High Integrity computing : A practical guide to least authority security on Linux

High Integrity computing

A practical guide to least authority security on Linux

This page is a temporary information page about a book that I am currently in the process of writing. In 2008 I started out to use some of my parental leave time to develop training material for a computer security training. Unfortunately being a father took a bit more time than I expected, so I did not manage to finish the project within the one year that I had planned for it. Next to this, my current schedule currently no longer would permit me to give this training on any regular basis.

In order not to let the work I did on this training to go to waste, I am currently in the process of turning my material into a little book. This book will be a practical guide to the usage of least authority security. The book, while partially being global and applicable to many operating system enviroments, provides some real life examples that are geared specifically on features available in Linux.

The book when finished will be available in 3 versions. An online version, A DRM-free e-book version will be available for free, and a paperback version will be available from lulu.com for those readers that want a paper version and those that would like to support my effords on making the e-book version of this book available for free while spending large amounths of my time on it.

Table of content

To give you an idea of the setup of the book, the following is the currently projected table of content for the book:

Preface
Chapter 1: Security basics
Chapter 2: Practical set theory and boolean algebra.
Chapter 3: Access control models
Chapter 4: Data encapsulation
Chapter 5: Compartmenting
Chapter 6: Rights and delegation
Chapter 7: Accountability
Chapter 8: POLA design with UNIX/Linux filehandles.
Chapter 9: POLA design for software development.
Chapter 10: Capability style versus capability secure programming
Chapter 11: Revokability
Chapter 12: Other common systems for access control
Chapter 13: Transformation based access control.
Chapter 14: Case studies

The reviewed chapters are available trough a view only link to google docs. Bold chapters are currently being worked on. If you wish read access on any of these chapters drop me an e-mail.

Stay informed

If you wish to be informed when the book becomes available, or if you would like to help in the creation of this book by reviewing book chapters for me, please send an e-mail to highintegritycomputing@polacanthus.net