Open Source Systems Security Certification

By: Ernesto Damiani, Claudio Agostino Ardagna, Nabil El Ioini

Write A Review

Hardcover | 5 March 2009

At a Glance

Hardcover
224 Pages

Dimensions(cm)
24.13 x 15.88 x 1.27

Hardcover

$169.00

or 4 interest-free payments of $42.25 with

Ships in 7 to 10 business days

Open Source Systems Security Certification discusses Security Certification Standards and establishes the need to certify open source tools and applications. This includes the international standard for the certification of IT products (software, firmware and hardware) Common Criteria (ISO/IEC 15408) (CC 2006), a certification officially adopted by the governments of 18 nations.

Without security certification, open source tools and applications are neither secure nor trustworthy. Open Source Systems Security Certification addresses and analyzes the urgency of security certification for security-sensible markets, such as telecommunications, government and the military, through provided case studies.

This volume is designed for professionals and companies trying to implement an Open Source Systems (OSS) aware IT governance strategy, and SMEs looking to attract new markets traditionally held by proprietary products or to reduce costs. This book is also suitable for researchers and advanced-level students.

Shipping

	Standard Shipping	Express Shipping
Metro postcodes:	$9.99	$14.95
Regional postcodes:	$9.99	$14.95
Rural postcodes:	$9.99	$14.95

Orders over $79.00 qualify for free shipping.

How to return your order

At Booktopia, we offer hassle-free returns in accordance with our returns policy. If you wish to return an item, please get in touch with Booktopia Customer Care.

Additional postage charges may be applicable.

Defective items

If there is a problem with any of the items received for your order then the Booktopia Customer Care team is ready to assist you.

For more info please visit our Help Centre.

You Can Find This Book In

Non-Fiction Computing & I.T.Computer Security Data Encryption Computer Programming & Software Development Software Engineering Computer Science Programming & Scripting Languages Computer Networking & Communications Network Security

Other Editions and Formats

Paperback

Published: 4th November 2010

View Product

Introduction	p. 1
Context and motivation	p. 1
Software certification	p. 4
Certification vs. standardization	p. 5
Certification authorities	p. 5
Software security certification	p. 6
The state of the art	p. 8
Changing scenarios	p. 9
Certifying Open source	p. 9
Conclusions	p. 12
References	p. 12
Basic Notions on Access Control	p. 15
Introduction	p. 15
Access Control	p. 17
Discretionary Access Control	p. 18
Mandatory Access Control	p. 19
Role Based Access Control	p. 24
Conclusions	p. 24
References	p. 25
Test based security certifications	p. 27
Basic Notions on Software Testing	p. 27
Types of Software Testing	p. 30
Automation of Test Activities	p. 34
Fault Terminology	p. 34
Test Coverage	p. 36
Test-based Security Certification	p. 37
The Trusted Computer System Evaluation Criteria (TCSEC) standard	p. 39
CTCPEC	p. 46
ITSEC	p. 46
The Common Criteria: A General Model for Test-based Certification	p. 47
CC components	p. 48
Conclusions	p. 59
References	p. 60
Formal methods for software verification	p. 63
Introduction	p. 63
Formal methods for software verification	p. 65
Model Checking	p. 65
Static Analysis	p. 69
Untrusted code	p. 73
Security by contract	p. 74
Formal Methods for Error Detection in OS C-based Software	p. 75
Static Analysis for C code verification	p. 76
Model Checking for large-scale C-based Software verification	p. 81
Symbolic approximation for large-scale OS software verification	p. 83
Conclusion	p. 86
References	p. 86
OSS security certification	p. 89
Open source software (OSS)	p. 89
Open Source Licenses	p. 90
Specificities of Open Source Development	p. 93
OSS security	p. 97
OSS certification	p. 99
State of the art	p. 100
Security driven OSS development	p. 104
Security driven OSS development: A case study on Single Sign-On	p. 105
Single Sign-On: Basic Concepts	p. 105
A ST-based definition of trust models and requirements for SSO solutions	p. 107
Requirements	p. 116
A case study: CAS++	p. 118
Conclusions	p. 121
References	p. 122
Case Study 1: Linux certification	p. 125
The Controlled Access Protection Profile and the SLES8 Security Target	p. 125
SLES8 Overview	p. 126
Target of Evaluation (TOE)	p. 127
Security environment	p. 128
Security objectives	p. 129
Security requirements	p. 130
Evaluation process	p. 132
Producing the Evidence	p. 133
The Linux Test Project	p. 134
Writing a LTP test case	p. 135
Evaluation Tests	p. 141
Running the LTP test suite	p. 141
Test suite mapping	p. 142
Automatic Test Selection Example Based on SLES8 Security Functions	p. 146
Evaluation Results	p. 148
Horizontal and Vertical reuse of SLES8 evaluation	p. 149
Across distribution extension	p. 149
SLES8 certification within a composite product	p. 151
Conclusions	p. 153
References	p. 153
Case Study 2: ICSA and CCHIT Certifications	p. 155
Introduction	p. 155
ICSA Dynamic Certification Framework	p. 157
A closer look to ICSA certification	p. 158
Certification process	p. 158
A case study: the ICSA certification of the Endian firewall	p. 159
Endian Test Plan	p. 161
Hardware configuration	p. 161
Software configuration	p. 161
Features to test	p. 161
Testing tools	p. 163
Testing	p. 164
Configuration	p. 164
Logging	p. 165
Administration	p. 166
Security testing	p. 166
The CCHIT certification	p. 168
The CCHIT certification process	p. 170
Conclusions	p. 170
References	p. 171
The role of virtual testing labs	p. 173
Introduction	p. 173
An Overview of Virtualization Internals	p. 176
Virtualization Environments	p. 177
Comparing technologies	p. 179
Virtual Testing Labs	p. 180
The Open Virtual Testing Lab	p. 180
Xen Overview	p. 181
OVL key aspects	p. 181
Hardware and Software Requirements	p. 182
OVL Administration Interface	p. 184
Using OVL to perform LTP tests	p. 184
Conclusions	p. 186
References	p. 186
Long-term OSS security certifications: An Outlook	p. 187
Introduction	p. 187
Long-term Certifications	p. 189
Long-lived systems	p. 189
Long-term certificates	p. 190
On-demand certificate checking	p. 192
The certificate composition problem	p. 194
Conclusions	p. 195
References	p. 196
An example of a grep-based search/match phase	p. 199
Index	p. 201
Table of Contents provided by Ingram. All Rights Reserved.

