Enterprise Level Security 2: Advanced Techniques for Information Technology in an Uncertain World

Cover
Half Title
Title Page
Copyright Page
Dedication
Table of Contents
Preface
Acknowledgments
About the Authors
List of Figures
List of Tables
Chapter 1 The First 16 Years
	1.1 The Beginning of Enterprise Level Security (ELS)
	1.2 Design Principles
	1.3 Key Concepts
	1.4 Implementation
Chapter 2 A Brief Review of the Initial Book
	2.1 Security Principles
		2.1.1 Know the Players
		2.1.2 Maintain Confidentiality
		2.1.3 Separate Access and Privilege from Identity
		2.1.4 Maintain Integrity
		2.1.5 Require Explicit Accountability
	2.2 ELS Framework
Chapter 3 Minimal Requirements for the Advanced Topics
	3.1 Needed Capabilities
	3.2 Creating an Attribute Store
	3.3 Registering a Service
	3.4 Computing Claims
	3.5 User Convenience Services
	3.6 The Enterprise Attribute Ecosystem
	3.7 Summary
Identity and Access Advanced Topics
	Chapter 4 Identity Claims in High Assurance
		4.1 Who Are You?
		4.2 Entity Vetting
		4.3 Naming
		4.4 Key and Credential Generation
		4.5 Key and Credential Access Control
		4.6 Key and Credential Management
		4.7 Key and Credential Use
		4.8 Some Other Considerations
	Chapter 5 Cloud Key Management
		5.1 Clouds
		5.2 ELS in a Private Cloud
		5.3 The Public Cloud Challenge
			5.3.1 Using the Same Design
			5.3.2 HSM Site Inspection, Virtual Connection to HSM
			5.3.3 HSM Site Inspection, Direct Connection to HSM
			5.3.4 HSM Site Inspection, Preconfigured Direct Connections to HSM
		5.4 Potential Hybrid Cloud Solutions
			5.4.1 HSM in Public Cloud
			5.4.2 HSM in Private Cloud
			5.4.3 General Hybrid Challenges
		5.5 Proposed Secure Solutions
			5.5.1 Server in HSM
			5.5.2 Homomorphic Encryption
		5.6 Implementation
			5.6.1 Cloud Vendor Support
			5.6.2 HSM Vendor Support
			5.6.3 Leveraging Mobile Device Management (MDM) for Cloud Assets
			5.6.4 Homomorphic Encryption
		5.7 Cloud Key Management Summary
	Chapter 6 Enhanced Assurance Needs
		6.1 Enhanced Identity Issues
		6.2 Scale of Identity Assurance
		6.3 Implementing the Identity Assurance Requirement
		6.4 Additional Requirements
		6.5 Enhanced Assurance Summary
	Chapter 7 Temporary Certificates
		7.1 Users That Do Not Have a PIV
		7.2 Non-PIV STS/CA-Issued Certificate
		7.3 Required Additional Elements
		7.4 Precluding the Use of Temporary Certificates
		7.5 Temporary Certificate Summary
	Chapter 8 Derived Certificates on Mobile Devices
		8.1 Derived Credentials
		8.2 Authentication with the Derived Credential
		8.3 Encryption with the Derived Credential
		8.4 Security Considerations
		8.5 Certificate Management
	Chapter 9 Veracity and Counter Claims
		9.1 The Insider Threat
		9.2 Integrity, Reputation, and Veracity
		9.3 Measuring Veracity
			9.3.1 Person Entities
			9.3.2 Non-Person Entities
				9.3.2.1 Non-Person Veracity
		9.4 Creating a Model and Counter Claims
			9.4.1 For Persons
			9.4.2 For Non-Persons
			9.4.3 Computing Veracities
		9.5 Veracity and Counter Claims Summary
	Chapter 10 Delegation of Access and Privilege
		10.1 Access and Privilege
		10.2 Delegation Principles
		10.3 ELS Delegation
			10.3.1 Standard ELS Delegation
			10.3.2 ID-Based Special Delegation
		10.4 Delegation Summary
	Chapter 11 Escalation of Privilege
		11.1 Context for Escalation
		11.2 Access and Privilege Escalation
		11.3 Planning for Escalation
		11.4 Invoking Escalation
		11.5 Escalation Implementation within ELS
