Coding with Identity Management & Security
|
|
|
- Derick Pierce
- 6 years ago
- Views:
Transcription
1 Coding with Identity Management & Security Part 2 of Identity Management with Progress OpenEdge Peter Judge OpenEdge Development pjudge@progress.com
2 What Is Identity Management? Identity management is all about trust relationships It s about protecting your business data You make security decisions on behalf of your customers understand the maximum loss they might suffer 2
3 What Is Identity Management? It s about protecting your business data by Controlling and verifying who accesses your data Controlling what they can do with your data Reviewing what they did with your data Maintaining information about your users Authentication Authorisation Auditing Administration 3
4 Getting a Passport me 1 2 application forms passport issuing authority my permanent record passport 3 4
5 Using a Passport me passport 1 2 immigration visa checks entry stamp conference 3 5
6 Application Flow: Login user interface claims / assertions security token security token service authentication systems & domains 6
7 Application Flow: Business Logic user interface security token authentication authorisation auditing application business logic 7
8 Authorisation: Defence in Depth Physical Security Operating System Network AppServer Activate Procedure Service Interface Business Logic Language & database Doors, locks, guards Login, ACL, SELinux Firewalls, SSH/TLS SESSION:EPORT Service name Operation name Roles Multi-tenancy, CAN-*, TDE 8
9 If When Authorisation Fails Record Rewind The deeper you are in the stack, the harder it is to unwind The deeper you are in the stack, the less info you have Return Nondescript error messages undo, throw new AppError( substitute("user &1 not authorised for service &2", phcp:qualified-user-id, pcservicename)). undo, throw new AppError("User not authorised for service"). 9
10 Roles & Responsibilities Anonymous Customer Employee System See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services Level of trust 10
11 Authorisation: Defence in Depth Physical Security Operating System Network AppServer Activate Procedure Service Interface Business Logic Language & database Doors, locks, guards Login, ACL, SELinux Firewalls, SSH/TLS SESSION:EPORT Service name Operation name Roles Multi-tenancy, CAN-*, TDE 11
12 What Are Domains? A group of users with a common set of Roles and responsibilities Level of security Data access privileges Also configured in db meta-schema Authentication systems Tenants _sec-authentication-domain _Domain-name _Domain-type _Domain-description _Domain-access-code _Domain-runtime-options _Tenant-name _Domain-enabled 10.1A
13 Roles & Responsibilities: By Business Role System See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services Domain 13
14 Roles & Responsibilities: By Business Role System Application Admin DB Admin See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services @db-admin.system 14
15 Roles & Responsibilities: By Business Role Employee See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services Domain 15
16 Roles & Responsibilities: By Business Role Employee Customer Service HR Sales See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services @sales.employee 16
17 Roles & Responsibilities: By Tenancy Employee Tenant Aye Tenant Bee Tenant Sea See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services @employee.sea 17
18 Roles & Responsibilities: By Location Employee EMEA Americas APAC See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services @apac.employee 18
19 Roles & Responsibilities: By Tenancy and Business Role Customer Service Employee Tenant Aye Tenant Bee Tenant Sea See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services @cs.employee.sea 19
20 _File Operations find _File where _File-Name eq "Customer" _Desc : "Customer master data" _Can-Create : "*@cs.employee.*, *@app-admin.system,!*@customer" _Can-Write : "*@cs.employee.*, *@app-admin.system,!*@customer" _Can-Delete : "*@cs.employee.*, *@app-admin.system,!*@customer" _Can-Read : "*" find _File where _File-Name eq "ShoppingCart" _Desc : "Customer Shopping Cart data" _Can-Create : "*@customer, *@cs.employee.*, *@app-admin.system" _Can-Write : "*@customer, *@cs.employee.*, *@app-admin.system" _Can-Delete : "*@customer, *@cs.employee.*, *@app-admin.system" _Can-Read : "*" find _File where _File-Name eq "ApplicationUser" _Desc : "Application login data" _Can-Create : "*@cs.employee.*, *@jane@app-admin.system" _Can-Write : "*@cs.employee.*, *@jane@app-admin.system" _Can-Delete : "*@cs.employee.*, *@jane@app-admin.system" _Can-Read : "*"
21 Roles & Responsibilities Anonymous Customer Employee System See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services Level of trust 21
22 Roles Roles a way of mapping sets of capabilities to classes of users May not serve the principle of least privilege (which states that one should have the minimal privileges necessary, and no more) On the other end of the spectrum, one can define one role for every set of resource capabilities one might want to allow Map roles to static sets of capabilities Role definition from OWASP 22
23 Authorisation: Defence in Depth Physical Security Operating System Network AppServer Activate Procedure Service Interface Business Logic Language & database Doors, locks, guards Login, ACL, SELinux Firewalls, SSH/TLS SESSION:EPORT Service name Operation name Roles Multi-tenancy, CAN-*, TDE 23
24 Configuration: Roles create SecurityRole. Name = 'ShoppingCart.Data.Create'. Creator = 'jane@app-admin.system'. Description = 'Allows create access to the shopping cart table'. create SecurityRole. Name = 'ShoppingCart.Data.Write'. Creator = 'jane@app-admin.system'. Description = 'Allows write access to the shopping cart table'. create SecurityRole. Name = 'ShoppingCart.Data.Delete'. Creator = 'jane@app-admin.system'. Description = 'Allows delete access to the shopping cart table'.
