can act and what they can do
• Set appropriate security goals for a system or product, and ascertain how well it meets them
• Recognize program flaws and malicious logic, and detect attackers seeking to exploit them

This is both a comprehensive text, explaining the most fundamental and pervasive aspects of the field, and a detailed reference. It will help you align security concepts with realistic policies, successfully implement your policies, and thoughtfully manage the trade-offs that inevitably arise.

Register your book for convenient access to downloads, updates, and/or corrections as they become available. See inside book for details.

Matt Bishop is a professor in the Department of Computer Science at the University of California at Davis. His main research interest is the analysis of vulnerabilities in computer systems, including modeling them, building tools to detect vulnerabilities, and ameliorating or eliminating them. He works in the areas of network security, including the study of denial of service attacks and defenses, policy modeling, software assurance testing, resilience, and formal modeling of access control. He was co-chair of the Joint Task Force that developed the Cybersecurity Curricula 2017: Curriculum Guidelines for Post-Secondary Degree Programs in Cybersecurity, released in December 2017. He earned his Ph.D. in computer science from Purdue University in 1984.

Preface xxix

Acknowledgments xlv

About the Author xlix

Part I: Introduction 1

Chapter 1: An Overview of Computer Security 3

1.1 The Basic Components 3

1.2 Threats 6

1.3 Policy and Mechanism 9

1.4 Assumptions and Trust 11

1.5 Assurance 12

1.6 Operational Issues 16

1.7 Human Issues 20

1.8 Tying It All Together 22

1.9 Summary 24

1.10 Research Issues 24

1.11 Further Reading 25

1.12 Exercises 25

Part II: Foundations 29

Chapter 2: Access Control Matrix 31

2.1 Protection State 31

2.2 Access Control Matrix Model 32

2.3 Protection State Transitions 37

2.4 Copying, Owning, and the Attenuation of Privilege 42

2.5 Summary 44

2.6 Research Issues 44

2.7 Further Reading 44

2.8 Exercises 45

Chapter 3: Foundational Results 49

3.1 The General Question 49

3.2 Basic Results 51

3.3 The Take-Grant Protection Model 56

3.4 Closing the Gap: The Schematic Protection Model 68

3.5 Expressive Power and the Models 81

3.6 Comparing Security Properties of Models 94

3.7 Summary 101

3.8 Research Issues 102

3.9 Further Reading 102

3.10 Exercises 103

Part III: Policy 107

Chapter 4: Security Policies 109

4.1 The Nature of Security Policies 109

4.2 Types of Security Policies 113

4.3 The Role of Trust 115

4.4 Types of Access Control 117

4.5 Policy Languages 118

4.6 Example: Academic Computer Security Policy 126

4.7 Security and Precision 131

4.8 Summary 136

4.9 Research Issues 136

4.10 Further Reading 137

4.11 Exercises 138

Chapter 5: Confidentiality Policies 141

5.1 Goals of Confidentiality Policies 141

5.2 The Bell-LaPadula Model 142

5.3 Tranquility 161

5.4 The Controversy over the Bell-LaPadula Model 164

5.5 Summary 169

5.6 Research Issues 169

5.7 Further Reading 170

5.8 Exercises 171

Chapter 6: Integrity Policies 173

6.1 Goals 173

6.2 The Biba Model 175

6.3 Lipner's Integrity Matrix Model 178

6.4 Clark-Wilson Integrity Model 183

6.5 Trust Models 189

6.6 Summary 196

6.7 Research Issues 196

6.8 Further Reading 197

6.9 Exercises 198

Chapter 7: Availability Policies 201

7.1 Goals of Availability Policies 201

7.2 Deadlock 202

7.3 Denial of Service Models 203

7.4 Example: Availability and Network Flooding 215

7.5 Summary 222

7.6 Research Issues 222

7.7 Further Reading 223

7.8 Exercises 224

Chapter 8: Hybrid Policies 227

8.1 Chinese Wall Model 227

8.2 Clinical Information Systems Security Policy 236

8.3 Originator Controlled Access Control 239

8.4 Role-Based Access Control 244

8.5 Break-the-Glass Policies 249

8.6 Summary 250

8.7 Research Issues 250

8.8 Further Reading 251

8.9 Exercises 252

Chapter 9: Noninterference and Policy Composition 255

9.1 The Problem 255

9.2 Deterministic Noninterference 259

9.3 Nondeducibility 271

9.4 Generalized Noninterference 274

9.5 Restrictiveness 277

9.6 Side Channels and Deducibility 280

9.7 Summary 282

9.8 Research Issues 283

9.9 Further Reading 283

9.10 Exercises 285

Part IV: Implementation I: Cryptography 287

Chapter 10: Basic Cryptography 289

10.1 Cryptography 289

10.2 Symmetric Cryptosystems 291

10.3 Public Key Cryptography 306

10.4 Cryptographic Checksums 315

10.5 Digital Signatures 318

10.6 Summary 323

10.7 Research Issues 324

10.8 Further Reading 325

10.9 Exercises 326

Chapter 11: Key Management 331

11.1 Session and Interchange Keys 332

11.2 Key Exchange 332

11.3 Key Generation 341

11.4 Cryptographic Key Infrastructures 343

11.5 Storing and Revoking Keys 353

11.6 Summary 359

11.7 Research Issues 360

11.8 Further Reading 361

11.9 Exercises 362

Chapter 12: Cipher Techniques 367

12.1 Problems 367

12.2 Stream and Block Ciphers 370

12.3 Authenticated Encryption 377

12.4 Networks and Cryptography 381

12.5 Example Protocols 384

12.6 Summary 410

12.7 Research Issues 411

12.8 Further Reading 411

12.9 Exercises 413

C…