Logging, security experts data base, and crypto key management

摘要

Note: The remarks and opinions expressed herein are strictly those of the author, and in no way reflect the official position of the Bank of America.

rn

This paper presents three important---and likely to soon to be available---facilities that will help increase the security associated with computer systems of the 1990s. They are, in the order of their presentation, (1) enhanced logging and monitoring facilities, (2) an on-line database of information security experts, and (3) generalized encryption key management packages. These facilities are described from a functional rather than an implementation standpoint. The basis for stating that these facilities will soon be available is simply the author's last six years of research and consulting experience in the computer security field at SRI International and the Bank of America.