Tools
Tools
Shaikh, Riaz A. 
ORCID: https://orcid.org/0000-0001-6666-0253, Rajput, Saeed, Zaidi, S. M.H. and Sharif, Kashif
(2005)
Comparative analysis and design philosophy of next generation unified enterprise application security.
In:
Proceedings - Thirteenth International Symposium on Temporal Representation and Reasoning, TIME 2006.
Proceedings - IEEE 2005 International Conference on Emerging Technologies, ICET 2005
.
UNSPECIFIED, PAK, pp. 517-524.
ISBN 0780392477
Abstract
Unified Enterprise application security is a newly emerging approach for providing protection against application level attacks. Conventional application security approaches that embed security into each critical application results into scattered security mechanism, which is not only difficult to manage but also creates security loopholes, Therefore, new unified enterprise application security concept is evolving in the industry that consists of centralized authentication, access control, incident response and auditing. Industries such as Computer Associate, Cerebit, Entrust, Evidian, IBM Tivoli, Netegrity, Oblix and SunOne have comes up with the identity and access management solutions that are based on this concept. Significant amount of misunderstanding exists in the industry and research community about appropriate features of such a unified product. Therefore we have proposed new enterprise application security (EAS) comparison framework to compare existing enterprise application security products. This framework helps an enterprise in selecting appropriate application security product. From comparison we found that Computer Associate and Netegrity solutionn are the best available solutions, however none of the current available solutions are providing complete enterprise application security. Therefore we have proposed new unified enterprise application security architecture. This architecture provides all basic information security and other critical services such as, auditing, reporting, authentication, access control, confidentiality, integrity, commitment to standards, incident response, scalability, flexibility, manageability, and compliance of regulatory mandates.
| Item Type: | Book Section |
|---|---|
| Uncontrolled Keywords: | application security,identity and access management,unified architecture,engineering(all) ,/dk/atira/pure/subjectarea/asjc/2200 |
| Faculty \ School: | Faculty of Science > School of Computing Sciences |
| UEA Research Groups: | Faculty of Science > Research Groups > Cyber Security Privacy and Trust Laboratory |
| Related URLs: | |
| Depositing User: | LivePure Connector |
| Date Deposited: | 16 Aug 2022 15:31 |
| Last Modified: | 07 May 2023 06:31 |
| URI: | https://ueaeprints.uea.ac.uk/id/eprint/87317 |
| DOI: | 10.1109/ICET.2005.1558935 |
Actions (login required)
 |
View Item |