Approved-By:  Public-Access Computer Systems Forum <LIBPACS@UHUPVM1.BITNET>
Newsgroups: bit.listserv.pacs-l
Date:         Mon, 12 Oct 1992 17:13:12 CDT
From:         "Patt Leonard" <leonard@alexia.lis.uiuc.edu>
Subject:      computer security in libraries

----------------------------Original message----------------------------

Cross-posted to PACS-L@uhupvm1.bitnet Public-Access Computer Systems
            and VIRUS-L@lehiibm1.bitnet

     As a class assignment, I started the following bibliography of
works related to protecting library computer systems from viruses,
trojan horses, etc.; for my own edification, I'd like to complete this
list.  I'm looking for works that are specifically about libraries,
whether public or academic, and which describe either systems accessible
to the public, or limited to use by the library staff.  Please send me
references for any titles you would recommend.  If there is sufficient
interest, I will post the revised bibliography to this list.  Thank you.


                                               Patt Leonard
leonard@alexia.lis.uiuc.edu
Grad. Sch. of Lib. & Info. Sci., U. of Illinois at Urbana-Champaign
    *     *    *   *   *   *  * * *** * *  *   *   *   *    *     *

Bibliography of works related to software protection in libraries
   --------------------------------------------

Aucoin, Roger F.  "Computer Viruses: Checklist for Recovery," _Computers
in Libraries_, (Feb. 1989): pp. 4, 6-7.
     Practical, step-by-step instructions for recovering from an
     infection on an IBM-compatible microcomputer, and making back-ups.

Balas, Janet.  "Telecommunications [column]: Computer Security
Revisited," _Computers in Libraries_, (Feb. 1991): p. 34.
     Introduction to the National Computer Systems Laboratory Computer
     Security BBS, which is sponsored by the National Institute of
     Standards and Technology.

Barry, Maria C.  "Computer Viruses: Interview with Frederick Cohen,"
_Special Libraries_, vol. 81 (Fall 1990): pp. 365-7.
     Cohen is with Advanced Software Protection, Inc.

Butzen, Frederick, and Francine Furler.  "Computer Security: A Necessary
Element of Integrated Information Systems," _Bulletin of the Medical
Library Association_, vol. 74 (July 1986): pp. 210-16.

Drewes, Jeanne.  "Computers: Planning for Disaster," _Law Library
Journal_, vol. 81, no. 1 (Winter 1989): pp. 103-116.
     Article is about recovery from natural disasters, such as fires and
     floods, but includes advice about making backups and storing them
     off-site.  Includes bibliography on recovering from natural
     disasters.

Flanders, Bruce.  "Protecting the Vulnerable CD-ROM Workstation: Safe
Computing in an Age of Computer Viruses," _CD-ROM Librarian_, vol. 7,
no. 1 (Jan. 1992): pp. 26-29.
     Describes the Norton Anti-Virus and Central Point Anti-Virus
     programs for protection against DOS viruses.

Helsing, Cheryl, Marianne Swanson, and Mary Anne Todd.  "Computer User's
Guide to the Protection of Information Resources," _Information Reports
and Bibliographies_, vol. 20, no. 2 (1991): pp. 13-16.

Jaffe, Lee.  "Reader's Soapbox [column]: Libraries Without Walls,"
_Technicalities_, vol. 10, no. 9 (Sept. 1990): pp. 5-7.
     Article for the most part summarizes a discussion which took place
     on the PACS-L list in Spring 1990 about the dangers/merits of
     providing dial-up access to library OPACS.  Some non-technical
     remarks about the danger of unauthorized access to and use of the
     computer on which the library OPAC (online public-access catalog) runs.

Johnson, D.  _The Future of Electronic Educational Networks: Some
Ethical Issues_.  ERIC, May 1991.  15 pg. (ED 332 689)
     Considers issues of privacy and equal access to information on
     computer networks; includes some discussion of viruses on networks.
     Author recommends increased security balanced with user needs in
     e-mail, academic library services, and international networks.

Koga, James S.  "Security and the PC-Based Public Workstation,"
_Online_, vol. 14, no. 5 (Sept. 1990): pp. 63-70.   Erratum, vol. 15
(Jan. 1991).
     Concerned with computer crimes and microcomputers for public use.

Lincoln, Alan Jay.  "Computer Security," _Library & Archival Security_,
vol. 11, no. 1 (1991): pp. 157-171.
     Primarily summarizes general computer security literature, with
     some emphasis on government publications in the field.  Describes
     security threats, and measures to preserve security, such as
     educating system users, and preventing unauthorized access to
     hardware.

Machalow, Robert.  "Security for LOTUS Files," _Computers in Libraries_,
vol. 9 (Feb. 1989).

Primich, T.  "Coping with Computer Viruses: General Discussion and
Review of Symantec Anti-Virus for the Macintosh," _Library Software
Review_, vol. 11, no. 2 (March 1992): pp. 9-12.
     Describes two viruses which affect Macintosh: Scores and n VIR B.
     Also describes the SAM Virus Clinic and SAM Intercept anti-virus
     programs, and their applications in libraries.

Soon, Ang, and Detmar W. Straub.  "Securing CD-ROMs and the
Microcomputer Environment," _Laserdisk Professional_, vol. 2 (July
1989): pp. 18-23.

Stover, Mark.  "Issues in CD-ROM Security," _CD-ROM Librarian_, vol. 4,
no. 6 (June 1989): pp. 16-20.

Valauskas, Ed.  "Viruses and the Role of Responsibility," _Library
Workstation and PC Report_, (Jan. 1989): pp. 6-10.
     Concerned with Macintosh viruses.  Includes bibliography of works
     on Mac viruses.

Vasi, J. "Setting Up CD-ROM Work Areas.  Part 2: Integrating CD-ROM
Functions into Library Services," CD-ROM Professional_, vol. 5,
no. 3 (May 1992): pp. 38-43.
     Discusses how to integrate CD-ROM functions into library services;
     includes some discussion of security issues.

Wilkinson, David W.  "CD-ROM Public Workstation Security: Reducing the
Risk Factor," _Library Software Review_, vol. 10 (Nov./Dec. 1991): p.
407.
     Presented at the CIL Conference 1991.

Wilkinson, David W.  "Public CD-ROM Workstation Security: Contexts of
Risk and Appropriate Responses," _CD-ROM Librarian_ (Jan. 1992): pp.
20-29.
     Describes measures taken at JFK Memorial Library, Calif. State
     Univ., Los Angeles, to secure the hardware and software of the
     CD-ROM end-user workstations, to protect against theft, piracy,
     misuse, and vandalism.

Yerkey, A. Neil.  "Password Protection for dBASE Applications,"
_Microcomputers for Information Management_, vol. 6, no. 1 (March,
1989): pp. 33-45.
     [From the abstract] "This paper discusses the differences between
     security and privacy, adn then describes several data security
     categories, such as physical protection of storage media,
     hardware-based system access control devices, DOS-level access
     control, function-specific password protection, and data
     encryption.

"Unshielded Terminals Can Knock Out Security," _Library Journal_, vol.
110 (March 1, 1985): p. 30.

"Viruses: No Small Pox" _OCLC Micro_, vol. 5, no. 1 (Feb. 1989): pp. 17,
28.
     Introduction to viruses and preventative measures, written for
     novices.  Includes references to general computer virus literature.