21st National Information Systems Security Conference

21st NISSC Proceedings: Papers

October 6-9, 1998: Hyatt Regency -- Crystal City, Virginia

Just a friendly reminder ALL of these papers' files you see on this page are in .pdf format. These files can be viewed by using Adobe Acrobat Reader. See previous web page to download a free trial version of Adobe Reader if you have not done so.

**PAPERS**
Assurance / Criteria / Testing : Track A
A Practical Approach to Sufficient INFOSEC (.pdf) (268,656 bytes / 265 KB) Dr. Rayford Vaughn, Jr., Mississippi State University A Metric for Trusted Systems (.pdf) (226,192 bytes / 222 KB) Audun Josang, Telenor R&D Practical Steps Toward Providing a Cost-Effective Security Architecture Based on the Common Criteria (.pdf) (104,197 bytes / 102 KB) Bernard Ramsey, Jr., Federal Aviation Administration An Approach for Certifying Security in Software Components (.pdf) (180,814 bytes / 177 KB) Anup K. Ghosh, Reliable Software Technologies Building a Case for Assurance from Process (.pdf) (102,260 bytes / 100 KB) Karen Ferraiolo, Arca Systems, Inc. All 5 papers listed above in the Assurance / Criteria / Testing section (.zip) (491,707 bytes / 481 KB) are zipped and available to download.
Education : Track B
None given.
Electronic Commerce : Track C
None given.
Internet : Track D
An Approach to UNIX Security Logging (.pdf) (60,840 bytes / 59 KB) Stefan Axelsson, Chalmers University of Technology, Sweden Ulf Lindqvist, Ulf Gustafson, Erland Jonsson, Chalmers University of Technology, Sweden A Layered Framework for Placement of Distributed Intrusion Detection Devices (.pdf) (138,726 bytes / 135 KB) Marcelo Medina, George Washington University The Macro Virus and Virus Scanning Software: An Analysis of Their Interaction (.pdf) (31,620 bytes / 30 KB) LT. William A. Macchione, Naval Air Systems Command Daniel Warren, Naval Postgraduate School The Remedy Dimension of Vulnerability Analysis (.pdf) (85,811 bytes / 83 KB) Ulf Lindqvist, Erland Jonsson, Chalmers University of Technology, Sweden Per Kaijser, Seimens AG, Germany A Forecasting Model for Internet Security Attacks (.pdf) (130,087 bytes / 127 KB) Alexander D. Korzyk, Sr., Virginia Commonwealth University and J.G. VanDyke and Associates An Analysis of Some Software Vulnerabilities (.pdf) (118,393 bytes / 115 KB) Mahesh Tripunitara, Ivan Krsul, Eugene Spafford, COAST Lab Purdue University Conflict and the Computer: Information Warfare and Related Ethical Issues (.pdf) (253,873 bytes / 247 KB) Sam Nitzberg, Telos Information Protection Solutions Common-Sense: An Alternative Approach to Web Security (.pdf) (51,651 bytes / 50 KB) Russell M. Shumway, Global Integrity Corporation Management of Network Security Applications (.pdf) (208,124 bytes / 203 KB) Philip C. Hyland, Ravi Sandhu, George Madison University The Cyber Battlefield - Is This the Setting for the Ultimate World War? (.pdf) (2,607,070 bytes / 2,546 KB) Sam Nitzberg, Telos Information Protection Solutions Improving Computing Security During the Development of DOD Computerized Weapons Platform (.pdf) (214,644 bytes / 209 KB) Sam Nitzberg, Mike Carson, Telos Information Protection Solutions Security Implications of Quantum Technologies (.pdf) (41,119 bytes / 40 KB) Jim Alves-Foss, University of Idaho Security and e-business: Is There a Prescription? (.pdf) (60,997 bytes / 59 KB) Jim Whitmore, IBM Corporation A Decision Making Model for Securely Conducting Electronic Commerce (.pdf) (257,403 bytes / 251 KB) Alexander D. Korzyk Sr., Virginia Commonwealth University and J.G. Van Dyke and Associates Anonymous Internet Credit Cards (.pdf) (189,740 bytes / 185 KB) Vijay Varadharajan, Yi Mu, University of Western Sydney, Nepean, Australia All 15 papers listed above in the Internet section (.zip) (3, 414,929 bytes / 3,335 KB) are zipped and available to download.
Policy / Administration / Management / Operations : Track E
Security Accreditation, Management and Monitoring - Getting the Balance Right! (.pdf) (26,847 bytes / 26 KB) Peter J. Fischer, Government Communications Headquarters, UK The Benefits of Applying the DoD Information Technology Security Certification and Accreditation Process to Commercial Systems and Applications (.pdf) (124,069 bytes / 121 KB) Robert M. Jackson, Gerald L. Oar, SphereCom Enterprises, Inc. Conversion of a 300 User Unclassified Network to a Restricted High Network (.pdf) (87,408 bytes / 85 KB) Roger M. Griffin, Civil Service College, Sunningdale, UK Peter J. Fischer, Government Communications Headquarters, UK Considerations for Allocating Resources for Information Security (.pdf) (72,875 bytes / 71 KB) Marshal D. Abrams, Carolyn M. Johnson, Jay J. Kahn, Susan G. King, The MITRE Corporation Risk Management (.pdf) (214,588 bytes / 209 KB) James W. Meritt, Wang Government Systems An Open Framework for Risk Mangement (.pdf) (61,410 bytes / 59 KB) Rick Craft, Greg Wyss, Ruthe Vandewart, Don Funkhouser, Sandia National Laboratories All 6 papers listed above in the Policy / Administration / Management / Operations section (.zip) (320,190 bytes / 313 KB) are zipped and available to download.
