Security Management Strategies for the CIOAccess "Review: RSA ClearTrust 5.5 secure federated identity management system"
This article is part of the January 2004 issue of IDSes takes aim: Emerging "target-based" systems improve intrusion defense
Secure (SSO) single sign-on to multiple websites is the ultimate draw for emerging Web services. Security managers want to leverage architecture to save costs and increase user productivity. That means extending digital identities across applications that reside on multiple platforms and domains inside and outside the enterprise. RSA Security's ClearTrust 5.5 is designed to deliver SSO through federated identity, user management support and dynamic transactional authorization for multipartner Web services. ClearTrust 5.5 provides SAML-based identity and authentication via a Federated Identity Management (FIM) module. Its API allows developers to bundle authentication and authorization requests from legacy and new applications. The release also features user management enhancements and automated workflow to authorize account creation, group assignment, profile updates and password resets. It includes transactional Smart Rules, which enable dynamic look up in databases and LDAP directories to support authorization decisions. While ClearTrust's federated ... Access >>>
Access TechTarget
Premium Content for Free.
What's Inside
Features
-
-
'Targeted' perimeter defense improves network-based intrusion detection systems
by Joel Snyder
Target-based IDSes squelch network noise to pinpoint the alerts you really care about. We review three solutions to see if they hit the bull's-eye.
-
Microsoft Trustworthy Computing causes strategic conflict around security
by Lawrence M. Walsh
Two years into Trustworthy Computing, the software giant faces the daunting challenge of winning and keeping customers while grappling with periodic setbacks.
-
Ron Rivest, RSA Algorithm Creator, discusses issues with micropayments
by Andrew Briney
Legendary cryptographer Ron Rivest has a reputation for tackling "hard" security problems. Up next: Micropayments.
-
'Targeted' perimeter defense improves network-based intrusion detection systems
by Joel Snyder
-
-
Passive scanning: A new take on network vulnerability scanning
by Joel Snyder
Learn about the benefits and risks of passive network vulnerability scanning.
-
Business continuity roles improve security incident management
by Fred Trickey
IT personnel may be front-line responders, but if they "own" incident management, your enterprise is at risk. Here's a business blueprint for an effective security incident management program with business continuity roles.
-
Review: RSA ClearTrust 5.5 secure federated identity management system
by George Wrenn
RSA ClearTrust 5.5 eases the administration of securing Web services identity management across business partners' systems.
-
Passive scanning: A new take on network vulnerability scanning
by Joel Snyder
-
Columns
-
Secure coding essential to risk mitigation planning
by Andrew Briney, Information Security magazine
Information Security magazine's editorial director Andrew Briney talks about the lack of incentive for making code more secure.
-
Examining hacker bounty pros and cons: Do they stop computer hackers?
A hacker bounty could create a new benchmark for hackers to measure themselves, so do bounties stop computer hackers?
-
Understanding the Open Systems Interconnection model
by Jay Heiser, Contributor
It's time to take the Open Systems Interconnection (OSI) model up a notch to the human layer.
-
Spammers drive organizations to block Internet traffic to stop attacks
by Dana W. Paxson
Spammers and hackers are driving organizations -- and nations -- to block Internet traffic in order to stop attacks.
-
Secure coding essential to risk mitigation planning
by Andrew Briney, Information Security magazine
More Premium Content Accessible For Free
Unlock new pathways to network security architecture
E-Zine
Network security architecture is showing its age at many organizations. With new technology, different data types, and use of multi-generations of ...
Emerging threat detection techniques and products
E-Handbook
Advanced persistent threat (APT) has been a used and abused term in the security industry, but security experts say targeted attacks are a growing ...
The rapid evolution of MDM solutions
E-Zine
Mobile device management (MDM) continues to grow at a feverish pace, both in terms of adoption and mobile security features. BYOD policies, and the ...