NBS TECHNICAL NOTE 780

Controlled Accessibility

Bibliography

U.S.

MENT

OF

IMERCE

I National

m 1U

of

is

S3

rgo

3
NATIONAL BUREAU OF STANDARDS

The National Bureau of Standards 1 was established by an act of Congress March 3. 1901. The Bureau's o'. era:! goal is to strengthen and advance the Nation's science and technology and facilitate their effective application for public benefit To this end, the Bureau conducts

research and provides: (I) a basis for the Nation's physical measurement system, (2) scientific and technological services for industry and government '3> a technical basis for equity in trade, and (4) technical services to promote public safety. The Bureau consists of the Institute for Basic Standards, the Institute for Materials Research, the Institute for Applied Technology,

the Institute for Computer Sciences and Technology, and the Office for Information Programs.

THE INSTITUTE FOR BASIC STANDARDS provides the central basis within the United

States of a complete and consistent system of physical measurement; coordinates that system

with measurement systems of other nations; and furnishes essential services leading to accurate and uniform physical measurements throughout the Nation's scientific community, industry, and commerce. The Institute consists of a Center for Radiation Research, an Office of Measurement Services and the following divisions: Applied Mathematics — Electricity — Mechanics — Heat — Optical Physics — Nuclear

Sciences 1 — Applied Radiation ; — Quantum Electronics ' — Electromagnetics' — Time

and Frequency — Laboratory' Astrophysics ' — Cryogenics \

THE INSTITUTE FOR MATERIALS RESEARCH conducts materials research leading to improved methods of measurement, standards, and data on the properties of well-characterized

materials needed by industry, commerce, educational institutions, and Government; provides

advisory and research services to other Government agencies; and develops, produces, and

distributes standard reference materials. The Institute consists of the Office of Standard Reference Materials and the following divisions: Analytical Chemistry — Polymers — Metallurgy — Inorganic Materials — Reactor

Radiation — Physical Chemistry.

THE INSTITUTE FOR .APPLIED TECHNOLOGY provides technical services to promote

the use of available technology and to facilitate technological innovation in industry and Government; cooperates with public and private organizations leading to the development of

technological standards (including mandatory safety standards), codes and methods of test; and provides technical advice and services to Government agencies upon request. The Institute consists of a Center for Building Technology and the following divisions and offices: Engineering and Product Standards — Weights and Measures — Invention and Innovation — Product Evaluation Technology — Electronic Technology — Technical Analysis — Measurement Engineering — Structures, Materials, and Life Safety ' — Building

Environment* — Technical Evaluation and Application* — Fire Technology.

THE INSTITUTE FOR COMPUTER SCIENCES .AND TECHNOLOGY conducts research and provides technical services designed to aid Government agencies in improving cost effec- tiveness in the conduct of their programs through the selection, acquisition, and effective utilization of automatic data processing equipment and serves as the principal focus within

the executive branch for the development of Federal standards for automatic data processing

equipment, techniques, and computer languages. The Center consists of the following offices and divisions: Information Processing Standards — Computer Information — Computer Services —

Systems Development — Information Processing Technology.

THE OFFICE FOR LNFORNLA.TION PROGRAMS promotes optimum dissemination and

accessibility of scientific information generated within NBS and other agencies of the Federal Government: promotes the development of the National Standard Reference Data System and

a system of information analysis centers dealing with the broader aspects of the National Measurement System: provides appropriate services to ensure that the NBS staff has optimum

accessibility to the scientific information of the world. The Office consists of the following

organizational units: Office of Standard Reference Data — Office of Technical Information and Publications —

Library — Office of International Relations.

- Headquarters and Laboratories at Ganrtersburg. Maryland, unless otherwise noted; mailing address Washington, D.C. 20234.

1 Part of the Center for Radiation Research.

* Located at Boulder, Colorado 80302.

« Part of the Center for Building Technology.
- ----- 2? STANDARDS

m e 1993

I 00

J 5J}

9'So

*•*

Controlled Accessibility

Bibliography

Susan K. Reed

Systems Development Division

and

Martha M. Gray

Office of Computer Information

Institute for Computer Sciences and Technology

National Bureau of Standards

Washington, D.C. 20234

NBS Technical Notes are designed to supplement the Bureau's regular publications program. They provide a means for making available scientific data that are of

transient or limited interest. Technical Notes may be

listed or referred to in the open literature. >* °F >

U.S. DEPARTMENT OF COMMERCE, Frederick B. Dent, Secretary

NATIONAL BUREAU OF STANDARDS, Richard W. Roberts, Director

Issued June 1973
National Bureau of Standards Technical Note 780

Nat. Bur. Stand. (U.S.), Tech. Note 780, 15 pages (June 1973) CODEN: NBTNAE

For sale by the Superintendent of Documents, U.S. Government Printing Office, Washington, D.C. 20402 (Order by SD Catalog No. C13.46:780). Price $0.35 domestic postpaid or $0.25G.P.O. Bookstore.
CONTROLLED ACCESSIBILITY BIBLIOGRAPHY

Susan K. Reed and Martha M. Gray

A bibliography of 96 references on controlled accessibility has

been compiled. The purpose in compiling this limited bibliography was

to free the effort to solve the problems of controlled accessibility

from domination by discussion of the issues of privacy. Insofar as possible, except when the two subjects are referred to in the same work

or for overriding historical considerations , references dealing with

privacy have not been included.

