arXivDaily arXiv每日学术速递 周一至周五更新
arXiv cs/0110001cs.CY
收藏

计算机安全:竞争概念

Computer Security: Competing Concepts

Helen Nissenbaum, Batya Friedman, Edward Felten

摘要:

本文重点讨论了我们在多学科项目的哲学部分中发现的一种紧张关系,该项目涉及网络浏览器安全的价值观。我们的项目借鉴了经验社会科学,计算机科学和哲学的方法和观点,以确定现有网络浏览器安全中体现的价值,并规定对现有系统(特别是Mozilla)的更改,以便与网络浏览器系统相关的价值比目前更好地服务。当我们着手从安全的概念中提取出应该指导网络浏览器安全的设定值时,这种紧张关系出现了,我们在任何其他关于计算机安全的工作中都没有看到明确的解决办法。我们发现不可能构建一套内部一致的价值观,直到我们意识到两个强大的-在某些地方相互竞争-计算机安全概念正在影响我们的思想。我们需要把这些分开,并对其中一个做出主要承诺。计算机安全的一个概念调用安全的普通含义。根据它,计算机安全应该保护人们-计算机用户-免受危险,伤害和威胁。显然,这种普通的安全概念已经为围绕计算机安全的许多工作和言论提供了信息。但另一个实质上更丰富的概念也界定了计算机安全的目标和轨迹-计算机安全是国家安全的一个要素。尽管与普通概念一样,这个概念也涉及防范威胁,但其主要主体是国家,而不是个人。这两个概念表明不同的系统规格,而不是所有的机制,但相当少。

英文摘要:

This paper focuses on a tension we discovered in the philosophical part of our multidisciplinary project on values in web-browser security. Our project draws on the methods and perspectives of empirical social science, computer science, and philosophy to identify values embodied in existing web-browser security and also to prescribe changes to existing systems (in particular, Mozilla) so that values relevant to web-browser systems are better served than presently they are. The tension, which we had not seen explicitly addressed in any other work on computer security, emerged when we set out to extract from the concept of security the set values that ought to guide the shape of web-browser security. We found it impossible to construct an internally consistent set of values until we realized that two robust -- and in places competing -- conceptions of computer security were influencing our thinking. We needed to pry these apart and make a primary commitment to one. One conception of computer security invokes the ordinary meaning of security. According to it, computer security should protect people -- computer users -- against dangers, harms, and threats. Clearly this ordinary conception of security is already informing much of the work and rhetoric surrounding computer security. But another, substantively richer conception, also defines the aims and trajectory of computer security -- computer security as an element of national security. Although, like the ordinary conception, this one is also concerned with protection against threats, its primary subject is the state, not the individual. The two conceptions suggest divergent system-specifications, not for all mechanisms but a significant few.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