25 Configuration: Granting Access create GrantedRole. Name = 'ShoppingCart.Data.Create'. Grantee = '*@customer' /* one record per domain */ Grantor = 'jane@app-admin.system'. create GrantedRole. Name = 'ShoppingCart.Data.Write'. Grantee = '*@customer' /* one record per domain */ Grantor = 'jane@app-admin.system'. create GrantedRole. Name = 'ShoppingCart.Data.Read'. Grantee = '*@customer' /* one record per domain */ Grantor = 'jane@app-admin.system'. create GrantedRole. Name = 'ShoppingCart.Data.Delete'. Grantee = 'supervisor@app-admin.system'. /* one record per user */ Grantor = 'jane@app-admin.system'.
26 Using Roles /* runs after the user has been successfully authenticated */ for each GrantedRole where Grantee = hcp:qualified-user-id or Grantee = '*@' + hcp:domain-name: /* amy@customer /* *@customer */ */ hcp:roles = GrantedRole.Name + ',' + hcp:roles. end. /* Roles: ShoppingCart.Data.Write, ShoppingCart.Data.Create... */ /* later, when the user attempts access */ pcoperation = 'ShoppingCart.Data.Create'. if not can-do(hcp:roles, pcoperation) then undo, throw new AppError('User not authorised for operation').
27 Authorisation: Defence in Depth Physical Security Operating System Network AppServer Activate Procedure Service Interface Business Logic Language & database Doors, locks, guards Login, ACL, SELinux Firewalls, SSH/TLS SESSION:EPORT Service name Operation name Roles Multi-tenancy, CAN-*, TDE 27
28 Configuration: Operation Access create SecurityRole. Name = 'ShoppingCart.Service.UpdateCart'. Creator = 'jane@app-admin.system'. Description = 'Allows access to Update Shopping Cart operation'. create SecurityRole. Name = 'ShoppingCart.Service.CreateCart'. Creator = 'jane@app-admin.system'. Description = 'Allows access to Create Shopping Cart operation'. create SecurityRole. Name = 'ShoppingCart.Service.DeleteCart'. Creator = 'jane@app-admin.system'. Description = 'Allows access to Delete Shopping Cart operation'. create SecurityRole. Name = 'ShoppingCart.Service.ReadCart'. Creator = 'jane@app-admin.system'. Description = 'Allows access to Read Shopping Cart operation'.
29 Using Operation Access /* BusinessLogic/GetShoppingCart.p */ routine-level on error undo, throw. {dsshoppingcart.i} procedure UpdateShoppingCartService: define input-output parameter dataset for dsshoppingcart. Security.AuthorisationService:AuthoriseOperation( 'ShoppingCart.Service.UpdateCart'). ShoppingCartService:Instance:UpdateShoppingCartService( input-output dataset dsshoppingcart by-reference). end procedure.
