Page xiii

	Findings
	The Key-Management Problem
	Key-Distribution Centers
	Certification Authorities
	Actual Large-Scale KDC and CA Deployments
	Public-Key Infrastructure
	Findings
	Network Access Control Mechanisms
	Closed User Groups
	Virtual Private Networks
	Firewalls
	Limitations of Firewalls
	Guards
	Findings
	Foreign Code and Application-Level Security
	The ActiveX Approach
	The Java Approach
	Findings
	Fine-Grained Access Control and Application Security Findings
	Language-Based Security: Software Fault Isolation and Proof Carrying Code Findings
	Denial of Service
	Findings
	References
5	TRUSTWORTHY SYSTEMS FROM UNTRUSTWORTHY COMPONENTS	5-1
	Introduction
	Replication and Diversity
	Amplifying Reliability
	Amplifying Security
	Findings
	Monitor, Detect, Respond
	Limitations in Detection
	Response and Reconfiguration
	Perfection and Pragmatism
	Findings
	Placement of Trustworthiness Functionality
	Public Telephone Network
	Internet
	Minimum Essential Information Infrastructure
	Findings
	Nontraditional Paradigms
	Finding
	References
6	THE ECONOMIC AND PUBLIC POLICY CONTEXT	6-1
	Risk Management

Front Matter (R1-R20)

Executive Summary (1-11)

1 Introduction (12-25)

2 Public Telephone Network and Internet Trustworthiness (26-61)

3 Software for Networked Information Systems (62-108)

4 Reinventing Security (109-153)

5 Trustworthy Systems from Untrustworthy Components (154-170)

6 The Economic and Public Policy Context (171-239)

7 Conclusions and Research Recommendations (240-256)

Appendix A: Study Committee Biographies (257-266)

Appendix B: Briefers to the Committee (267-268)

Appendix C: Workshop Participants and Agendas (269-278)

Appendix D: List of Position Papers Prepared for the Workshops (279-280)

Appendix E: Trends in Software (281-284)

Appendix F: Some Related Trustworthiness Studies (285-290)

Appendix G: Some Operating System Security Examples (291-292)

Appendix H: Types of Firewalls (293-295)

Appendix I: Secrecy of Design (296-297)

Appendix J: Research in Information System Security and Survivability Funded by NSA and DARPA (298-299)

Appendix K: Glossary (300-318)

Index (319-331)