Web Authentication and Access Control

MUST READ Identity and Access Management Services, Systems and Technologies SECURITY SCHOOL - This Security School explores critical topics related to helping security practitioners establish and maintain an effective identity and access management plan.

NEWS: 1 - 3 of 36

	Group to shed light on secure identity management threats SearchSecurity.com | 27 Oct 2009 ARTICLE - Identity management technologies are struggling to keep pace with constantly evolving nature of attacks, according to the Center for Applied Identity Management Research (CAIMR).

	Kaminsky reveals key flaws in X.509 SSL certificates at Black Hat SearchSecurity.com | 29 Jul 2009 ARTICLE - Researcher Dan Kaminsky returned to Black Hat with new research on X.509 certificates, explaining an attack method that could enable malicious hackers to spoof SSL certificates.

	Sun launches open source OpenSSO for identity management SearchSecurity.com | 30 Sep 2008 ARTICLE - Sun integrates access management, federation and secure Web services in its new OpenSSO Enterprise

	VIEW ALL NEWS ON WEB AUTHENTICATION AND ACCESS CONTROL

EXPERT TECHNICAL ADVICE: 1 - 3 of 49

WEB AUTHENTICATION AND ACCESS CONTROL EXPERTS
			Randall Gamby, featured expert ASK A QUESTION

	How to confirm the receipt of an email with security protocols 22 Oct 2009 EXPERT ANSWER - Many websites try to ensure secure registrations by sending email confirmations. But how is it possible to confirm receipt of that email by the correct recipient? Identity and access management expert Randall Gamby weighs in.

	How to use single sign-on for Web access control to prevent malware 10 Mar 2009 TIP - Web-based applications are popping up everywhere, and new worms and viruses are being developed just as quickly to exploit them.

	Can mutual authentication beat phishing or man-in-the-middle attacks? 25 Nov 2008 EXPERT ANSWER - What's the best way to prevent phishing and man-in-the-middle attacks? IAM expert David Griffeth explains the benefits of mutual authentication over one-way SSL.

	VIEW ALL EXPERT TECHNICAL ADVICE ON WEB AUTHENTICATION AND ACCESS CONTROL

REFERENCE & LEARNING: 1 - 3 of 6

	Information Security Decisions Session Downloads Security Media Group | 23 Oct 2006 SESSION DOWNLOADS - Session Downloads from Information Security Decisions 2006 Conference.

	How to build an identity and access management architecture 16 Aug 2006 IDENTITY AND ACCESS MANAGEMENT SECURITY SCHOOL - Learn the essentials of identity and access management, from the role of directories to effectively establishing approval workflows.

	Controlling Web access with Apache O'Reilly | 05 Oct 2005 BOOK CHAPTER - How to meet access control requirements with Apache and IIS Web servers.

	VIEW ALL REFERENCE & LEARNING ON WEB AUTHENTICATION AND ACCESS CONTROL

MAGAZINE CONTENT (free subscription required): 1 - 3 of 9

	Schneier-Ranum Face-Off: Is Perfect Access Control Possible? Information Security Magazine | 03 Sep 2009 COLUMNS - Security experts Bruce Schneier and Marcus Ranum debate whether perfect access control is possible.

	Changing times for identity management Information Security Magazine | 07 May 2009 FEATURES - Identity management technology is adapting to meet enterprise needs. Learn what products can improve security and ease compliance.

	Shared Identity Providers Could Soothe Password Chaos Information Security Magazine | 01 Sep 2008 COLUMNS - A security model that requires people to remember multiple passwords and logins has to change.

	VIEW ALL MAGAZINE CONTENT ON WEB AUTHENTICATION AND ACCESS CONTROL

WEBCASTS: 1 - 1 of 1

Safeguard Web and Email Traffic to Solve Email-Related Compliance Issues - Vendor Webcast VIEW WEBCAST PREMIERED:   18 OCT 2006, 14:00 EDT (18:00, GMT) SUMMARY:   MSN, Yahoo, Google, and other webmail providers leave your company vulnerable to exposure of customer data, and can potentially threaten the integrity of your financial information. Attend this webcast and discover how to effectively protect your email messages and remain compliant with multiple regulations.

	VIEW ALL WEBCASTS ON WEB AUTHENTICATION AND ACCESS CONTROL

DEFINITIONS: 1 - 3 of 7

	knowledge-based authentication 10 Feb 2009 WORD - What is knowledge-based authentication? Knowledge-based authentication (KBA) is an authentication scheme in which the user is asked to answer at least one "secret" question. KBA is often used as a component in multifactor ...

	multifactor authentication (MFA) 27 Mar 2007 WORD - Multifactor authentication (MFA) is a security system in which more than one form of authentication is implemented to verify the legitimacy of a transaction. In contrast, single factor authentication (SFA) involves only a ...

	identity chaos 26 Jun 2003 WORD - Identity chaos (sometimes called password chaos) is a situation in which users have multiple identities and passwords across a variety of networks, applications, computers and/or computing devices. To further complicate ...

	VIEW ALL DEFINITIONS ON WEB AUTHENTICATION AND ACCESS CONTROL

	SEE ALSO - Topics Related to Web Authentication and Access Control:  User Authentication Services, Identity Management Technology and Strategy