Enterprise Level Security ─ Securing Information Systems in an Uncertain World

Increasing complexity and new computing hardware and techniques have made the fortress approach to security espoused by NIST and implemented throughout the defense and banking industry unworkable. This book provides a modern alternative to this approach. The new approach to security is more distributed and has no need for passwords or accounts. The security approach is derived from a set of tenants that form the basic security model requirements. At each step in process it determines identities and claims for access and privileges. These techniques have been proven to be resilient, secure, extensible, scalable, and are currently being implemented on a broad scale for a particular enterprise.

Dr. Simpson (Ph.D., Aeronautical and Astronautical Engineering, The Ohio State University) spent too many years in academia, where he accumulated four degrees from three different universities. He also attended several schools for Military and Government training. None of his education was in information technology (IT). Most of his educational experience is in Aeronautical Engineering and Business. He spent many years as an expert in aeronautics before he undertook electronic and system test; his last ten years were spent on IT-related areas, mostly security, including processes, damage assessments of cyber intrusions, IT security standards, IT security evaluation, and IT architecture. His prior work in systems served him well in the latter, and he has accumulated some small amount of knowledge about IT security. The goal of this book is to pass some of that knowledge along.