		11.6 Accountability
		11.7 Escalation Summary
	Chapter 12 Federation
		12.1 Federation Technical Considerations
			12.1.1 ELS Federation
			12.1.2 ELS-like Federation
			12.1.3 Identity Credential Federation
			12.1.4 Weak Identity Federation
			12.1.5 Ad Hoc Federation
			12.1.6 Person-to-Person Sharing
			12.1.7 Evaluating Options
		12.2 Federation Trust Considerations
			12.2.1 Full Trust
			12.2.2 Infrastructure Trust
			12.2.3 Individual Trust
			12.2.4 No Trust
		12.3 Federation Conclusions
ELS Extensions – Content Management
	Chapter 13 Content Object Uniqueness for Forensics
		13.1 Exfiltration in Complex Systems
		13.2 Product Identifiers
		13.3 Hidden Messages
		13.4 Content Management
			13.4.1 Access Control
			13.4.2 Enforcing Access Control
			13.4.3 Components of an Electronic Object
			13.4.4 Responsibilities of the Appliqué
			13.4.5 Mitigations
				13.4.5.1 Discouraging Theft
				13.4.5.2 Forensics
		13.5 Content Object Summary
	Chapter 14 Homomorphic Encryption
		14.1 Full Homomorphic Encryption (FHE)
			14.1.1 Homomorphic Encryption
			14.1.2 Homomorphic Encryption with ELS
				14.1.2.1 Non-Homomorphic Encryption
				14.1.2.2 FHE with Full Application in Cloud
				14.1.2.3 FHE with Only Data in Cloud
			14.1.3 Performance Considerations
		14.2 Partial Homomorphic Encryption (PHE)
			14.2.1 Related Work
			14.2.2 Research Methods
			14.2.3 Human Resources (HR) Database Selection
			14.2.4 HR Database Schema
			14.2.5 Encryption Schemes
			14.2.6 Credential Mapping
			14.2.7 SQL Translation Schemes
			14.2.8 Web Application
			14.2.9 Assessments
			14.2.10 Lab Setup
			14.2.11 PHE Results
				14.2.11.1 Baseline Functionality
				14.2.11.2 Enhancements
		14.3 PHE Performance Evaluation
			14.3.1 Evaluation Areas
				14.3.1.1 Bulk Encryption
				14.3.1.2 Encrypted Queries
			14.3.2 Setup Considerations
			14.3.3 Evaluation Method
			14.3.4 Test Results
				14.3.4.1 Bulk Encryption Test Results
				14.3.4.2 Single Queries
				14.3.4.3 Combining Two Queries
				14.3.4.4 Combining Many Queries
				14.3.4.5 Initialization and Randomization
		14.4 Homomorphic Encryption Conclusions
ELS Extensions – Data Aggregation
	Chapter 15 Access and Privilege in Big Data Analysis
		15.1 Big Data Access
		15.2 Big Data Related Work
		15.3 Big Data with ELS
			15.3.1 Basic ELS Preparations
			15.3.2 Big Data Analysis with ELS
			15.3.3 Data-Driven Access Controls
			15.3.4 Escalation of Privilege
			15.3.5 Big Data Analysis Using Federation Data
			15.3.6 Data Leakage
		15.4 Big Data Summary
	Chapter 16 Data Mediation
		16.1 Maintaining Security with Data Mediation
		16.2 The Mediation Issue
		16.3 Approaches
			16.3.1 MITM Mediation
			16.3.2 Mediation Service
			16.3.3 Mediation Tool Service
			16.3.4 Homomorphic-Encryption MITM
			16.3.5 Comparison of Solutions
		16.4 Choosing a Solution
		16.5 Mediation Summary
ELS Extensions – Mobile Devices
	Chapter 17 Mobile Ad Hoc
		17.1 Mobile Ad Hoc Implementations
			17.1.1 Network Overview
			17.1.2 Mobile Ad Hoc Networking
			17.1.3 Mobile Ad Hoc Network Services
			17.1.4 Nexus Elements in the Ad Hoc Network
		17.2 Network Service Descriptions
			17.2.1 Detection of Hardware Capabilities
			17.2.2 Detection of Network Opportunities
			17.2.3 Selection of Waveforms and Protocols
			17.2.4 Service Discovery
			17.2.5 Query/Response Capabilities
			17.2.6 Network Broadcast
			17.2.7 System Discovery
			17.2.8 Joining a Network