Key words: Confidentiality; controlled accessibility; data integrity;

data security; security.

1. INTRODUCTION

The purpose in publishing this bibliography on Controlled Accessibility when several fine ones already exist in the field of privacy and

security is to segregate the work on controlled accessibility from the

larger field. Although controlled accessibility is an integral part of

the privacy and security field, it often is not afforded the attention

it deserves as the instrument of accomplishment of the objective be- cause discussion of the entire field tends to hover over the emotionally charged privacy issue instead of coming to grips with the technological problems of providing security for computer based data.

No claim to exhaustiveness is made for this bibliography. The intent is to provide references to readily available material, therefore

classified documents and articles published in journals of limited distribution have been omitted. Omission is not meant to be a commentary

on the value of the work. This bibliography is aimed at those who wish

to move past or avoid the privacy considerations and concentrate on the

methods through which computer technology can protect data from accidental or intentional loss, disclosure or modification.

Because some of the terms basic to the field of privacy and secu- rity have been loosely used in the past to refer to either the privacy

or the security aspects of problems, thus contributing to the confusion

of the issues, it would be well to define some of them here and indicate their relationship to each other. These definitions have been distilled from the works listed.

1
Privacy is a concept which applies to an individual. It is the right of

an individual to decide what information about himself he wishes to

share with others and also what information he is willing to accept

from others; i.e. he is freed from observation by others when he so wishes and he is free to select from the universe the information he

wishes to assimilate unto himself. This concept is in direct conflict

with the present trend toward collecting and storing a large amount of

information about everyone and then using it for a number of different

purposes. The resolution of such matters will have to be achieved

through legal channels and is not within the purview of controlled

accessibility. The privacy issue has not resulted from the development

of computers, but the heightened interest in it can be laid to the capability of computers for storing vast amounts of readily usable data.

Confidentiality is a concept which applies to data. It is the status

accorded to data which has been agreed upon between the person or

organization furnishing the data and the organization receiving it and

which describes the degree of protection which will be provided. It is

the confidentiality of data that requires protection, not the privacy .

Security in the computer community is the realization of protection for

hardware, software and data.

Data security is the protection of data against accidental or intentional destruction, disclosure or modification using both physical

security measures and controlled accessibility.

Physical security , as it pertains to computers, does not differ from

physical security for other installations. It is achieved through the

use of locks , guards , badges , personnel security clearances and administratively controlled measures outside the computer as well as measures

required for the protection of the structures housing the computer and

related equipment against damage from accident, fire and environmental

hazard, thus ensuring the protection of their contents.

Controlled accessibility is the technological measures of hardware

and software available in a computer system for the protection of data.

Data integrity is the guarantee of the organization maintaining data

that it is free from error, i.e. it does not differ from its source

documents, and that it has not been exposed to accidental alteration,

disclosure or destruction.

The authors wish to thank Peter S. Browne of State Farm Mutual

Automobile Insurance Company and Dr. Lance Hoffman of the University of

California, Berkeley, for providing a copy of an unpublished bibliography on privacy and security which they had assembled.
It

2. BIBLIOGRAPHY

1. Anderson, Ronald E. and Ed Fagerlund, "Privacy and the Computer:

An Annotated Bibliography," Computing Reviews , 13:11 (November

1972), p. 551-559.

2. Arden, B. W. , B. A. Galler, T. C. O'Brien and F. H. Westervelt,

"Program and Addressing Structure in a Time-Sharing Environment.

Journal of the Association for Computing Machinery , 13:11

(January 1966), p. 1-16, 4 refs.

3. Babcock, J. D. , "A Brief Description of Privacy Measures in the

RUSH Time-Sharing System," in 1967 Spring Joint Computer Conference . Volume 30 , (Thompson Bocks, Washington, D.C.), 1967,

AFIPS Conference Proceedings, (LC 55-44701), p. 301-302.

4. Baran, Paul, "On Distributed Communications: IX Security, Secrecy

and Tamper-free Considerations," The Rand Corporation, Santa

Monica, California, RM-3765-PR, Contract AF 49(638)-700, August

1964, 39p.

5. Barron, D. W. , A. G. Fraser, D. F. Hartley, B. Landy and R. M.

Needham, "File Handling at Cambridge University," in 1967

Spring Joint CompuTer Conference . Volume 30 , (Thompson Books,

Washington, D. C), 1967, AFIPS Conference Proceedings,

(LC55-44701) , p. 163-167, 3 refs.

