Cryptographic Security Architecture -

Cryptographic security architecture is the collection of hardware
& software that protects & controls the use
of encryption keys and similar cryptovariables. It is
the foundation for enforcing computer security policies &
controls and for preempting system misuse.
This book
provides a design for a portable, flexible high-security
cryptographic architecture, with particular emphasis on incorporating rigorous
security models and practices. The book unveils an
alternative means of building a trustworthy system based
on concepts from established software engineering principles and
cognitive psychology. Its novel security-kernel design implements a
reference monitor that controls access to security-relevant objects
& attributes based on a configurable security policy.
Topics & features:
- Builds a concise architectural
design that can be easily extended in the
future;
- Develops an application-specific security kernel that
enforces a fully customizable, rule-based security policy;
-
Presents a new verification technique that allows verification
from the high-level specification down to the running
code;
- Describes effective security assurance in random
number generation, and the pitfalls associated therewith;
-
Examines the generation & protection of cryptovariables, as
well as application of the architectural design to
cryptographic hardware.
The work provides a presentation of
a flexible, platform-independent cryptographic security architecture suited to
software, hardware, and hybrid implementations. Security design practitioners,
professionals, researchers, and advanced students will find the
work an essential resource.