Information systems security enters the 1990s

The US government must make profound changes in the way it approaches information systems security. These changes are further prompted by: (1) rapid technological advances that have virtually eliminated the traditional distinctions between telecommunications and information systems, (2) the move toward commercial off-the-shelf acquisitions, (3) a more complex threat scenario, and (4) an increasingly restrictive fiscal climate. In order to deal with this reality of the 1990s, information systems security must be compatible with, indeed often integrated into, emerging information technology. Add-on security will no longer be sufficient