Privacy-Respecting Intrusion Detection

• Κύριος συγγραφέας: Flegel, Ulrich (Συγγραφέας)
• Συγγραφή απο Οργανισμό/Αρχή: SpringerLink (Online service)
• Μορφή: Ηλεκτρονική πηγή Ηλ. βιβλίο
• Γλώσσα: English
• Έκδοση: Boston, MA : Springer US, 2007.
• Σειρά: Advances in Information Security, 35
• Θέματα: Computer science.; Computer organization.; Computer communication systems.; Computer security.; Data structures (Computer science).; Data encryption (Computer science).; Computer Science.; Systems and Data Security.; Computer Communication Networks.; Data Encryption.; Information Systems Applications (incl. Internet).; Data Structures, Cryptology and Information Theory.; Computer Systems Organization and Communication Networks.

With our society's growing dependency on information technology systems (IT), IT security is crucial. To properly respond to misuse or abusive activity in IT systems, one needs to establish the capability to detect and understand improper activity. Intrusion Detection Systems observe activity o...

Πίνακας περιεχομένων:

• and Background
• Authorizations
• An Architectural Model for Secure Authorizations
• Traditional Security Objectives
• Personal Data Protection Objectives
• The Challenge: Technical Enforcement of Multilateral Security
• Pseudonyms – A Technical Point of View
• An Architectural Model for Pseudonymous and Secure Authorizations
• Comparing Architectures
• Audit Data Pseudonymization
• Set-based Approach
• Requirements, Assumptions and Trust Model
• Modeling Conditions for Technical Purpose Binding of Controlled Pseudonym Disclosure
• Cryptographic Enforcement of Disclosure Conditions
• The Mismatch Problem
• Operational Pseudonymization and Pseudonym Disclosure
• Extensions
• Application to Unix Audit Data
• Unix Audit Data
• Syslog
• Instantiating the Set-based Approach for Syslog-style Audit Data
• Implementation: Pseudo/CoRe
• Evaluation
• APES: Anonymity and Privacy in Electronic Services
• Evaluating the Design Using Basic Building Blocks for Anonymity
• Evaluating the Performance of the Implementation
• Refinement of Misuse Scenario Models
• Motivating Model Refinements
• Models of Misuse Scenarios
• Pseudonymization Based on Serial Signature-Nets
• Pseudonym Linkability
• Pseudonym Disclosure.