John Mccumber

Assessing and Managing Security Risk in IT Systems (eBook, PDF)

A Structured Methodology

• Format: PDF

Produktbeschreibung

This book begins with an overview of information systems security, offering the basic underpinnings of information security and concluding with an analysis of risk management. Part II describes the McCumber Cube, providing the original paper from 1991 and detailing ways to accurately map information flow in computer and telecom systems. It also explains how to apply the methodology to individual system components and subsystems. Part III serves as a resource for analysts and security practitioners who want access to more detailed information on technical vulnerabilities and risk assessment analytics. McCumber details how information extracted from this resource can be applied to his assessment processes.

---

Dieser Download kann aus rechtlichen Gründen nur mit Rechnungsadresse in A, B, BG, CY, CZ, D, DK, EW, E, FIN, F, GR, HR, H, IRL, I, LT, L, LR, M, NL, PL, P, R, S, SLO, SK ausgeliefert werden.

Produktdetails

• Verlag: Taylor & Francis
• Seitenzahl: 288
• Erscheinungstermin: 12. August 2004
• Englisch
• ISBN-13: 9780203490426
• Artikelnr.: 38163634

Autorenporträt

John McCumber

Inhaltsangabe

SECURITY CONCEPTS. Using models. Defining information security. Information
as an asset. Understanding threat and its relation to vulnerabilities.
Assessing risk variables: The risk assessment process. THE MCCUMBER CUBE
METHODOLOGY. The McCumber Cube. Determining information states and mapping
information flow. Decomposing the cube for security enforcement.
Information state analysis for components and subsystems. Managing the
security life cycle. Safeguard analysis. Practical applications of McCumber
Cube Analysis. APPENDICES.