An Analysis of Computer Security Safeguards for Detecting and Preventing Intentional Computer Misuse

Published

January 1, 1978

Author(s)

Brian Ruder, J. D. Madden, Robert P. Blanc

Abstract

Stanford Research Institute (SRI) has an extensive file of actual computer misuse cases. The National Bureau of Standards asked SRI to use these cases as a foundation to develop ranked lists of computer safeguards that would have prevented or detected the recorded intentional misuses. This report provides a working definition of intentional computer misuse, a construction of a vulnerability taxonomy of intentional computer misuse, a list of 88 computer safeguards, and a model for classifying the safeguards. In addition, there are lists ranking prevention and detection safeguards, with an explanation of the method of approach used to arrive at the lists. The report should provide the computer security specialist with sufficient information to start or enhance a computer safeguard program.

Citation

Special Publication (NIST SP) - 500-25

Report Number

500-25

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

DOI Link

Keywords

computer security, computer misuse, computer safeguards, computer security model, computer crime, computer fraud, privacy

Citation

Ruder, B. , Madden, J. and Blanc, R. (1978), An Analysis of Computer Security Safeguards for Detecting and Preventing Intentional Computer Misuse, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NBS.SP.500-25 (Accessed April 19, 2024)