m韩国综艺节目-Integrated Security Architecture.ppt

Integrated Security Architecture James Andoniadis IBM Canada CEO View: Increased Collaboration Brings Rewards Layers of security Pre SOA Security: Enforcement Decision Points Directory Management View Identity and Access Management Portfolio Governments as Identity Providers Roles: Identity Provider and Service Provider Federated Identity Standards Agenda Enterprise Security Architecture – MASS Intro Identity, Access, and Federated Identity Management SOA Security SOA Security Encompass all Aspects of Security Message-based Security : End-to-End Security Message-based security does not rely on secure transport message itself is encrypted ? message privacy message itself is signed ? message integrity message contains user identity ? proof of origin Web Service Security Specifications Roadmap SOAP Message Security: Extensions to Header SOAP Header allows for extensions OASIS standard “WS-Security: SOAP Message Security” defines XML for Tokens, Signatures and Encryption defines how these elements are included in SOAP Header Security Drill Down Moving to SOA – Accommodate Web Services Moving to SOA – Accommodate Web Services Moving to SOA, Adding the ESB…(Mandatory Scary Picture) Further Reading On Demand Operating Environment: Security Considerations in an Extended Enterprise /abstracts/redp3928.html?Open Web Services Security Standards, Tutorials, Papers /developerworks/views/webservices/standards.jsp /developerworks/views/webservices/tutorials.jsp / Websphere Security Fundamentals / WAS 6.0 Security Handbook /redpieces/abstracts/redp3944.html?Open /redpieces/abstracts/sg246316.html?Open IBM Tivoli Product Home Page /software/tivoli/solutions/security/ Summary End-to-end Security Integration is complex Web Services and SOA security are emerging areas Moving from session level security to message level security Identity Management incorporates several security services, but other security services need to be integrated as well Audit and Event Ma