The 'how' and 'why' of persistent information security

ABSTRACT

A file level information security technology that applies everywhere, every time, is introduced. The security is always 'on', as much 'in the wild' as behind the firewall or in the VPN tunnel. The broad strokes of structure and operation are discussed in terms of a specific system, RightsEnforcer. The technology is currently being deployed in the Adaptive Risk Management Lab at the University of New Brunswick as part of a testbed supporting emergency response operations.

REFERENCES

• 1: William R. Cheswick , Steven M. Bellovin, Firewalls and Internet security: repelling the wily hacker, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1994
• 2: Gerald A. Marin, Network Security Basics, IEEE Security and Privacy, v.3 n.6, p.68-72, November 2005 [doi>DE65FB44-50A6-4739-AAAC-64C11E07B30E]
• 3: Merv Matson , Mihaela Ulieru, Persistent information security: beyond the e-commerce threat model, Proceedings of the 8th international conference on Electronic commerce: The new e-commerce: innovations for conquering current barriers, obstacles and limitations to conducting successful business on the internet, August 13-16, 2006, Fredericton, New Brunswick, Canada [doi>10.1145/1151454.1151500]
• 4: Charles P. Pfleeger , Shari Lawrence Pfleeger, Security in Computing, Prentice Hall Professional Technical Reference, 2002
• 5: Ulieru, M., Relf, P., and Matson, M. ARM - Adaptive Risk Management Platform for Emergency Response Operations, IECON-2006, 32nd Annual Conference of the IEEE Industrial Electronics Society, Paris, France, 2006-Nov-07 to 10

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS
      H.4.3 Communications Applications
          Subjects: Electronic mail

Additional Classification:
  E. Data
  E.3 DATA ENCRYPTION

General Terms:
Security

Keywords:
DRM, avaliability, confidentiality, digital rights management, emergency response operations, information custodian, information security, infosec, integrity, persistent information security