Web Authentication and Access Control

MUST READ Identity and Access Management Services, Systems and Technologies SECURITY SCHOOL - This Security School explores critical topics related to helping security practitioners establish and maintain an effective identity and access management plan.

NEWS: 1 - 3 of 34

	Sun launches open source OpenSSO for identity management SearchSecurity.com | 30 Sep 2008 ARTICLE - Sun integrates access management, federation and secure Web services in its new OpenSSO Enterprise

	Kerberos: Authentication with some drawbacks SearchSecurity.com | 02 Apr 2008 ARTICLE - Kerberos is one of the most-widely used authentication methods today, but experts explain that it comes with some weaknesses.

	Kerberos security evolves for B2B, mobile tech SearchSecurity.com | 02 Apr 2008 ARTICLE - Kerberos is a dominant authentication protocol, embedded in Windows, Solaris and multiple Linux flavors. But with new threats and new technology, an upgrade is in order.

	VIEW ALL NEWS ON WEB AUTHENTICATION AND ACCESS CONTROL

EXPERT TECHNICAL ADVICE: 1 - 3 of 48

WEB AUTHENTICATION AND ACCESS CONTROL EXPERTS
			David Griffeth, featured expert Vice President of Business Line Integration, RBS Citizens Bank ASK A QUESTION

	How to use single sign-on for Web access control to prevent malware 10 Mar 2009 TIP - Web-based applications are popping up everywhere, and new worms and viruses are being developed just as quickly to exploit them.

	Can mutual authentication beat phishing or man-in-the-middle attacks? 25 Nov 2008 EXPERT ANSWER - What's the best way to prevent phishing and man-in-the-middle attacks? IAM expert David Griffeth explains the benefits of mutual authentication over one-way SSL.

	Could someone place a rootkit on an internal network through a router? 05 Nov 2008 EXPERT ANSWER - If a hacker gains control of a router and then uploads a new configuration opening ports up for communication, it may be possible to place a rootkit on the internal network. In this IAM expert response, learn how this attack ...

	VIEW ALL EXPERT TECHNICAL ADVICE ON WEB AUTHENTICATION AND ACCESS CONTROL

REFERENCE & LEARNING: 1 - 3 of 6

	Information Security Decisions Session Downloads Security Media Group | 23 Oct 2006 SESSION DOWNLOADS - Session Downloads from Information Security Decisions 2006 Conference.

	How to build an identity and access management architecture 16 Aug 2006 IDENTITY AND ACCESS MANAGEMENT SECURITY SCHOOL - Learn the essentials of identity and access management, from the role of directories to effectively establishing approval workflows.

	Controlling Web access with Apache O'Reilly | 05 Oct 2005 BOOK CHAPTER - How to meet access control requirements with Apache and IIS Web servers.

	VIEW ALL REFERENCE & LEARNING ON WEB AUTHENTICATION AND ACCESS CONTROL

MAGAZINE CONTENT (free subscription required): 1 - 3 of 8

	Changing times for identity management Information Security Magazine | 07 May 2009 FEATURES - Identity management technology is adapting to meet enterprise needs. Learn what products can improve security and ease compliance.

	Shared Identity Providers Could Soothe Password Chaos Information Security Magazine | 01 Sep 2008 COLUMNS - A security model that requires people to remember multiple passwords and logins has to change.

	Survey: Security Pros Identify Priorities for 2008 Information Security Magazine | 01 Feb 2008 FEATURES - Security professionals prioritize mobility and security, identity and access management, protecting data and intellectual property and vulnerability management.

	VIEW ALL MAGAZINE CONTENT ON WEB AUTHENTICATION AND ACCESS CONTROL

WEBCASTS: 1 - 1 of 1

Safeguard Web and Email Traffic to Solve Email-Related Compliance Issues - Vendor Webcast VIEW WEBCAST PREMIERED:   18 OCT 2006, 14:00 EDT (18:00, GMT) SUMMARY:   MSN, Yahoo, Google, and other webmail providers leave your company vulnerable to exposure of customer data, and can potentially threaten the integrity of your financial information. Attend this webcast and discover how to effectively protect your email messages and remain compliant with multiple regulations.

	VIEW ALL WEBCASTS ON WEB AUTHENTICATION AND ACCESS CONTROL

DEFINITIONS: 1 - 3 of 7

	knowledge-based authentication 10 Feb 2009 WORD - What is knowledge-based authentication? Knowledge-based authentication (KBA) is an authentication scheme in which the user is asked to answer at least one "secret" question. KBA is often used as a component in multifactor ...

	multifactor authentication (MFA) 27 Mar 2007 WORD - Multifactor authentication (MFA) is a security system in which more than one form of authentication is implemented to verify the legitimacy of a transaction. In contrast, single factor authentication (SFA) involves only a ...

	identity chaos 26 Jun 2003 WORD - Identity chaos (sometimes called password chaos) is a situation in which users have multiple identities and passwords across a variety of networks, applications, computers and/or computing devices. To further complicate ...

	VIEW ALL DEFINITIONS ON WEB AUTHENTICATION AND ACCESS CONTROL

	SEE ALSO - Topics Related to Web Authentication and Access Control:  Identity Management Technology and Strategy, User Authentication Services