Computer Security: Art and Science

By M. Bishop. 2002

1,380 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/488d738569c5c80198efadb0a952f54a5376ce26

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Attack models and scenarios for networked control systems (2012, background): “There exists a vast literature on computer security focusing on three main properties of data and IT services, namely confidentiality, integrity, and availability [3].”
Ether: malware analysis via hardware virtualization extensions (2008, background): “To prevent such leakage, the principle of non-interference [21] dictates that the execution of P A shall not interfere with the execution of P .”
Semantically Rich Application-Centric Security in Android (2009, background): “An administrative policy dictates how policy itself can be changed [9].”
The Plight of the Targeted Attacker in a World of Scale (2010, background): “Charles has many attacks that exploit vulnerabilities in her applications or operating sys-tem [44, 33, 10], her ﬁrewall [16], the network she uses [38] or her susceptibility to social engineering [27].”
Formalizing information security knowledge (2009, background): “[7] provides an excellent source for concept definitions and high-level taxonomies, which was incorporated into our ontology in the fields of threats, cryptosystems, biometrics, and malicious logic.”
Analyzing and modeling real-world phenomena with complex networks: a survey of applications (2007, background): “While its more fundamental topics involve computer architecture, data storage and processing, and system control (programming and algorithm developing) [457], it has become essential for developments in a variety of areas.”
Secure Control: Towards Survivable Cyber-Physical Systems (2008, background): “Integrity refers to the trustworthiness of data or resources [4].”
Privacy and contextual integrity: framework and applications (2006, methodology): “, [12]) is an access control model in which access rights are specified in terms of roles.”
A secure control framework for resource-limited adversaries (2012, background): “There exists a vast literature on computer security focusing on three main properties of data and IT services, namely confidentiality, integrity, and availability [3].”
Using complexity, coupling, and cohesion metrics as early indicators of vulnerabilities (2011, background): “not, allowed as far as security is concerned” [ 8 ].”
Security, privacy and trust in Internet of Things: The road ahead (2015, background): “[98] demonstrates the PM ability to express and enforce the policy objectives of RBAC [46], Chinese Wall [99], MAC and DAC models [100].”
Secure Control Systems: A Quantitative Risk Management Approach (2015, methodology): “Defense Methodology This subsection describes a common methodology to enhance a system’s cybersecurity, namely the risk management framework [35], [37], [38].”