30 Roles & Responsibilities Anonymous Customer Employee System See catalogue Modify catalogue Update shopping cart Add users Dump & load data Provision services Level of trust 30
31 Authorisation: Defence in Depth Physical Security Operating System Network AppServer Activate Procedure Service Interface Business Logic Language & database Doors, locks, guards Login, ACL, SELinux Firewalls, SSH/TLS SESSION:EPORT Service name Operation name Roles Multi-tenancy, CAN-*, TDE 31
32 Configuration: Service Names SecurityRole.Name = 'ShoppingCart.Service.Access'. SecurityRole.Description = 'Allows access to the ShoppingCart service'. SecurityRole.Name = 'Customer.Service.Access'. SecurityRole.Description = 'Allows access to the Customer service'. define private temp-table ttservice no-undo field Service as character field Role as character create ttservice. Service = "BusinessLogic/GetShoppingCart.p". Role = "ShoppingCart.Service.Access". create ttservice. Service = "BusinessLogic/GenericFetchData.p". Role = "ShoppingCart.Service.Access".
33 Authorisation: Defence in Depth Physical Security Operating System Network AppServer Activate Procedure Service Interface Business Logic Language & database Doors, locks, guards Login, ACL, SELinux Firewalls, SSH/TLS SESSION:EPORT Service name Operation name Roles Multi-tenancy, CAN-*, TDE 33
34 AppServer Access ttservice.service = "BusinessLogic/GetShoppingCart.p". ttservice.role = "ShoppingCart.Service.Access". ttservice.service = "BusinessLogic/GenericFetchData.p". ttservice.role = "ShoppingCart.Service.Access". for each ttservice break by Service: if first-of(ttservice.service) then assign cexportlist = cexportlist + ',' + ttservice.service. end. session:export(cexportlist). ~
35 Application Flow: Business Logic user interface security token authentication authorisation auditing application business logic 35
36 Application Flow: Business Logic RUN GetShoppingCart.p ON SERVER happserver (OUTPUT DATASET dsshoppingcart) 1 user interface security token 2 authentication activate.p STS:ValidateToken (INPUT ctoken). authorisation security-policy:set-client (<<user>>) GetShoppingCart.p OUTPUT PARAM DATASET dsshoppingcart application business logic 3 auditing AuthoriseService ("GetShoppingCart.p"). deactivate.p security-policy:set-client (<<agent>>) 4 36
37 Application Flow: Business Logic RUN GetShoppingCart.p ON SERVER happserver (OUTPUT DATASET dsshoppingcart) 1 user interface security token 2 authentication activate.p STS:ValidateToken (INPUT ctoken). authorisation security-policy:set-client (<<user>>) GetShoppingCart.p OUTPUT PARAM DATASET dsshoppingcart application business logic 3 auditing AuthoriseService ("GetShoppingCart.p"). deactivate.p security-policy:set-client (<<agent>>) 4 37
38 Desktop.MainForm.cls method protected void RefreshCart(): define variable happserver as handle no-undo. run BusinessLogic/GetShoppingCart.p on happserver (input this-object:custnum, output dataset dsshoppingcart). open query qryshoppingcart preselect each ttshoppingcart. bsshoppingcart:handle = query qryshoppingcart:handle. query qryshoppingcart:reposition-to-row(1). end method.
39 Application Flow: Business Logic RUN GetShoppingCart.p ON SERVER happserver (OUTPUT DATASET dsshoppingcart) 1 user interface security token application business logic authentication activate.p authorisation /* pseudo-code as run by AppServer agent STS:ValidateToken */ if not can-do(session:export, (INPUT ctoken). request-info:procedurename) then undo, throw new Error(). security-policy:set-client (<<user>>) GetShoppingCart.p OUTPUT PARAM DATASET dsshoppingcart 3 AppServer 2 auditing AuthoriseService ("GetShoppingCart.p"). 4 deactivate.p security-policy:set-client (<<agent>>) SESSION:EPORT 39
40 Application Flow: Business Logic RUN GetShoppingCart.p ON SERVER happserver (OUTPUT DATASET dsshoppingcart) 1 user interface security token 2 authentication activate.p STS:ValidateToken (INPUT ctoken). authorisation security-policy:set-client (<<user>>) GetShoppingCart.p OUTPUT PARAM DATASET dsshoppingcart application business logic 3 auditing AuthoriseService ("GetShoppingCart.p"). deactivate.p security-policy:set-client (<<agent>>) 4 40
41 Security/Activate.p hclientprincipal = Security.SecurityTokenService:Instance: GetClientPrincipal( session:current-request-info:clientcontextid). /* authenticate client-principal */ security-policy:set-client(hclientprincipal). /* authorise service access */ Security.AuthorisationService:Instance :AuthoriseService( hclientprincipal, session:current-request-info:procedurename).
