RFC 2196:Site Security Handbook
RFC-Ref

group


Click on the red underlined text to get to the source

... leadership, and effort in the creation of the first version of this handbook. It is the working group's sincere hope that this version will be as helpful to the community as the ...
... The Site Security Handbook Working Group is working on a User's Guide to Internet Security ...


... administrators of large user groups within the organization (e.g., business divisions, computer science department within a ...
... representatives of the user groups affected by the security policy ...
... choices. In some organizations, it may be appropriate to include EDP audit personnel. Involving this group is important if resulting policy statements are to reach the broadest possible acceptance. It is also relevant to mention that the role ...


... UNIX systems, is to assign to each object three classes of user: owner, group and world. The owner is either the creator of the object or the user assigned as owner by the super-user. The owner permissions (read, write and execute) apply ...
... either the creator of the object or the user assigned as owner by the super-user. The owner permissions (read, write and execute) apply only to the owner. A group is a collection of users which share access rights to an object. The group ...
... group is a collection of users which share access rights to an object. The group permissions (read, write and execute) apply to all users in the group (except the owner). The ...
... access rights to an object. The group permissions (read, write and execute) apply to all users in the group (except the owner). The world refers to everybody else with access to the system. The world permissions (read, write and execute) apply to all users (except the ...
... world refers to everybody else with access to the system. The world permissions (read, write and execute) apply to all users (except the owner and members of the group). ...
... Another approach is to attach to an object a list which explicitly contains the identity of all permitted users (or groups). This is an Access Control List (ACL ...
... With switched technologies, use Permanent Virtual Circuits or Closed User Groups whenever this is possible. Technologies which provide authentication and/or encryption ...


... POC is the coordination of all relevant processes. Responsibilities may be distributed over the whole site, involving multiple independent departments or groups. This will require a well coordinated effort in order to achieve overall success. The situation becomes even more complex if multiple ...
... of common indicators. It is best to collaborate with other technical and computer security personnel to make a decision as a group about whether an incident is occurring. ...
... be described in as much detail as possible, in order to aid prompt acknowledgment and understanding of the problem. Great care should be taken when determining to which groups detailed technical information is given during the notification. For example, it is ...
... cultural differences. However, cultural differences do not only exist between countries. They even exist within countries, between different social or user groups. For example, an administrator of a university system might be very relaxed about attempts to connect to ...


... S. Lewis, "Disaster Recovery Yellow Pages", The Systems Audit Group, 1996. ...
... National Computer Security Center, "Trusted UNIX Working Group (TRUSIX) rationale for selecting access control list features for the UNIX system", Shipping list no.: 90-076-P, The Center, Fort George G. Meade, MD ...



Google
Web
RFC-Ref