Covers the proceedings of the 4th International Conference on Information Systems Security, ICISS 2008, held in Hyderabad, India. This book includes such topics as access control, cryptography, forensics, formal methods and language-based security, intrusion detection, malware defense, network and Web security, and operating system security.