42 Security/Activate.p hclientprincipal = Security.SecurityTokenService:Instance: GetClientPrincipal( session:current-request-info:clientcontextid). /* authenticate client-principal */ security-policy:set-client(hclientprincipal). /* authorise service access */ Security.AuthorisationService:Instance :AuthoriseService( hclientprincipal, session:current-request-info:procedurename).
43 Security/Activate.p hclientprincipal = Security.SecurityTokenService:Instance: GetClientPrincipal( session:current-request-info:clientcontextid). /* authenticate client-principal */ security-policy:set-client(hclientprincipal). /* authorise service access */ Security.AuthorisationService:Instance :AuthoriseService( hclientprincipal, session:current-request-info:procedurename). Activate Procedure Service name
44 Security.AuthorisationService ttservice.service = "BusinessLogic/GetShoppingCart.p". ttservice.role = "ShoppingCart.Service.Access". ttservice.service = "BusinessLogic/GenericFetchData.p". ttservice.role = "ShoppingCart.Service.Access". method public void AuthoriseService( input phcp as handle, /* client-principal */ input pcservice as char): /* BusinessLogic/GetShoppingCart.p */ define variable lisauthorised as logical no-undo. lisauthorised = can-find( first ttservice where ttservice.service eq pcservicename). for each ttservice where ttservice.service eq pcservicename while lisauthorised: lisauthorised = not can-do(phcp:roles, ttservice.role). end. if not lisauthorised then undo, throw new AppError("User not authorised for service"). end method. Activate Procedure Service name
45 Application Flow: Business Logic RUN GetShoppingCart.p ON SERVER happserver (OUTPUT DATASET dsshoppingcart) 1 user interface security token 2 authentication activate.p STS:ValidateToken (INPUT ctoken). authorisation security-policy:set-client (<<user>>) GetShoppingCart.p OUTPUT PARAM DATASET dsshoppingcart application business logic 3 auditing AuthoriseService ("GetShoppingCart.p"). deactivate.p security-policy:set-client (<<agent>>) 4 45
46 BusinessLogic/GetShoppingCart.p {BusinessLogic/dsShoppingCart.i} define input parameter picustnum as integer. define output parameter dataset for dsshoppingcart. define variable obusinessentity as ShoppingCartBE no-undo. Security.AuthorisationService:Instance :AuthoriseOperation("ShoppingCart.Service.ReadCart"). obusinessentity = new ShoppingCartBE(). obusinessentity:getcart( input picustnum, output dataset dsshoppingcart). /* eof */ Service Interface Operation name
47 Security.AuthorisationService method public void AuthoriseOperation( input pcoperation as character): define variable hcp as handle no-undo. hcp = security-policy:get-client(). if not can-do(hcp:roles, pcoperation) then undo, throw new AppError("User not authorised for service"). end method. Service Interface Operation name
48 BusinessLogic/GetShoppingCart.p {BusinessLogic/dsShoppingCart.i} define input parameter picustnum as integer. define output parameter dataset for dsshoppingcart. define variable obusinessentity as ShoppingCartBE no-undo. Security.AuthorisationService:Instance :AuthoriseOperation("ShoppingCart.Service.ReadCart"). obusinessentity = new ShoppingCartBE(). obusinessentity:getcart( input picustnum, output dataset dsshoppingcart). /* eof */
49 ShoppingCartBE.cls {BusinessLogic/dsShoppingCart.i} method public void GetCart( input parameter picustnum as integer, output parameter dataset dsshoppingcart): define data-source srccart for ShoppingCart. Security.AuthorisationService:Instance :AuthoriseOperation("ShoppingCart.Data.Read"). data-source srccart:fill-where-string = 'where CustNum eq ' + quoter(picustnum). buffer ttshoppingcart:attach-data-source(data-source srccart:handle). /* multi-tenancy magic happens here. CAN-READ too. Based on the asserted user via SECURITY-POLICY:GET-CLIENT */ dataset dsshoppingcart:fill(). buffer ttshoppingcart:detach-data-source(). end method. Business Logic Roles
50 ShoppingCartBE.cls {BusinessLogic/dsShoppingCart.i} method public void GetCart( input parameter picustnum as integer, output parameter dataset dsshoppingcart): define data-source srccart for ShoppingCart. Security.AuthorisationService:Instance :AuthoriseOperation("ShoppingCart.Data.Read"). data-source srccart:fill-where-string = 'where CustNum eq ' + quoter(picustnum). buffer ttshoppingcart:attach-data-source(data-source srccart:handle). /* multi-tenancy magic happens here. CAN-READ too. Based on the asserted user via SECURITY-POLICY:GET-CLIENT */ dataset dsshoppingcart:fill(). buffer ttshoppingcart:detach-data-source(). end method. Language & database Multi-tenancy, CAN-*, TDE
51 Desktop.MainForm.cls method protected void RefreshCart(): define variable happserver as handle no-undo. run BusinessLogic/GetShoppingCart.p on happserver (input this-object:custnum, output dataset dsshoppingcart). open query qryshoppingcart preselect each ttshoppingcart. bsshoppingcart:handle = query qryshoppingcart:handle. query qryshoppingcart:reposition-to-row(1). end method.