Research and Development : Track F
The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments (.pdf) (61,794 bytes / 60 KB) Peter A. Loscocco, Stephen D. Smalley, Patrick A. Muckelbauer, Ruth C. Taylor, S. Jeff Turner, John F. Farrell, National Security Agency Security Agent Based Distributed Authorization: An Approach (.pdf) (110,654 bytes / 108 KB) Vijay Varadharajan, Nikhir Kumar, Yi Mu, University of West Sydney, Nepean, Australia A Visual Mathematical Model for Intrusion Detection (.pdf) (160,082 bytes / 156 KB) Greg Vert, Deborah A. Frincke, Jesse McConnell, University of Idaho A Specification-Based Approach for Building Survivable Systems (.pdf) (227,941 bytes / 222 KB) R. Sekar, Yong Cai, Iowa State University Mark Segal, Bellcore Planning, Petri Nets, and Intrusion Detection (.pdf) (216,372 bytes / 211 KB) Deborah Frincke, Don Tobin, Yuan Ho, University of Idaho A Framework for Cooperative Intrusion Detection (.pdf) (269,775 bytes / 263 KB) Jesse McConnell, Deborah Frincke, Don Tobin, Jamie Marconi, Dean Polla, University of Idaho Analyzing Programs for Vulnerability to Buffer Overrun Attacks (.pdf) (240,377 bytes / 234 KB) Anup K. Ghosh, Tom O'Connor, Reliable Software Technologies Corporation An Approach for Analyzing the Robustness of Windows NT Software (.pdf) (224,134 bytes / 218 KB) Anup K. Ghosh, Viren Shah, Matt Schmid, Reliable Software Technologies Corporation Categorization of Software Errors That Led to Security Breaches (.pdf) (202,914 bytes / 198 KB) Wenliang Du, Aditya P. Mathur, COAST Laboratories, Purdue University A Survey of Multicast Security Issues and Architectures (.pdf) (82,524 bytes / 80 KB) Peter S. Kruus, Naval Research Laboratory High Assurance Multilevel Services for Off-the-Shelf Workstation Applications (.pdf) (153,633 bytes / 150 KB) Cynthia E. Irvine, Cpt. Jason Hackerson, USMC, Naval Postgraduate School James P. Anderson, James P. Anderson Company LT. Dion Robb, USN, SPAWARSYSCEN Building an FTP Guard (.pdf) (585,663 bytes / 571 KB) Paul D. Sands, Sandia National Laboratories Artificial Neural Networks for Misuse Detection (.pdf) (71,407 bytes / 69 KB) James Cannady, Nova Southeastern University Challenges and New Technologies for Addressing Security in High Performance Distributed Environments (.pdf) (73,310 bytes / 71 KB) Rossen Dimitrov, Matthew Gleeson, Mississippi State University The Granular Protection Solution for Databases (.pdf) (37,309 bytes / 36 KB) Ulf T. Mattsson, Ulf G. Dahl, Protegrity, Inc. Inheritance Properties of Role Hierarchies (.pdf) (49,622 bytes / 48 KB) W.A. Jansen, National Institute of Standards and Technology Decentralized Group Hierarchies in UNIX: An Experiment and Lessons Learned (.pdf) (220,783 bytes / 215 KB) Ravi Sandhu, Gail-Joon Ahn, George Mason University Role-Based Access Control Features in Commercial Database Management Systems (.pdf) (162,491 bytes / 158 KB) Chandramouli Ramaswamy, National Institute of Standards and Technology Ravi Sandhu, George Mason University From a Formal Privacy Model to its Implementation (.pdf) (78,236 bytes / 77 KB) Simone Fischer-Hubner, Amon Ott, University of Hamburg, Germany Wiemer-Murray Domain Security Policy Model for International Interoperability (.pdf) (64,901 bytes / 63 KB) Douglas J.M. Wiemer, SAIC Canada A HOL Formalization of CAPSL Semantics (.pdf) (163,716 bytes / 159 KB) Stephen H. Brackin, Arca Systems, Inc. All 21 papers listed above in the Research and Development section (.zip) (2,149,532 bytes / 2,100 KB) are zipped and available to download.
Future Issues : Track G
Status of the Advanced Encryption Standard (AES) Development Effort (.pdf) (54,081 bytes / 52 KB) Jim Foti, National Institute of Standards and Technology A Closer Look at Revocation and Key Compromise in Public Key Infrastructures (.pdf) (99,511 bytes / 97 KB) David A. Cooper, National Institute of Standards and Technology Multi-Protocol Attacks and the Public Key Infrastructure (.pdf) (70,751 bytes / 69 KB) Jim Alves-Foss, University of Idaho Security Policy Target, Content, and Links (.pdf) (244,420 bytes / 238 KB) Frank T. Bass, Omega Engineering, Incorporated Case Study of H.R. 695: The Security and Freedom Through Encryption (SAFE) Act (.pdf) (98,156 bytes / 95 KB) Catherine Miller Horiuchi, Sacramento Municipal Utility District, University of Southern California Effective Information Security Documents (.pdf) (361,359 bytes / 352 KB) Michael E.J. Stubbings, Communications-Electronics Security Group, UK All 6 papers listed above in the Future Issues section (.zip) (726,335 bytes / 710 KB) are zipped and available to download.

Send your comments to webmaster-csrc@nist.rip