6. Bates, William S. , "Security of Computer-Based Information

Systems," Datamation 16:5 (May 1970), p. 60-65.

7. Beardsley, Charles W. "Is Your Computer Insecure," IEKL' Spectrum , 9:1 (January 1972), p. 67-78, 16 refs.

8. Bergart, Jeffrey G. , Marvin Denicoff and David K. Hsiao, "An

Annotated and Cross-Referenced Bibliography on Computer Security

and Access Control in Computer Systems," Ohio State University,

Columbus, Ohio, The Computer and Information Science Research

Center, OSV-CISRC-TR- 72-12, Contract N00014-72-C-0391, November

1972, 57p.

9. Bingham, Harvey W. , "Security Techniques for EDP of Multilevel

Classified Information," Burroughs Corporation, Paoli, Pennsylvania 4424-65-112, RADC-TR-65-415, Task 459404, Contract

AF 30(602)-3596, Project AF-4594, December 1965, 194p.

(AD-476 557)

10. Branstad, Dennis K. , "Privacy and Protection in Operating Systems,"

Computer

,

6:1 (January 1973), p. 43-46.
11. Brown, William F. (Ed.), "AMR's Guide to Computer and Software

Security," AMR International, Inc., New York, 1971, 208p.

12. Browne, Peter S. , "Data Privacy and Integrity: An Overview," in

E. F. Codd and A. L. Dean, 1971 ACM SIGFIDET Workshop . Data

Description, Access and Control , (Association of Computing

-Machinery, New York) , 1971, p. 237-240.

13. Browne, Peter S. and Dennis D. Steinauer, "A Model for Access

Control," in E. F. Codd and A. L. Dean, 1971 ACM SIGFIDET Workshop . Data Description, A+ccess and Control , (Association of

Computing Machinery, New York), 1971, p. 241-262, 11 refs.

14. Carroll, John M. , "Snapshot 1971 - How Canada Organizes Information

About People," in 1972 Fall Joint Computer Conference . Volume

41, Part I , (AFIPS Press, Montvale, New Jersey), 1972, AFIPS

Conference Proceedings, (LC55-44701) , p. 445-452.

15. Carroll, John M. , Robert Martin, Lorine McHardy and Hans Moravac,

"Multi-Dimensional Security Program for a Generalized Information Retrieval System," in 1971 Fall Joint Computer Conference . Volume 39 , (AFIPS Press, Montvale, New Jersey), 1971, AFIPS Conference Proceedings, (LC55-44701) , p. 571-577, 5 refs.

16. Carroll, John M. and P. M. McLelland, "Fast 'Infinite-Key' Privacy

Transformation for Resource-Sharing Systems," in 1970 Fall Joint

Computer Conference. Volume 37 , (AFIPS Press, Montvale, New

Jersey), 1970, AFIPS Conference Proceedings , (LC55-44701)

,

p. 223-230, 12 refs.

17. Codd, E. F. and A. L. Dean, "1971 ACM SIGFIDET Workshop. Data

Description, Access and Control," (San Diego, California,

November 11-12, 1971), Association of Computing Machinery, New

York, 1971, 372p.

18. Coffman, Edward G. , Jr. and Leonard Kleinrock, "Computer Scheduling Methods and Their Countermeasures , " in 1968 Spring Joint

Computer Conference . Volume 32 , (Thompson Book Company, Washington, D. C), 1968, AFIPS Conference Proceedings, (LC55-44701)

,

p. 11-22, 29 refs.

19. Comber, Edward V'. , "Management of Confidential Information," in

1969 Fall Joint Computer Conference . Volume 35 , (AFIPS Press,

Montvale, New Jersey), 1969, AFIPS Conference Proceedings,

(LC55-44701), p. 135-143, 7 refs.

20. "The Computer and Privacy. Federal Data Banks, Computer, and the

Bill of Rights... and Senator Ervin's Spectre of the 'Dossier

Age'." Automatic Data Processing Newsletter , XVI: 6 (March 20,

1972), p. 1-4.
21. Conway, Richard W. , William L. Maxwell and Howard L. Morgan, "On

the Implementation of Security Measures in Information Systems,"

Communications of the ACM , 15:4 (April 1972), p. 211-220,

19 refs.

22. Conway, Richard W. , William L. Maxwell and Howard L. Morgan,

"Selective Security Capabilities in ASAP-A File Management

System," in 1972 Spring Joint Computer Conference . Volume 40 , (AFIPS Press, Montvale, New Jersey), 1972, AFIPS Conference

Proceedings, (LC55-44701) , p. 1181-1185, 9 refs.

23. Courtney, Robert H. , "Data Security and Privacy," in Louise Schultz

(Ed. ), The Information Bazaar . Sixth Annual National Colloquium on Information Retrieval . (Medical Documentation Service,

The College of Physicians of Philadelphia, Philadelphia, Pennsylvania), 1969, p. 9-14.

