[EMAIL PROTECTED] writes:
> "the first centralized security system, Customer Information Control
> System (CICS), was introduced on the S/390."
>
> This is news to me.  I always thought CICS was an online transaction
> system which was introduced on the S/370 or even earlier.  JC, feel
> free to chime in.

there was some high integrity mainframe systems deployed in the 60s
and 70s. among other things, theyy were being used for commercial
timesharing services ... some number of these commercial timesharing
services were selling into the financial market ... where there is
implicit requirement to safeguard customers from each other.
http://www.garlic.com/~lynn/subtopic.html#timeshare

note also that there was some amount of use in various gov. agencies
based on similar criteria; a couple recent posts related to the
subject.
http://www.garlic.com/~lynn/2005k.html#30 Public disclosure of discovered
vulnerabilities
http://www.garlic.com/~lynn/2005k.html#35 Determining processor status without
IPIs

one scenario was at the cambridge science center
http://www.garlic.com/~lynn/subtopic.html#545tech

which was offering cms\apl services to business people in armonk
corporate hdqtrs that had loaded the most sensitive of corporate
secrets and were running various business modeling applications
... and concurrently there was access to the same system by students
from various colleges and univs. in the boston area.

we had a few cases of denial of service mounted by students that were
quickly handled ... but i know of no data breaches.

some of the DOS attacks that were attempted based on resource
consumption. however, i had done dynamic adaptive resource scheduler
as undergraduate in the 60s ... with the default policy being
fair-share ... which tended to contain such efforts (and if they
didn't, i had to find and fix any anomolies in the resource control
implementation). the other DOS attacks used some structural
characteristics that had to be quickly corrected.

--
Anne & Lynn Wheeler | http://www.garlic.com/~lynn/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to