162 lines
6.6 KiB
Plaintext
162 lines
6.6 KiB
Plaintext
NCSL BULLETIN
|
||
SEPTEMBER, 1990
|
||
|
||
|
||
BIBLIOGRAPHY OF COMPUTER SECURITY GLOSSARIES
|
||
|
||
Many computer security glossaries and dictionaries have been
|
||
published since 1976, when NIST issued Federal Information
|
||
Processing Standards Publication (FIPS PUB) 39, "Glossary for
|
||
Computer Systems Security." Recognizing the need to update FIPS
|
||
PUB 39 and taking advantage of the variety of good glossaries
|
||
that are now available from federal government agencies,
|
||
industry, standards-making bodies, and other organizations within
|
||
the computer security community, NIST has compiled a bibliography
|
||
of selected material instead of developing another glossary.
|
||
|
||
This compilation includes work developed by the Department of
|
||
Defense (DoD), the American National Standards Institute (ANSI)
|
||
Accredited Standards Committee X3K5, and private sector
|
||
organizations. The bibliography includes glossaries that cover a
|
||
broad spectrum of computer security terminology and concepts.
|
||
The terms defined reflect those commonly used, as well as current
|
||
specialized terminology and acronyms. Some are amplified by
|
||
illustrations.
|
||
|
||
The bibliography will assist the security practitioner in
|
||
becoming familiar with a variety of glossaries, many of which
|
||
point to other reference sources. The bibliography is arranged
|
||
in alphabetical order by title, indicating the author or work of
|
||
an organization and a brief narrative by which the reader may
|
||
select the most appropriate glossary.
|
||
|
||
|
||
|
||
"Computer Security Terms, Abbreviations, and Acronyms"
|
||
|
||
AFSSM 5000, Department of the Air Force, Air Force Systems
|
||
Security Memoranda, July 31, 1989 (Draft). This glossary
|
||
will be released in 1991.
|
||
|
||
This 84-page glossary was developed for the U.S. Air Force.
|
||
Many of its terms and definitions are consistent with those
|
||
in use in other defense and civilian federal government
|
||
agencies.
|
||
|
||
|
||
|
||
"Data & Computer Security - Dictionary of Standards Concepts and
|
||
Terms"
|
||
|
||
Dennis Longley and Michael Shain, Macmillan Publishers Ltd.,
|
||
1987. Order copies from CRC Press, Inc., 2000 Corporate
|
||
Blvd., N.W., Boca Raton, FL 33431.
|
||
|
||
This document contains 376 pages and approximately 4,000
|
||
terms. The dictionary provides in-depth definitions and
|
||
descriptions of computer security terms and concepts.
|
||
Extensive cross-referencing of terms allows users to compare
|
||
or contrast terms and definitions. The many illustrations,
|
||
models, and diagrams further assist users in understanding
|
||
more complex computer security concepts. The dictionary
|
||
provides multiple definitions for most of its terms.
|
||
|
||
|
||
|
||
"Datapro Reports on Information Security"
|
||
|
||
McGraw-Hill, Datapro Research, October 1989. Send
|
||
subscription requests to McGraw-Hill, Datapro Research,
|
||
Delran, NJ 08075.
|
||
|
||
This glossary contains over 1,000 terms and definitions.
|
||
Although developed by a private sector organization, the
|
||
publication contains many terms and definitions that are
|
||
consistent with those used throughout federal government
|
||
agencies.
|
||
|
||
|
||
|
||
"Glossary of Computer Security Terminology"
|
||
|
||
National Telecommunications and Information Systems Security
|
||
Committee (NTISSC), September 11, 1987. When the draft is
|
||
finalized, the document will be available through the
|
||
Superintendent of Documents, U.S. Government Printing
|
||
Office, Washington, DC 20402.
|
||
|
||
This 125-page draft glossary is composed largely of terms
|
||
and definitions taken from official documents of U.S.
|
||
government departments and agencies, although some
|
||
definitions have been provided by private sector
|
||
organizations. The glossary contains multiple definitions
|
||
for most of its terms.
|
||
|
||
|
||
|
||
"Glossary of Computer Security Terminology"
|
||
|
||
Douglass L. Mansur (work performed under the auspices of the
|
||
U.S. Department of Energy by the Lawrence Livermore National
|
||
Laboratory under Contract No. W-7405-Eng-48) and Maj. Mary
|
||
C. Curtis, U.S. Air Force, HQ/SCTT. Requests for copies
|
||
should be sent to Douglass L. Mansur, Lawrence Livermore
|
||
National Laboratory, L-303, P.O. Box 808, Livermore, CA
|
||
94550.
|
||
|
||
This glossary contains approximately 750 computer security
|
||
terms. Its definitions are taken from official documents of
|
||
departments and agencies of the U.S. government as well as
|
||
private sector organizations. The glossary contains
|
||
multiple definitions for most of its terms.
|
||
|
||
|
||
|
||
"Glossary of Computer Security Terms"
|
||
|
||
NCSC-TG-004, Version-1, October 21, 1988, National Computer
|
||
Security Center (NCSC). Copies may be ordered from the
|
||
Superintendent of Documents, Congressional Sales Office,
|
||
U.S. Government Printing Office, Washington, DC 20402.
|
||
|
||
This glossary contains approximately 300 terms and
|
||
definitions and is issued by the National Computer Security
|
||
Center. It is intended for use by U.S. government agencies
|
||
or contractors that apply the criteria of DoD Directive
|
||
5200.28-STD, "DoD Trusted Computer System Evaluation
|
||
Criteria" in the use of their computer systems.
|
||
|
||
|
||
|
||
"Supplement A: Computer Security - Results of 179th Meeting,
|
||
March 16, 1990"
|
||
|
||
ANSI Accredited Standards Committee X3K5, Computer Security
|
||
Supplement (Draft) to the American National Standard
|
||
Dictionary for Information Systems.
|
||
|
||
This document, currently in draft, contains brief
|
||
definitions of approximately 250 computer security terms.
|
||
The ANSI Accredited Standards Committee X3K5 has yet to
|
||
decide if the document will be published separately or will
|
||
be included in the "American National Dictionary for
|
||
Information Processing Systems."
|
||
|
||
|
||
|
||
"Tutorial - Computer and Network Security"
|
||
|
||
Marshall D. Abrams and Harold J. Podell, IEEE Computer
|
||
Society Order Number 756, Library of Congress Number 86-
|
||
46217, IEEE Catalog Number EH0255-0, ISBN 0-8186-0756-4,
|
||
published by IEEE Computer Society Press. Copies can be
|
||
ordered from the IEEE Computer Society, P.O. Box 80452,
|
||
Worldway Postal Center, Los Angeles, CA 90080.
|
||
|
||
This brief glossary is in the form of an index to a tutorial
|
||
and provides definitions for approximately 250 network and
|
||
computer security terms. The glossary addresses civil
|
||
government, military (unclassified but sensitive), and
|
||
private sector use of computer security terminology. The
|
||
glossary contains multiple definitions for some of its
|
||
terms. |