Comparative analysis and design philosophy of next generation unified enterprise application security

Shaikh, Riaz A., Rajput, Saeed, Zaidi, S. M.H. and Sharif, Kashif (2005) Comparative analysis and design philosophy of next generation unified enterprise application security. In: Proceedings - Thirteenth International Symposium on Temporal Representation and Reasoning, TIME 2006. Proceedings - IEEE 2005 International Conference on Emerging Technologies, ICET 2005 . UNSPECIFIED, PAK, pp. 517-524. ISBN 0780392477

Full text not available from this repository. (Request a copy)

Abstract

Unified Enterprise application security is a newly emerging approach for providing protection against application level attacks. Conventional application security approaches that embed security into each critical application results into scattered security mechanism, which is not only difficult to manage but also creates security loopholes, Therefore, new unified enterprise application security concept is evolving in the industry that consists of centralized authentication, access control, incident response and auditing. Industries such as Computer Associate, Cerebit, Entrust, Evidian, IBM Tivoli, Netegrity, Oblix and SunOne have comes up with the identity and access management solutions that are based on this concept. Significant amount of misunderstanding exists in the industry and research community about appropriate features of such a unified product. Therefore we have proposed new enterprise application security (EAS) comparison framework to compare existing enterprise application security products. This framework helps an enterprise in selecting appropriate application security product. From comparison we found that Computer Associate and Netegrity solutionn are the best available solutions, however none of the current available solutions are providing complete enterprise application security. Therefore we have proposed new unified enterprise application security architecture. This architecture provides all basic information security and other critical services such as, auditing, reporting, authentication, access control, confidentiality, integrity, commitment to standards, incident response, scalability, flexibility, manageability, and compliance of regulatory mandates.

Item Type: Book Section
Uncontrolled Keywords: application security,identity and access management,unified architecture,engineering(all) ,/dk/atira/pure/subjectarea/asjc/2200
Faculty \ School: Faculty of Science > School of Computing Sciences
Related URLs:
Depositing User: LivePure Connector
Date Deposited: 16 Aug 2022 15:31
Last Modified: 22 Oct 2022 23:58
URI: https://ueaeprints.uea.ac.uk/id/eprint/87317
DOI: 10.1109/ICET.2005.1558935

Actions (login required)

View Item View Item