Role Engineering for Enterprise Security Management

Here practitioners Coyne and Davis give managers, engineers and security specialists practical advice on defining and deploying roles for securing systems, evaluating tools and apply best practices to design and development. They advocate role-based access control, and make economic and security cases for it, describe role engineering in the phases of the system development life cycle, define role engineering and why forms need it, define "good roles," examine the role engineering process and the process of designing the roles, show how to engineer a permission system and apply tools, and analyze the role formation process. They supply examples from a range of industries and describe planning, staffing, de-bugging and evaluation. They also provide a summary for quick reference and a concise bibliography. Annotation c2008 Book News, Inc., Portland, OR (booknews.com)