Security In Computing

This third edition of the all time classic computer security book provides an overview of all types of computer security from centralized systems to distributed networks. The book has been updated to make the most current information in the field available and accessible to today's professionals.

Computers at Risk presents a comprehensive agenda for developing nationwide policies and practices for computer security. Specific recommendations are provided for industry and for government agencies engaged in computer security activities. The volume also outlines problems and opportunities in computer security research, recommends ways to improve the research infrastructure, and suggests topics for investigators. The book explores the diversity of the field, the need to engineer countermeasures based on speculation of what experts think computer attackers may do next, why the technology community has failed to respond to the need for enhanced security systems, how innovators could be encouraged to bring more options to the marketplace, and balancing the importance of security against the right of privacy.

This book analyzes the latest advances in privacy, security and risk technologies within cloud environments. With contributions from leading experts, the text presents both a solid overview of the field and novel, cutting-edge research. A Glossary is also included at the end of the book. Topics and features: considers the various forensic challenges for legal access to data in a cloud computing environment; discusses privacy impact assessments for the cloud, and examines the use of cloud audits to attenuate cloud security problems; reviews conceptual issues, basic requirements and practical suggestions for provisioning dynamically configured access control services in the cloud; proposes scoped invariants as a primitive for analyzing a cloud server for its integrity properties; investigates the applicability of existing controls for mitigating information security risks to cloud computing environments; describes risk management for cloud computing from an enterprise perspective.

The chapters in this open access book arise out of the EU Cost Action project Cryptacus, the objective of which was to improve and adapt existent cryptanalysis methodologies and tools to the ubiquitous computing framework. The cryptanalysis implemented lies along four axes: cryptographic models, cryptanalysis of building blocks, hardware and software security engineering, and security assessment of real-world systems. The authors are top-class researchers in security and cryptography, and the contributions are of value to researchers and practitioners in these domains. This book is open access under a CC BY license.

As is common practice in research, many new cryptographic techniques have been developed to tackle either a theoretical question or foreseeing a soon to become reality application. Cloud computing is one of these new areas, where cryptography is expected to unveil its power by bringing striking new features to the cloud. Cloud computing is an evolving paradigm, whose basic attempt is to shift computing and storage capabilities to external service providers. This resource offers an overview of the possibilities of cryptography for protecting data and identity information, much beyond well-known cryptographic primitives such as encryption or digital signatures. This book represents a compilation of various recent cryptographic primitives, providing readers with the features and limitations of each.

This book constitutes the refereed proceedings of the 7th International Symposium on Security in Computing and Communications, SSCC 2019, held in Trivandrum, India, in December 2019. The 22 revised full papers and 7 revised short papers presented were carefully reviewed and selected from 61 submissions. The papers cover wide research fields including cryptography, database and storage security, human and societal aspects of security and privacy.

Location-aware computing is a technology that uses the location (provides granular geographical information) of people and objects to derive contextual information. Today, one can obtain this location information free of cost through smartphones. Smartphones with location enabled applications have revolutionized the ways in which people perform their activities and get benefits from the automated services. It especially helps to get details of services in less time; wherever the user may be and whenever they want. The need for smartphones and location enabled applications has been growing year after year. Nowadays no one can leave without their phone; the phone seemingly becomes one of the parts of the human body. The individual can now be predicted by their phone and the identity of the phone becomes the person’s identity. Though there is a tremendous need for location-enabled applications with smartphones, the debate on privacy and security related to location data has also been growing. Privacy and Security Challenges in Location Aware Computing provides the latest research on privacy enhanced location-based applications development and exposes the necessity of location privacy preservation, as well as issues and challenges related to protecting the location data. It also suggests solutions for enhancing the protection of location privacy and therefore users’ privacy as well. The chapters highlight important topic areas such as video surveillance in human tracking/detection, geographical information system design, cyberspace attacks and warfare, and location aware security systems. The culmination of these topics creates a book that is ideal for security analysts, mobile application developers, practitioners, academicians, students, and researchers.