Better-Than-Nothing Security Practices.

The article focuses on digital security models available for general information security. There are several kinds recommended by professionals including time-based security, principal of least privilege, defense-in-depth, baseline security, perimeter hardening, intrusion detection and intrusion pre...

Full description

Bibliographic Details
Published in:Communications of the ACM Vol. 50; no. 8; pp. 15 - 19
Main Author: Berghel, Hal
Format: Article
Published: Association for Computing Machinery Aug2007
Subjects:
Online Access:View this record in EBSCOhost
Description
Summary:The article focuses on digital security models available for general information security. There are several kinds recommended by professionals including time-based security, principal of least privilege, defense-in-depth, baseline security, perimeter hardening, intrusion detection and intrusion prevention. Time-based security uses time as the measure of risk. The principle of least privilege depends on the degree of control a user has. The "Better-Than-Nothing" Security Practices (BTNSP) model is given as an example of a security prototype. Information is given for BTNSP online.