Role Engineering for Enterprise Security Management (Information Security & Privacy) [Hardcover]

Edward J., Sr. Coyne (Author), John M. Davis (Author)

Book Description

ISBN-10: 159693218X | ISBN-13: 978-1596932180 | Publication Date: December 2007 | Edition: 1

Role engineering secures information systems. It ensures that every user has the right permission to access just the right information, computers, and networks. When hundred or thousands of computer users must be assigned their own individual access permission, role engineering saves significant time and money while protecting data and systems. This first-of-its-kind book illustrates the entire role engineering process, from project planning to deployment and verification. In addition to explaining technical aspects, the book emphasizes business benefits by showing how to manage risks and costs. Practitioners get proven techniques that define roles and ensure proper assignment of permissions and roles to users. The book also shows how to verify that roles comply with security policies.

Editorial Reviews

About the Author

Edward J. Coyne is a senior security engineer at Science Applications International Corporation in Vienna, Virginia. Among his many professional activities, he is a member of Health Level 7's Security and CCOW Technical committees, chair of the Role-Based Access Control Task Group of the International Committee for Information Technology Standards, and a senior member of the IEEE. John M. Davis is a security architect for the US Department of Veterans Affairs in Encintas, California. He is a voting member of the International Committee for Information Technology Standards.

Product Details

• Hardcover: 224 pages
• Publisher: Artech House Publishers; 1 edition (December 2007)
• Language: English
• ISBN-10: 159693218X
• ISBN-13: 978-1596932180
• Product Dimensions: 9.3 x 6.4 x 0.7 inches
• Shipping Weight: 1 pounds (View shipping rates and policies)
• Average Customer Review: 3.0 out of 5 stars  See all reviews (2 customer reviews)
• Amazon Best Sellers Rank: #1,601,308 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

2 of 2 people found the following review helpful:

1.0 out of 5 stars Disappointment, October 22, 2008

By 

Stoian Raluca "T." (Washington DC) - See all my reviews
(REAL NAME)   

This review is from: Role Engineering for Enterprise Security Management (Information Security & Privacy) (Hardcover)

The book is disorganized, contains erroneous and fallacious information. For example they define role mining as a bottom up approach, when one can use data mining processes while engaging both a top down down and a bottom up strategy. And the list could go on.

Just a waste of money.

0 of 1 people found the following review helpful:

5.0 out of 5 stars Role Engineering sets the standard for RBAC implementations, November 16, 2008

By 

Tim Weil - See all my reviews
(REAL NAME)   

This review is from: Role Engineering for Enterprise Security Management (Information Security & Privacy) (Hardcover)

This book has the potential to fill a real void in the Identity and Access Management industry where practical role engineering methods have not be formalized or validated. Role Engineering for Enterprise Security Management (ESM) is an expensive, technical, high risk proposition for corporations and institutions managing tens of thousands of use accounts in an IT environment. There are Identity Management products and vendors whosupport this role-based access control (RBAC) process but no standard methodologies exist for successful ESM implementation. The authors provide a much-needed, how-to, approach for achieving successful Role Engineering in the enterprise network.