24. Daley, R. C. and P. G. Neumann, "A General-Purpose File System for

Secondary Storage," in 1965 Fall Joint Computer Conference . Volume 27 , Part I , (Spartan Books, Washington, D. C), 1965,

AFIPS Conference Proceedings, (LC55-44701) , p. 213-229, 10 refs.

25. "Data Security in the CDB," EDP Analyzer , 8:5 (May 1970), p. 1-14,

13 refs.

26. Dean, Albert L. , Jr. , "Data Privacy and Integrity Requirements for

Online Data Management Systems," in E. F. Codd and A. L. Dean,

1971 ACM SIGFIDET Workshop . Data Description Access and Control , (Association of Computing Machinery, New York), 1971, p. 279-298,

4 refs.

27. Dennis, Jack B. , "Segmentation and The Design of Multiprogrammed

Computer Systems," Journal of the Association for Computing

Machinery , 12:4 (October 1965), p. 589-602, 10 refs.

28. Dennis, Jack B. and Van Horn, E. C. , "Programming Semantics for

Multi-programmed Computations," Communications of the ACM , 9:3

(March 1966), p. 143-155.

29. Dennis, Robert L. , "Security in the Computer Environment," System

Development Corporation, Santa Monica, California, SP 2440/000/

01, August 18, 1966, 31p. (AD 640 648)

30. Denning, Peter J., "Third Generation Computer Systems," Computing

Surveys , 3:4 (December 1971), p. 175-216, 87 refs.

31. Evans, David C. , and Jean Yves LeClera, "Address Mapping and the

Control of Access in an Interactive Computer," in 1967 Spring

Joint Computer Conference . Volume 30 . (Thompson Book Company,

Washington , D. C), 1967, AFIPS Conference Proceedings

,

(LC 55-44701), p. 23-32.

5
32. Friedman, T. D. , "The Authorization Problem in Shared Files," IBM

Systems Journal , 9:4 (1970), p. 258-280, 18 refs.

33. Gaines, R. Stockton, "An Operating System Based on the Concept of

a Supervisory Computer," Communications of the ACM , 15:3 (March

1972), p. 150-156, 5 refs.

34. Garrison, William A. , and C. V. Ramamoorthy, "Privacy and Security

in Data Banks," Texas University, Austin, Electronics Research

Center, Report Number TM-24, Grant AF-AFOSR-1792-69, Project

AF-4751, AFOSR-70-2628TR, November 2, 1970, 120p. (AD 718 406)

35. Girsdansky, M. B. , "Cryptology, The Computer and Data Privacy,"

Computers and Automation , 21:4 (April 1972), p. 12-19, 6 refs.

36. Girsdansky, M. B. , "Data Privacy. Cryptology and the Computer at

IBM Research," IBM Research Reports 7:4(1971), p. 1-12, 6 refs.

37. Glaser, Edward L. , "A Brief Description of Privacy Measures in the

Multics Operating System," in 1967 Spring Joint Computer Conference . Volume 30 . (Thompson Book Company, Washington, D. C. ).

1967, AFIPS Conference Proceedings, (LC 55-44701), p. 303-304.

38. Graham, G. Scott and Peter J. Denning, "Protection-Principles and

Practice," in 1972 Spring Joint Computer Conference . Volume 40 , (AFIPS Press, Montvale, New Jersey), 1972, AFIPS Conference Proceedings, (LC 55-44701), p. 417-429, 20 refs.

39. Graham, Robert M. , "Protection in an Information Processing Utility," Communications of the ACM, 11:5 (May 1968), p. 365-369,

2 refs.

40. Hansen, Morris H. , "Insuring Confidentiality of Individual Records

in Data Storage and Retrieval for Statistical Purposes," in 1971

Fall Joint Computer Conference . Volume 39 , (AFIPS Press,

Montvale, New Jersey), 1971, AFIPS Conference Proceedings,

(LC 55-44701), p. 579-585, 12 refs.

41. Harrison, Annette, "The Problem of Privacy in the Computer Age:

An Annotated Bibliography. Volume I," The Rand Corporation,

Santa Monica, California, RM-5495-PR/RC, Contract F44620-67-C0045, December 1967, 12 5p.

42. Harrison, Annette, "The Problem of Privacy in the Computer Age:

An Annotated Bibliography. Volume II," The Rand Corporation,

Santa Monica, California, RM-5495/1-PR/RC, Contract F44620-67-

C-0045, December 1969, 148p.
43. Hawkins, David H. , "How Safe is your Software? Deliberate Fraud

and Unintentional Error Can Be Avoided if Security Routines are Part of your System," Computer Decisions , 4:6 (June 1972), p. 18-

20, 3 refs.

' "'

44. Hirchfield, Richard A. , "Security in On-line Systems - A Primer for

Management," Computers and Automation , 20:9 (September 1971,

p. 15-17, 25.

