Elementary Information Security, 3rd Edition

▶ 4.6 Resources

Important Terms Introduced

• administrative group

• audit trail

• Common Criteria

• event logging

• file permission flags

• group rights

• information systems audit

• log entry

• Orange Book

• other rights

• red team

• setuid

• Transitive Trust

• Trust, but verify

• user group

• user rights

Abbreviations Introduced

• ACL—access control list

• DOD—U.S. Department of Defense

• FISMA—Federal Information Security Management Act

• GLBA— Gramm–Leach–Bliley Act

• HIPAA—Health Insurance Portability and Accountability Act

• ISO—International Standards Organization

• PCI DSS—Payment Card Industry Data Security Standard

• POSIX—Portable Operating System Interface

• SOX—Sarbanes–Oxley Act

• TCSEC—Trusted Computer System Evaluation Criteria

• UAC—user account control

4.6.1 Review ...