Open Source Systems Security Certification

At a Glance

Hardcover

Shipping

How to return your order

Defective items

You Can Find This Book In

Other Editions and Formats

Paperback

More in Network Security

Careless People

A story of where I used to work

Digital Wisdom

Searching for Agency in the Age of AI

Digital Wisdom

Searching for Agency in the Age of AI

The New Age of Sexism

How the AI Revolution is Reinventing Misogyny

Cyberethics

Dark Wire

The Incredible True Story of the Largest Sting Operation Ever

Cybersecurity All-in-One For Dummies

For Dummies

Keanu Reeves is Not in Love With You

The Murky World of Online Romance Fraud

Hacking For Dummies

For Dummies (Computer/Tech)

ISC2 CISSP Certified Information Systems Security Professional Official Study Guide & Practice Tests Bundle

Sybex Study Guide

Cryptography and Network Security

8th Edition - Principles and Practice, Global Edition

Grey Area

Dark Web Data Collection and the Future of OSINT

Network Security Essentials 6ed

Applications and Standards, Global Edition

Tech-Smart Parenting

How to keep your kids happy and safe online

CompTIA A+ Complete Study Guide, 2-Volume Set

Volume 1 Core 1 Exam 220-1201 and Volume 2 Core 2 Exam 220-1202

Web Application Security

2nd Eidtion - Exploitation and Countermeasures for Modern Web Applications

Dark Wire

The Incredible True Story of the Largest Sting Operation Ever

Password Logbook (Hip Floral)

Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location

Threat Modeling

A Practical Guide for Development Teams

CompTIA Security+ Certification Kit

7th Edition - Exam SY0-701

Linux Basics for Hackers, 2nd Edition

Getting Started with Networking, Scripting, and Security in Kali

Intelligence-Driven Incident Response

Outwitting the Adversary

Zero Trust Networks

Building Secure Systems in Untrusted Network

Building Secure and Reliable Systems

Best Practices for Designing, Implementing, and Maintaining Systems

This product is categorised by