Open Source Systems Security Certification

✍ Scribed by Ernesto Damiani, Claudio Agostino Ardagna, Nabil El Ioini (auth.)

• Publisher: Springer US
• Year: 2009
• Tongue: English
• Leaves: 212
• Edition: 1
• Category: Library

✦ Synopsis

Open Source Systems Security Certification provides an introduction to the notion of the Security Certification, including test-based and model-based approaches to the certification of software products. Several Security Certification standards are presented, including the international standard for the certification of IT products Common Criteria (ISO/IEC 15408) (CC 2006), a certification officially adopted by the governments of 18 nations.

This book discusses Security Certification as a way to foster adoption and deployment of Open Source Software (OSS) in security-sensible markets, such as telecommunications, government and the military. Scientific and technical issues of OSS security certification are highlighted through case studies.

This volume is designed for professionals and companies trying to implement an Open Source Systems (OSS) aware IT governance strategy, and SMEs looking for ways to use OSS in order to enter new security-conscious markets traditionally held by proprietary products. This book is also suitable for researchers and advanced-level students interested in OSS development, deployment and adoption issues.

✦ Table of Contents

Front Matter....Pages 1-16
Introduction....Pages 1-13
Basic Notions on Access Control....Pages 1-11
Test based security certifications....Pages 1-35
Formal methods for software verification....Pages 1-26
OSS security certification....Pages 1-36
Case Study 1: Linux certification....Pages 1-30
Case Study 2: ICSA and CCHIT Certifications....Pages 1-17
The role of virtual testing labs....Pages 1-14
Long-term OSS security certifications: An Outlook....Pages 1-11
Back Matter....Pages 1-3

✦ Subjects

Systems and Data Security; Data Encryption; Information Systems Applications (incl.Internet); Programming Languages, Compilers, Interpreters; Data Structures, Cryptology and Information Theory; Software Engineering/Programming and Operat