45. Hoffman, Lance J., "Computers and Privacy: A Survey," Computing

Surveys , 1:2 (June 1969), p. 85-103, 69 refs.

46. Hoffman, Lance J., "Formulary Model for Access Control and Privacy

in Computer Systems," Stanford Linear Accelerator Center, California, Report 117, 1970, 88p.

47. Hoffman, Lance J. , "The Formulary Model for Flexible Privacy and

Access Controls," in 1971 Fall Joint Computer Conference.

Volume 39 , (AFIPS Press, Montvale, New Jersey), 1971, AFIPS Conference Proceedings, (LC 55-44701), p. 587-601, 33 refs.

48. Hsiao, David K. , "Access Control in an On-line File System," in

File Organization: Selected Papers from File 68 - An I.A.G. Conference , Swets and Zeitlinger, Amsterdam (Netherlands), IFIP

Administrative Data Processing Group, (Denmark), 1969, Occasional Publication 3, p. 246-257, 3 refs.

49. Hughes Aircraft Company, "Security of the TACC Data Base Study

(Description of Automatic Data Base Security Techniques, Volume

I," Fullerton, California, Ground Systems Group, Contract

F19628-70-C-0185, ESD-TR-71-370-Vol-1, October 1971, 149p.

(AD-735 728.)

50. Hughes Aircraft Company, "Analysis of Data Base Security and

Access Limitation Requirements for the Post 1975 Automated TACC

Complex (Tabulation of TACC Secure Data), Volume II," Fullerton,

California, Ground Systems Group, Contract F19628-70-C-0185,

ESD-TR-71-370-Vol-2, October 1971, 342p. (AD-735 729)

51. Hughes Aircraft Company, "Analysis of Data Base Security and Access

Limitation Requirement for the Post 1975 Automated TACC Complex

(Analysis of TACC Secure Data). Volume III," Fullerton, California, Ground Systems Group, Contract F19628-70-C-0185, ESD-TR71-370-Vol-3, October 1971, 168p. (AD-735 730)

52. Hughes Aircraft Company, "Analysis of Data Base Security and Access

Limitation Requirements for the Post 1975 Automated TACC Complex

(Tabulation of TACC Secure Data Accesses). Volume IV," Fullerton^

California, Ground Systems Group Contract F19628-70-C-0185, ESDTR-71-370-VOL-4, October 1971, 366p. (AD-735 731)
53. Hughes Aircraft Company, "Analysis of Data Base Security and Access

Limitation Requirements for the Post A75 Automated TACC Complex

(Analysis of TACC Secure Data Accesses). Volume 5," Pullerton,

California, Ground Systems Group, Contract F19628-70-C-0185,

ESD-TR-71-370-VOL-5, October 1971, 93p. (AD-735 732)

54. International Business Machine Corporation, "The Considerations of

Data Security in a Computer Environment," White Plains, New York,

36p. 24 refs.

55. International Business Machines Corporation, "The Considerations

of Physical Security in a Computer Environment," White Plains,

New York, October 1972, 37p. , 16 refs.

56. Kennedy, J. D. , "The Data Sentinel Computer Security System - A

Practical Answer to Data Security," Installation Management

Review, 1:3 (July 1972) , p. 7-10.

57. Kjeldaas, Per M. , "Security in Software," IAG Journal , 2:4 (1969),

p. 25-36.

58. Kraning, Alan, "Wanted: New Ethics for New Techniques," Technology

Review , March 1970, p. 40-45, 6 refs.

'""""" -~-~-

59. Lampson, Butler W. , "A Scheduling Philosophy for Multiprocessing

Systems," Communications of the ACM , 11: 5 (May 1968), p. 347-360,

6 refs.

60. Lampson, B. W. , "Dynamic Protection Structures," in 1969 Fall Joint

Computer Conference. Volume 35 , (AFIPS Press, Montvale, New

Jersey), 1969, AFIPS Conference Proceedings, (LC 55-44701),

p. 27-38, 6 refs.

61. Linde, R. R. , C. Weissman and C. E. Fox, "The ADEPT- 50 Time-Sharing

System," in 1969 Fall Joint Computer Conference . Volume 35 , (AFIPS Press, Montvale, New Jersey), 1969, AFIPS Conference Proceedings, (LC 55-44701), p. 39-50, 21 refs.

62. Lytle, Donald M. , Jr., "Security and Privacy," in Martin L. Rubin

(Ed.), Handbook of Data Processing Management . Volume 5 . Advanced Technology - Systems Concepts , (Auerbach Publishers,

Princeton, New Jersey), 1971, p. 73-8 6

.

63. McKeeman, W. M. , "Data Protection by Self-Aware Computing Systems,"

the University of California, Santa Cruz, Computer Evolution Project, Volume 2, Number 6, NASA-CR-117126, Contract NGR-05-061-005,

June 1970, 8p. (N71-19599)
64. Molho, Lee M. , "Hardware Aspects of Secure Computing," in 1970

Spring Joint Computer Conference . Volume 36 , (AFIPS Press, Montvale, New Jersey), 1970, AFIPS Conference Proceedings

(LC 55-44701), p. 135-141, 7 refs.

