Publications
July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to
csrc-inquiry@nist.gov.
Withdrawn on August 01, 2018.
Underlying Technical Models for Information Technology Security
Documentation
Topics
Date Published: December 2001
Planning Note (08/01/2018):
Withdrawn: Describes a model that pre-dates the Risk Management Framework and Cybersecurity Framework.
Author(s)
Gary Stoneburner (NIST)
Underlying Technical Models for Information Technology Security provides a description of the technical foundations, termed models, that underlie secure information technology (IT). The intent is to provide, in a concise form, the models that should be considered in the design and development of technical security capabilities. These models encompass lessons learned, good practices, and specific technical considerations.The intended audience consists of both government and private sectors including: IT users desiring a better understanding of system security; engineers and architects designing/building security capabilities; and those developing guidance for others to use in implementing security capabilities.
Underlying Technical Models for Information Technology Security provides a description of the technical foundations, termed models, that underlie secure information technology (IT). The intent is to provide, in a concise form, the models that should be considered in the design and development of...
See full abstract
Underlying Technical Models for Information Technology Security provides a description of the technical foundations, termed models, that underlie secure information technology (IT). The intent is to provide, in a concise form, the models that should be considered in the design and development of technical security capabilities. These models encompass lessons learned, good practices, and specific technical considerations.The intended audience consists of both government and private sectors including: IT users desiring a better understanding of system security; engineers and architects designing/building security capabilities; and those developing guidance for others to use in implementing security capabilities.
Hide full abstract
Keywords
computer security; information technology security; IT security; technical models
Control Families
Planning; System and Services Acquisition
) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)
