Security News:

As computers and networks have become more complex, so too have approaches evolved for securing them. In this Security School webcast on training for CISSP certification, expert Shon Harris investigates the framework and structures that make up typical computer systems; this webcast sketches the evolution of security models and evaluation methods as they have struggled to keep pace with changing technology needs. The following topics are covered:

• Computer and security architecture: The framework and structure of a system and how security can be implemented.
• Security models and modes: The symbolic representations of policy that map the objectives of the policy makers to a set of rules which computer systems must follow under various system conditions.
• System evaluation, certification and accreditation: Methods used to examination the security relevant parts of a system (e.g. reference monitor, access control and kernel protection mechanisms, etc.) and how certification and accreditation are confirmed.
• System security threats: Common vulnerabilities specific to system security architecture.