Monitoring information systems to enforce computer security policies
By: by Scott W. Graham, Stephen E. Mills
Contributors: Mills, Stephen E.
Publisher: Naval Postgraduate School; Available from National Technical Information Service
Published: 1999
Place of publication: Monterey, Calif; Springfield, Va
Language: eng
Number of pages: 126
Description: Many computer security policies are written relatively vaguely. In many ways this is intentional to allow for easier access to all the functionality of the computer network. However, too much leeway allows users, without a need to access many of the network functions, the ability to execute functions that might cause harm to the system or provide access to information they have no need to see. With this in mind, this paper takes a look at computer security. We start with a brief history of computer security and continue with a look at internal security. Since our focus is on computer misuse and detection, a look at internal security provides a look at the reasons why we should attempt to monitor the activities of users. Misuse detection requires at least two features. These are audit reduction and profiling ability. When audit features are enabled in the operating system, massive files can build up. By establishing profiles of personnel usage, the automated audit features can quickly scan audit files, look for usage that falls outside what is determined to be normal, notify administrators, and delete old audit data. A misuse detection system, such as the Computer Misuse Detection System marketed by ODS Networks, may be implemented and incorporated into a comprehensive security policy.
Notes: "September 1999"

Thesis advisor(s): Vicente Garcia.

Thesis (M.S. in Systems Engineering) Naval Postgraduate School, September 1999.

Includes bibliographical references (p. 123-124)

Approved for public release; distribution unlimited.

Also available online.

Mode of access: World Wide Web.

System requirements: Adobe Acrobat reader.

US Navy (USN) authors.

dk/dk cc:9116 02/09/00