Security Patterns (eBook)
448 Seiten
John Wiley & Sons (Verlag)
978-1-118-72593-1 (ISBN)
specialists. Few show how build security into software. None
breakdown the different concerns facing security at different
levels of the system: the enterprise, architectural and operational
layers. Security Patterns addresses the full
spectrum of security in systems design, using best practice
solutions to show how to integrate security in the broader
engineering process.
* Essential for designers building large-scale systems who want
best practice solutions to typical security problems
* Real world case studies illustrate how to use the patterns in
specific domains
For more information visit www.securitypatterns.org
Markus Schumacher, SAP AG, Germany. Eduardo Fernandez-Buglioni, Florida Atlantic University, USA. Duane Hybertson, The MITRE Corp, USA. Frank Buschmann, Siemens AG, Germany. Peter Sommerlad, Hochschule für Technik Rapperswil, Germany.
Chapter 1: The Pattern Approach.
Patterns at a Glance.
No Pattern is an Island.
Patterns Everywhere.
Humans are the Target.
Patterns Resolve Problems and Shape Environments.
Towards Pattern Languages.
Documenting Patterns.
A Brief Note on The History of Patterns.
The Pattern Community and its Culture.
Chapter 2: Security Foundations.
Overview.
Security Taxonomy.
General Security Resources.
Chapter 3: Security Patterns.
The History of Security Patterns.
Characteristics of Security Patterns.
Why Security Patterns?
Sources for Security Pattern Mining.
Chapter 4: Patterns Scope and Enterprise Security.
The Scope of Patterns in the Book.
Organization Factors.
Resulting Organization.
Mapping to the Taxonomy.
Organization in the Context of an Enterprise Framework.
Chapter 5: The Security Pattern Landscape.
Enterprise Security and Risk Management Patterns.
Identification & Authentication (I&A) Patterns.
Access Control Model Patterns.
System Access Control Architecture Patterns.
Operating System Access Control Patterns.
Accounting Patterns.
Firewall Architecture Patterns.
Secure Internet Applications Patterns.
Cryptographic Key Management Patterns.
Related Security Pattern Repositories Patterns.
Chapter 6: Enterprise Security and Risk Management.
Security Needs Identification for Enterprise Assets.
Asset Valuation.
Threat Assessment.
Vulnerability Assessment.
Risk Determination.
Enterprise Security Approaches.
Enterprise Security Services.
Enterprise Partner Communication.
Chapter 7: Identification and Authentication(I&A).
I&A Requirements.
Automated I&A Design Alternatives.
Password Design and Use.
Biometrics Design Alternatives.
Chapter 8: Access Control Models.
Authorization.
Role-Based Access Control.
Multilevel Security.
Reference Monitor.
Role Rights Definition.
Chapter 9: System Access Control Architecture.
Access Control Requirements.
Single Access Point.
Check Point.
Security Session.
Full Access with Errors.
Limited Access.
Chapter 10: Operating System Access Control.
Authenticator.
Controlled Process Creator.
Controlled Object Factory.
Controlled Object Monitor.
Controlled Virtual Address Space.
Execution Domain.
Controlled Execution Environment.
File Authorization.
Chapter 11: Accounting.
Security Accounting Requirements.
Audit Requirements.
Audit Trails and Logging Requirements.
Intrusion Detection Requirements.
Non-Repudiation Requirements.
Chapter 12: Firewall Architectures.
Packet Filter Firewall.
Proxy-Based Firewall.
Stateful Firewall.
Chapter 13: Secure Internet Applications.
Information Obscurity.
Secure Channels.
Known Partners.
Demilitarized Zone.
Protection Reverse Proxy.
Integration Reverse Proxy.
Front Door.
Chapter 14: Case Study: IP Telephony.
IP Telephony at a Glance.
The Fundamentals of IP Telephony.
Vulnerabilities of IP Telephony Components.
IP Telephony Use Cases.
Securing IP telephony with patterns.
Applying Individual Security Patterns.
Conclusion.
Chapter 15: Supplementary Concepts.
Security Principles and Security Patterns.
Enhancing Security Patterns with Misuse Cases.
Chapter 16: Closing Remarks.
References.
Index.
Erscheint lt. Verlag | 12.7.2013 |
---|---|
Reihe/Serie | Wiley Series in Software Design Patterns | Wiley Series in Software Design Patterns |
Sprache | englisch |
Themenwelt | Informatik ► Netzwerke ► Sicherheit / Firewall |
Mathematik / Informatik ► Informatik ► Programmiersprachen / -werkzeuge | |
Mathematik / Informatik ► Informatik ► Software Entwicklung | |
Schlagworte | Computer Science • Informatik • Programmierung u. Software-Entwicklung • Programming & Software Development • Softwareentwicklung |
ISBN-10 | 1-118-72593-X / 111872593X |
ISBN-13 | 978-1-118-72593-1 / 9781118725931 |
Haben Sie eine Frage zum Produkt? |
![EPUB](/img/icon_epub_big.jpg)
Größe: 5,3 MB
Kopierschutz: Adobe-DRM
Adobe-DRM ist ein Kopierschutz, der das eBook vor Mißbrauch schützen soll. Dabei wird das eBook bereits beim Download auf Ihre persönliche Adobe-ID autorisiert. Lesen können Sie das eBook dann nur auf den Geräten, welche ebenfalls auf Ihre Adobe-ID registriert sind.
Details zum Adobe-DRM
Dateiformat: EPUB (Electronic Publication)
EPUB ist ein offener Standard für eBooks und eignet sich besonders zur Darstellung von Belletristik und Sachbüchern. Der Fließtext wird dynamisch an die Display- und Schriftgröße angepasst. Auch für mobile Lesegeräte ist EPUB daher gut geeignet.
Systemvoraussetzungen:
PC/Mac: Mit einem PC oder Mac können Sie dieses eBook lesen. Sie benötigen eine
eReader: Dieses eBook kann mit (fast) allen eBook-Readern gelesen werden. Mit dem amazon-Kindle ist es aber nicht kompatibel.
Smartphone/Tablet: Egal ob Apple oder Android, dieses eBook können Sie lesen. Sie benötigen eine
Geräteliste und zusätzliche Hinweise
Buying eBooks from abroad
For tax law reasons we can sell eBooks just within Germany and Switzerland. Regrettably we cannot fulfill eBook-orders from other countries.
aus dem Bereich