Information Assurance Resources

Information Assurance Resources

• Michigan Tech News - Security
• http://www.nsa.gov/ia/academia/acade00001.cfm
• http://www.cerias.purdue.edu/
• http://www.cert.org/
• http://www.bsi-global.com/Global/iso27001.xalter
• http://www.isaca.org
  
  

 Information Institute

Web References: Influential Documents from the 1980s and 1990s

The Computer Security Act of 1987
http://www.epic.org/crypto/csa/csa.html

McCumber
http://www.infosecuritynetbase.com/ejournals/books
/book_summary/toc.asp?id=1399

GLB
http://banking.senate.gov/conf/confrpt.htm

HIPAA
http://www.hipaa.org/

Sarbanes-Oxley
http://fl1.findlaw.com/news.findlaw.com/hdocs/docs/
gwbush/sarbanesoxley072302.pdf

Web References: Access Control Models

Bell-LaPadula
http://www.albany.edu/acc/courses/ia/classics/belllapadula1.pdf
http://csrc.nist.gov/publications/history/bell76.pdf

Biba
http://portal.acm.org/citation.cfm?id=310925

Clark Wilson
http://csdl2.computer.org/persagen/DLAbsToc.jsp?resourcePath=/dl/proceedings/
&toc=comp/proceedings/sp/1987/0771/00/0771toc.xml&DOI=10.1109/SP.1987.10001

Web References: Rainbow Series Models

Orange Book
http://csrc.ncsl.nist.gov/publications/secpubs/rainbow/std001.txt

TPEP (aka. the Bright Blue Book)
http://csrc.nist.gov/publications/secpubs/rainbow/tg002.txt

Discretionary Access Control (aka. the Neon Orange Book)
http://csrc.nist.gov/publications/secpubs/rainbow/tg003.txt

Computer Security Terms (aka. the Aqua Book)
http://csrc.nist.gov/publications/secpubs/rainbow/tg004.txt

Web References: FIPS Standards related to FISMA

FIPS 199
http://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf

FIPS 200
http://csrc.nist.gov/publications/fips/fips200/FIPS-200-final-march.pdf

NIST 800-53
http://csrc.nist.gov/publications/nistpubs/800-53/SP800-53.pdf

Web References: DoD Standards Related to Security

DoD IA information support center
http://iase.disa.mil/index2.html

DITSCAP/DIACAP
http://www.dtic.mil/whs/directives/corres/pdf/i520040_123097/i520040p.pdf

NISPOM
http://www.dss.mil/whatsnew/nispom06.htm

General References

NIST publications
http://csrc.nist.gov/publications/nistpubs/

National Information Assurance Training and Education Center (NIATEC)
http://niatec.info/