65. Needham, R. M. , "Protection Systems and Protection Implementations"

in 1972 Fall Joint Computer Conference . Volume 41, Part I , (AFIPS Press, Montvale, New Jersey), 1972, AFIPS Conference Proceedings, (LC 55-44701), p. 571-578, 2 refs.

66. Owens, Richard C. , Jr., " Evaluation of Access Authorization Characteristics of Derived Data Sets," in E. F. Codd and A. L. Dean,

1971 ACM SI6FIDET Workshop . Data Description Access and Control, (Association of Computing Machinery, New York), 1971,

p7~263-278, 9 refs.

67. Owens, Richard C. , Jr., "Primary Access Control in Large-Scale

Time-Shared Decision Systems," Massachusetts Institute of Technology, Cambridge, Project MAC, July 1971, MIT-MAC TR-89, ONR

N00014-69-A-0276-0002, 92p. , 33 refs.

68. Peck, P. L. , "Survey of Applicable Safeguards for Insuring the Integrity of Information in the Data Processing Environment," Mitre

Corporation, Bedford, Massachusetts, June 1971, 32p. (AD-726571)

69. Peters, Bernard, "Security Consideration in a Multi-Programmed Computer System," in 1967 Spring Joint Computer Conference . Volume

30 , (Thompson Book Company, Washington, D.C.), 1967, AFIPS Conference Proceedings, (LC 55-44701), p. 283-286.

70. Petersen, H. E. and R. Turn, "System Implications of Information

Privacy," in 1967 Spring Joint Computer Conference . Volume 30 , (Thompson Books, Washington, D.C.), 1967, AFIPS Conference Proceedings, (LC 55-44701), p. 291-300, 14 refs.

71. Project SEARCH Staff, "Security and Privacy Considerations in

Criminal History Information Systems," Sacramento, California,

Committee on Security and Privacy, Technical Report No. 2, July

1970, 57p.

72. Purser, W. F. C. , "Software Protection in Multi-Programming on Small Computers," Management Informatics , 1:5 (October 1972),

p. 203-210, 8 refs.

73. Repton, C. S. , "Reliability Assurance for System 250 - A Reliable,

Real-Time Control System," in Stanley Winkler (Ed.), Computer

Communication: Impacts and Implications . The First International Conference on Computer Communication , 1972, p. 297-305, 3 refs.
74. Roder, John and A. Frederick Rosene, "Memory Protection in Multiprocessing Systems," IEEE Transactions on Electronic Computers , EC-16:3 (June 1967), p. 300-326, 7 refs.

75. Rothman, Stanley, "The Protection of Privacy and Security in

Criminal Offender Record Information Systems," in 1972 Fall

Joint Computer Conference . Volume 41, Part I , (AFIPS Press,

Montvale , New Jers ey)

, 1972, AFIPS Conference Proceedings,

(LC 55-44701), p. 423-424.

76. Scharf, Tom, "Weighted Ranking by Levels," IAG Journal, 2:4 (1969),

p. 7-22.

77., Schroeder, Michael D. and Jerome H. Saltzer, "A Hardware Architecture for Implementing Protection Rings," Communications of

the ACM , 15:3 (March 1972), p. 157-170, 17 refs.

78. Shoshani, A. and A. J. Bernstein, "Synchronization in a ParallelAccessed Data Base," Communications of the ACM , 12:11 (November

1969), p. 604-607, 6 refs.

79. Skatrud, R. 0. , "A Consideration of the Application of Cryptographic Techniques to Data Processing," in 1969 Fall Joint Computer Conference . Volume 35 , (AFIPS Press, Montvale, New

Jersey), 1969, AFIPS Conference Proceedings, (LC 55-44701),

p. 111-117, 3 refs.

80. Stone, M. G. , "TERPS - File Independent Enquiries," The Computer

Bulletin , 11:4 (March 1968) , p. 286-290. '" "" "

81. Turn, Rein and Norman Z. Shapiro, "Privacy and Security in Databank Systems - Measures of Effectiveness , Costs , and ProtectorIntruder Interactions," in 1972 Fall Joint Computer Conference . Volume 41, Part I , (AFIPS Press, Montvale, New Jersey), 1972,

AFIPS Conference Proceedings, (LC 55-44701), p. 435-444, 26 refs,

82. Turn, Rein and H. E. Petersen, "Security of Computerized Information Systems," the Rand Corporation, Santa Monica, California,

Report Number, p. 4405, July 1970, 9p. (AD-709 366)

83. U. S. Congress House. Committee on Government Operations, "Thirtyfifth Report by the Committee on Government Operations ... on

Privacy and the National Data Bank Concept," 90th Congress, 2d

Session, House Report No. 1842, August 2, 1968, 34p.

