Information Security in Research and Business : Proceedings of the IFIP TC11 13th International Conference on Information Security (SEC ’97): 14–16 May 1997, Copenhagen, Denmark

Recently, IT has entered all important areas of society. Enterprises, individuals and civilisations all depend on functioning, safe and secure IT. Focus on IT security has previously been fractionalised, detailed and often linked to non-business applicaitons. The aim of this book is to address the current and future prospects of modern IT security, functionality in business, trade, industry, health care and government. The main topic areas covered include existing IT security tools and methodology for modern IT environments, laws, regulations and ethics in IT security environments, current and future prospects in technology, infrastructures, technique and methodology and IT security in retrospective. Front Matter....Pages i-xii Front Matter....Pages 1-1 Information security — challenges for the next millennium....Pages 3-8 Selection of secure single sign-on solutions for heterogeneous computing environments....Pages 9-24 A Formal model to aid documenting and harmonizing of information security requirements....Pages 25-38 Front Matter....Pages 39-39 A Compile-time Model for safe Information Flow in Object-Oriented Databases....Pages 41-55 Deriving Authorizations from Process Analysis in Legacy Information Systems....Pages 56-67 Front Matter....Pages 69-69 The Role of Government in creating the IT security infrastructure....Pages 71-77 Code of Practice: A Standard for Information Security Management....Pages 78-90 Can Security Baselines replace Risk Analysis?....Pages 91-98 Front Matter....Pages 99-99 gGSS—API: a group enhanced generic security service....Pages 101-110 Front Matter....Pages 111-111 Electronic Document Exchange in Sweden — the legal aspects....Pages 113-119 Front Matter....Pages 121-121 An attack detection system for secure computer systems — Outline of the solution....Pages 123-135 Front Matter....Pages 137-137 A Taxonomy and Overview of Information Security Experiments....Pages 139-150 Pseudonymous Audit for Privacy Enhanced Intrusion Detection....Pages 151-163 Individual Management of Personal Reachability in Mobile Communication....Pages 164-174 Front Matter....Pages 175-175 New vistas on info-system security....Pages 177-196 A Common Criteria framework for the evaluation of Information Technology systems security....Pages 197-209 A methodology for accrediting a commercial distributed database....Pages 210-221 A comparison of schemes for certification authorities/Trusted Third Parties....Pages 222-240 How to trust systems....Pages 241-252 Front Matter....Pages 253-253 Integrating information security in the development of telematics systems....Pages 255-266 Front Matter....Pages 253-253 Developing Secure Applications: A Systematic Approach....Pages 267-279 Controlling Internet Access at an Educational Institution....Pages 280-292 Analysis of JAVA Security and Hostile Applets....Pages 293-295 New Organizational Forms for Information Security Management....Pages 296-307 Security when outsourcing: concepts, constructs, compliance....Pages 308-318 Front Matter....Pages 319-319 The IFIP TC11 Position on Cryptopolicies....Pages 321-322 Front Matter....Pages 323-323 Towards a Holistic View Of Security and Safety of Enterprise Information and Communication Technologies: Adapting to a Changing Paradigm....Pages 325-336 A Taxonomy of Electronic Cash Schemes....Pages 337-348 Large scale elections by coordinating electoral colleges....Pages 349-362 MVS-SAT : A Security Administration Tool to support SMF Protocol Data Evaluation....Pages 363-374 Front Matter....Pages 375-375 Security requirements and solutions in distributed Electronic Health Records....Pages 377-390 ODESSA A new approach to healthcare risk analysis....Pages 391-402 A Comprehensive Need-to-Know Access Control System and its Application for Medical Information Systems....Pages 403-414 Front Matter....Pages 415-415 The Future of Networks and Network Security....Pages 417-424 Securing communications over ATM networks....Pages 425-439 Non-intrusive authentication....Pages 440-451 Roaming security agents enabling intelligent access control and network protection....Pages 452-468 Back Matter....Pages 469-472 Proceedings of the IFIP TC11 13th International Conference on Information Security (SEC '97): 14-16 May 1997, Copenhagen, Denmark