Chapter 11

Principles of Security Models, Design, and Capabilities

THE CISSP EXAM TOPICS COVERED IN THIS CHAPTER INCLUDE:

6. Security Architecture and Design
A. Understand the fundamental concepts of security models (e.g., Confidentiality, Integrity, and Multi-Level Models)
B. Understand the components of information systems security evaluation models
B.1 Product evaluation models (e.g., common criteria)
B.2 Industry and international security implementation guidelines (e.g., PCI-DSS, ISO)
C. Understand security capabilities of information systems (e.g., memory protection, virtualization, trusted platform module)

Understanding the philosophy behind security solutions helps to limit your search for the best controls for specific security needs. ...

Get CISSP: Certified Information Systems Security Professional Study Guide, 6th Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.