84. U. S. Congress Senate. Committee on the Judiciary. "Hearings

Before the Subcommittee on Constitutional Rights ... on Federal

Data Banks, Computers and The Bill of Rights," 92nd Congress,

1st Session, Part I, February 23, 24, and 25, and March 2, 3, 4,

9, 10, 11, 15 and 17, 1971, 1045p.

10
85. U. S. Congress Senate. Committee on the Judiciary, "Hearings

Before The Subcommittee on Constitutional Rights . . on Federal

Data Banks, Computers and The Bill of Rights," 92nd Congress,

1st Session, Part II, February 23, 24, and 25, and March 2,3,

4, 9, 10, 11, 15 and 17, 1971, 1117p.

86. Vanderbilt, D. H. , "Controlled Information Sharing in a Computer

Utility," Massachusetts Institute of Technology, Cambridge,

Massachusetts, MIT Project MAC, Report MAC-TR-67, October 24,

1969, 172p., 14 refs.

87. Van Tassel, Dennie, "Crytographic Techniques for Computers," in

1969 Spring Joint Computer Conference . Volume 34 , (AFIPS Press,

Montvale, New Jersey), 1969, AFIPS Conference Proceedings,

(LC 55-44701), p. 367-372, 4 refs.

88. Van Tassel, Dennie, "Cryptographic Techniques for Computers: Substitution Methods," Information Storage and Retrieval , 6:2

(June 1970), p. 241-249, 4 refs.

89. Vogt, Carla, "Making Computerized Knowledge Safe for People,"

Technology Review , 72:5 (March 1970), p. 33-39, 3 refs.

90. "Voiceprint Concept Supported by Government-Sponsored Tests,"

Communications of the ACM, 14:6 (June 1971), p. 434-435.

91. Ware, Willis H. , "Computer Data Banks and Security Controls,"

Rand Corporation, Santa Monica, California, (paper presented at

the Toronto Conference), May 1970, 12p.

92. Ware, Willis H. , "Security and Privacy in Computer Systems," in

1967 Spring Joint Computer Conference . Volume 30 , (Thompson

Books, Washington, D. C. ), 1967, AFIPS Conference Proceedings,

(LC 55-44701), p. 279-282.

93. Ware, Willis H. , "Security and Privacy: Similarities and Differences," in 1967 Spring Joint Computer Conference . Volume 30 , (Thompson Books, Washington, D.C. ), 1967, AFIPS Conference Proceedings, (LC 55-44701), p. 287-290.

94. Wasserman, Joseph J. , "Plugging the Leaks in Computer Security,"

Harvard Business Review (September-October 1969), p. 119-129.

95. Weissman, Clark, "Security Controls in the ADEFT-50 Time-Sharing

System," in 1969 Fall Joint Computer Conference . Volume 35 , (AFIPS Press, Montvale, New Jersey), 1969, AFIPS Conference Proceedings, (LC 55-44701), p. 119-133, 20 refs.

96. Witzer, Harold, "Computer. Security Bibliography," AVCO Computer

Services, Wilmington, Massachusetts, Second Revision, January

1971, 78p.

* U. S. GOVERNMENT PRINTING OFFICE : 1 973 —51 1 -326/273 11

.FORM NBS-114A (1-71) 2. Gov't Accession No.

U.S. DEPT. OF COMM. BIBLIOGRAPHIC DATA

SHEET

1. PUBLICATION OR REPORT NO.

NBS TN-780

3. Recipient's Accession No.

4. TITLE AND SUBTITLE 5. Publication Date June 1973

Controlled Accessibility Bibliography 6. Performing Organization Code

7. AUTHOR(S)

Susan K. Reed and Martha M. Gray

8. Performing Organization

10. Project/Task/ Work Unit No. fiun-M 1 9

9. PERFORMING ORGANIZATION NAME AND ADDRESS

NATIONAL BUREAU OF STANDARDS

DEPARTMENT OF COMMERCE

WASHINGTON, D.C. 20234

11. Contract/Grant No.

12. Sponsoring Organization Name and Address

Same as No. 9 above.

13. Type of Report & Period Covered

Final

14. Sponsoring Agency Code

15. SUPPLEMENTARY NOTES

16. ABSTRACT (A 200-word or less factual summary of most significant information. If document includes a significant

bibliography or literature survey, mention it here.)

A bibliography of 96 references on controlled accessibility has been

compiled. The purpose in compiling this limited bibliography was to free

the effort to solve the problems of controlled accessibility from domination

by discussion of the issues of privacy. Insofar as possible, except when the

two subjects are referred to in the same work or for overriding historical

considerations, references dealing with privacy have not been included.

17. KEY WORDS (Alphabetical order, separated by semicolons)

Confidentiality; controlled accessibility; data integrity; data security; security,

18. AVAILABILITY STATEMENT

fX] UNLIMITED.