		17.3 Other Considerations
			17.3.1 Exchange of Certificates
			17.3.2 Device Requirements
			17.3.3 Discovery of Services
			17.3.4 Request for Service
		17.4 Mobile Ad Hoc Summary
	Chapter 18 Endpoint Device Management
		18.1 Endpoint Device Choices
			18.1.1 Devices to Be Considered
			18.1.2 Options for Device Choices
			18.1.3 The Issue
			18.1.4 Device Evaluation Factors
			18.1.5 Enterprise Device Requirements
			18.1.6 Evaluation Matrix
			18.1.7 Protecting the Enterprise from BYOD
			18.1.8 Device Choice Summary
		18.2 Endpoint Device Management
			18.2.1 Device Registry
			18.2.2 IoT Devices
			18.2.3 Device Endpoint Agent
				18.2.3.1 Monitoring and Reporting
				18.2.3.2 Data Validation and Purging
				18.2.3.3 Fulfilling Requests for Data
			18.2.4 Endpoint Device Management Summary
ELS Extensions – Other Topics
	Chapter 19 Endpoint Agent Architecture
		19.1 Agent Architecture
		19.2 Related Work
		19.3 ELS Agent Methods
		19.4 Endpoint Agent Results
			19.4.1 Mobile Device Management (MDM) Agents
			19.4.2 Monitoring Agents
			19.4.3 Log Aggregation Agents
			19.4.4 Service Desk Agents
			19.4.5 Import and Mediation Agents
			19.4.6 Other Agents
		19.5 Endpoint Agent Conclusions
		19.6 Endpoint Agent Extensions
	Chapter 20 Ports and Protocols
		20.1 Introduction
		20.2 Communication Models
		20.3 Ports in Transport Protocols
			20.3.1 The Transmission Control Protocol
			20.3.2 The User Datagram Protocol
		20.4 Threats Considered
		20.5 Assigning Ports and Protocols
		20.6 Server Configurations
		20.7 Firewalls and Port Blocking
		20.8 Application Firewalls
		20.9 Network Firewalls in ELS
		20.10 Endpoint Protection in ELS
		20.11 Handling and Inspection of Traffic
		20.12 Additional Security Hardening
	Chapter 21 Asynchronous Messaging
		21.1 Why Asynchronous Messaging?
			21.1.1 Advantages of Asynchronous Communication
			21.1.2 Disadvantages of Asynchronous Communication
		21.2 Prior Work
			21.2.1 Java Standard Messaging Protocol
			21.2.2 De Facto Standard Microsoft Message Queuing
			21.2.3 Open Source Messaging Protocols
			21.2.4 Emerging Standard
		21.3 Asynchronous Messaging Security
			21.3.1 Security for Server Brokered Invocation
			21.3.2 Security for Publish-Subscribe Systems (PSS)
		21.4 PSS Rock and Jewel
			21.4.1 Claims for Targeted Content (PSS)
			21.4.2 Retrieving Content for Known Claimants
			21.4.3 Retrieving Content for Unknown Claimants
			21.4.4 Adjusting Publishing Targets (Untrusted PSS)
			21.4.5 Distribution of Burdens
		21.5 Summary
	Chapter 22 Virtual Application Data Center
		22.1 Introduction
		22.2 Enterprise Level Security and VADC Concepts
		22.3 VADC Implementation
		22.4 Resource Utilization
		22.5 Distributed Benefits and Challenges
		22.6 Virtual Application Data Center Conclusions
	Chapter 23 Managing System Changes
		23.1 System Change
		23.2 Current Approaches
			23.2.1 The Expert
			23.2.2 The Bureaucracy
			23.2.3 The Vendor
		23.3 The Vision
		23.4 Realizing the Vision
		23.5 Moving into the Future
		23.6 Managing Information Technology Changes
	Chapter 24 Concluding Remarks
		24.1 Staying Secure in an Uncertain World
		24.2 The Model is Important
		24.3 Zero Trust Architecture
		24.4 Computing Efficiencies
			24.4.1 Need for Speed
			24.4.2 Security Protocols and Algorithms
			24.4.3 Evaluation of Security Products
		24.5 Current Full ELS System
		24.6 Future Directions
References
Acronyms
Index