Local Area Network Operations: A Security,Control and Audit Perspective *

Abstract

This paper provides a framework for the review of security and control within a local area network environment. Network operations are subdivided into several functional areas or components for further review. Each component or area is briefly explained and the security risks, issues and concerns highlighted. Controls and security measures are proposed as guidelines to counter these threats. An approach to the audit of each major area of network operations is proposed.

This suggested framework provides guidance to information system security officers, auditors, communications and network administrators, consultants and information systems management for the review of local area network security during network operations.

Get full access to this article

View all access options for this article.

References

Baird

L.L.

(1985). Sensible Network Security. Datamation, pp. 22–28

Carroll

J.M.

(1979). Computer Security. Butterworth, Boston

Caelli

W.J.

(ed) (1989). Computer security in the age of information: Proceedings of the 5th International Conference on Computer Security, IFIP/Sec ‘88, Elsevier, North Holland, pp 439–469.

Fidlow

(1985). A comprehensive approach to network Security, Data Communications, April.

Fisher

R.P.

(1984). Information Systems Security. Prentice-Hall, New Jersey.

Gardner

J.A.

, and Saunders

P.A.

(1986). Security Risks in Data Communications. EDPAC.

Jamieson

(1986). Impact of Audit Involvement on Systems Development. Information Systems Research Report No. 14, University of New South Wales.

Jamieson

, and Low

G.G.

(1989). Security, control and audit issues in local area network design. Computers and Security, 8, 4, June.

Jamieson

, Bergman

, and Levine

(1987). Computer security: what every executive should know. Self Study Audio Package and Study Guide, Continuing Education University of New South Wales.

10.

Kak

S.C.

(1983). Data security in computer networks. Computer, February.

11.

Low

G.C.

, and Hunt

D.C.

(1986). Multi-vendor Local Area Networks: Some Technological Issues. Aust. Comp. Journal 20, 3, pp. 138–144.

12.

Low

G.C.

, and Hunt

D.C.

(1988b). A successful local area network project, Aust Comp. Conf, Sydney, Sep. 21–23, 1988, pp. 499–510.

13.

Oritz

(1986). Security and local area networking, Information Age, 8, 1.

14.

Parker

D.B.

(1981). Computer Security Management. Reston Publishing Co Inc., Reston.

15.

Power

J.M.

, and Wilbur

S.R.

(1985). Authentication in a heterogeneous environment. Proceedings of the Third IFIP International Conference on Computer Security, Dublin.

16.

Schaefer

(1985). Security vulnerabilities in the automated Office. Proceedings of the Third IFIP international Conference on Computer Security, Dublin.

17.

Wing

, and Jones

(1986). How secure is your PC. Notes for a proposed seminar on PC security.

18.

Worthington

, Chaîner

T.J.

, Willingford

J.D.

, and Gundersen

S.C.

(1985). IBM Dynamic Signature Verification. Proceedings of the third ITIP International Conference on Computer Security, Dublin, August.