{'fraction_non_alphanumeric': 0.025347506132461162, 'fraction_numerical': 0.003270645952575634, 'mean_word_length': 5.51063829787234, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Secure Open Systems: An Investigation of Current Standardisation Efforts

Abstract : This paper outlines the achievements of standardisation in the area of secure open systems. Security in open systems is a special problem since each element in an open system (hardware, networks, operating systems, databases and other applications) must be able to offer security in coordination with other elements. First, a new view on requirements for security is presented. Security requirements are studied from different angles: openness, organisational structures, the value of information and services, social structures and security of the system itself. Next, the results of our investigation of current standardisation initiatives in the area of technical security in open systems are presented. Main conclusions are: (1) None of the initiatives addresses all requirements for secure open systems. (2) None of the initiatives gives a solid basis for coordination of security between the clements of the open system. (3) All initiatives disregard the security functionality that is needed to map normal organisational structures and responsibilities. (4) Technical security ignores the needs for security that stem from society.