I I FOR OFFICIAL DISTRIBUTION. DO NOT RELEASE

TO NTIS.

19. SECURITY CLASS

(THIS REPORT)

UNCLASSIFIED

20. SECURITY CLASS

(THIS PAGE)

UNCLASSIFIED

21. NO. OF PAGES

15

22. Price

$.35 Domestic postpaid

$.25 G.P.O. Bookstore

USCOMM-DC 66244-P71

NBS TECHNICAL PUBLICATIONS

PERIODICALS JOURNAL OF RESEARCH reports National Bureau of Standards research and development in

physics, mathematics, and chemistry. Comprehensive

scientific papers give complete details of the work,

including laboratory data, experimental procedures,

and theoretical and mathematical analyses. Illustrated with photographs, drawings, and charts. Includes

listings of other NBS papers as issued.

Published in two sections, available separately:

• Physics and Chemistry (Section A)

Papers of interest primarily to scientists working in these fields. This section covers a broad range of physical and chemical research, with major emphasis on standards of physical measurement, fundamental

constants, and properties of matter. Issued six times a year. Annual subscription: Domestic, $17.00; Foreign, $21.25.

• Mathematical Sciences (Section B)

Studies and compilations designed mainly for the mathematician and theoretical physicist. Topics in mathematical statistics, theory of experiment design,

numerical analysis, theoretical physics and chemistry,

logical design and programming of computers and

computer systems. Short numerical tables. Issued quarterly. Annual subscription: Domestic, $9.00; Foreign,

$11.25.

TECHNICAL NEWS BULLETIN

The best single source of information concerning the Bureau's measurement, research, developmental, co- operative, and publication activities, this monthly

publication is designed for the industry-oriented individual whose daily work involves intimate contact with science and technology

for engineers, chemists,

physicists, research managers, product-development

managers, and company executives. Includes listing of

all NBS papers as issued. Annual subscription: Domestic, $6.50; Foreign, $8.25.

^PERIODICALS

Applied Mathematics Series. Mathematical tables, manuals, and studies. Building Science Series. Research results, test methods, and performance criteria of building materials, components, systems, and structures. Handbooks. Recommended codes of engineering

and industrial practice (including safety codes) de- veloped in cooperation with interested industries,

professional organizations, and regulatory bodies. Special Publications. Proceedings of NBS conferences, bibliographies, annual reports, wall charts, pamphlets, etc. Monographs. Major contributions to the technical

literature on various subjects related to the Bureau's

scientific and technical activities. National Standard Reference Data Series.

NSRDS provides quantitative data on the physical

and chemical properties of materials, compiled from

the world's literature and critically evaluated. Product Standards. Provide requirements for sizes, types, quality, and methods for testing various industrial products. , These standards are developed co- operatively with interested Government and industry groups and provide the basis for common understanding of product characteristics for both buyers and

sellers. Their use is voluntary.

Technical Notes. This series consists of communications and reports (covering both other-agency and

NBS-sponsored work) of limited or transitory interest. Federal Information Processing Standards

Publications. This series is the official publication

within the Federal Government for information on

standards adopted and promulgated under the Public Law 89—306, and Bureau of the Budget Circular A—86

entitled, Standardization of Data Elements and Codes

in Data Systems.

Consumer Information Series. Practical information, based on NBS research and experience, covering areas of interest to the consumer. Easily understandable language and illustrations provide useful background knowledge for shopping in today's tech- nological marketplace.

BIBLIOGRAPHIC SUBSCRIPTION SERVICES

The following current-awareness and literature-survey bibliographies are issued periodically by the Bureau

:

Cryogenic Data Center Current Awareness Service (Publications and Reports of Interest in Cryogenics).

A literature survey issued weekly. Annual subscription : Domestic, $20.00; foreign, $25.00.

Liquefied Natural Gas. A literature survey issued quarterly. Annual subscription: $20.00. Superconducting Devices and Materials. A literature survey issued quarterly. Annual subscription : $20.00. Send subscription orders and remittances for the preceding bibliographic services to the U.S. Department

of Commerce, National Technical Information Service, Springfield, Va. 22151. Electromagnetic Metrology Current Awareness Service (Abstracts of Selected Articles on Measurement

Techniques and Standards of Electromagnetic Quantities from D-C to Millimeter-Wave Frequencies). Issued monthly. Annual subscription: $100.00 (Special rates for multi-subscriptions). Send subscription order and

remittance to the Electromagnetic Metrology Information Center, Electromagnetics Division, National Bureau

of Standards, Boulder, Colo. 80302. Order NBS publications (except Bibliographic Subscription Services)

from: Superintendent of Documents, Government Printing Office, Washington, D.C. 20402.
U.S. DEPARTMENT OF COMMERCE

National Bureau of Standards

Washington. D.C. 20234

OFFICIAL BUSINESS

Penalty for Private Use. $300

POSTAGE AND FEES PAID

U.S. DEPARTMENT OF COMMERCE COM-215