Computer security encompasses concepts and methods for protecting sensitive resources in computer systems. Computer security starts from the policies that regulate access to protected resources. In technology, the focus is on mechanisms for enforcing these policies. We will put various enforcement mechanisms into context with the policies and the IT architectures they were originally designed for. We will also briefly touch on network security and conclude with remarks on security evaluation. (C) 2010 John Wiley & Sons, Inc.