52 Application Security Principles Applications must have security designed in. Some proven application security principles 1. Identify and secure the weakest link 2. Practice defense in depth 3. Be reluctant to trust 4. Remember that hiding secrets is hard 5. Follow the principle of least privilege 6. Fail and recover securely 7. Compartmentalize 8. Keep it simple, stupid 9. Keep trust to yourself 10. Assume nothing Gary McGraw's 10 steps to secure software 52
53 Summary Identity management is a process that helps protect your business data Strength in depth OpenEdge provides components of identity management CLIENT-PRINCIPAL Multi-tenancy, Domains & Authentication Systems Run with least privilege Use Domains and Roles to keep privileges tight Reset to lower privileges when done Configuration > Code Code is the weakest link 53
54 Extra Materials This session Slides to be posted on Exchange website Other Exchange sessions Identity Management Basics (Part 1) Peter Judge Workshop: Progress OpenEdge Security Brian Bowman, Rob Marshall et al Transparent Data Encryption Doug Vanek Introduction to Multi-tenancy Gus Bjorklund Security and Session Management with Mobile Devices Mike Jacobs & Wayne Henshaw Image Credits: Passport designed by Catia G, Time designed by wayne25uk, Database designed by Anton Outkine, Code designed by Nikhil Dev, Ninja designed by John O'Shea, Imposter designed by Luis Prado, User designed by T. Weber, Fingerprint designed by Andrew Forrester, Document designed by Samuel Green, Certificate designed by VuWorks, Network designed by Ben Rex Furneaux, Beer designed by Leigh Scholten; all from The Noun Project 54
55
Identity Management Basics
Identity Management Basics Part 1 of Identity Management with Progress OpenEdge Peter Judge OpenEdge Development pjudge@progress.com What Is Identity Management? Identity management is all about trust
Data encryption & security. An overview
Data encryption & security An overview Agenda Make sure the data cannot be accessed without permission Physical security Network security Data security Give (some) people (some) access for some time Authentication
MultiTenancy - An Overview For Techies
MultiTenancy - An Overview For Techies Timothy D. Kuehn Senior OpenEdge Consultant timk@tdkcs.ca tim.kuehn@gmail.com Ph 519-576-8100 Cell: 519-781-0081 MultiTenancy for Developers PUG Challenge 2013 -
Introduction to Multi-tenancy. Gus Bjorklund October 2013
Introduction to Multi-tenancy Gus Bjorklund October 2013 Introduction The session explores the upcoming inbuilt multi-tenancy capabilities included in the OpenEdge 11 RDBMS. Learn how multi-tenant support
Progress OpenEdge Multi-tenant Database
Progress OpenEdge Multi-tenant Database Workshop Gus Björklund, Instructor gus@progress.com Introduction This workshop is intended to introduce you to the inbuilt multi-tenant capabilities of the OpenEdge
CREATING AND USING THE CLIENT-PRINCIPAL
CREATING AND USING THE CLIENT-PRINCIPAL Fellow and OpenEdge Evangelist Document Version 1.0 December 2011 December, 2011 Page 1 of 9 DISCLAIMER Certain portions of this document contain information about
Change Data Capture OpenEdge 11.7
Change Data Capture OpenEdge 11.7 Workshop and Discussion Brian Bowman Product Management, OpenEdge November 2017 Login Information On your page is the Remote Desktop Login Login: \Administrator Password:
CSE 565 Computer Security Fall 2018
CSE 565 Computer Security Fall 2018 Lecture 12: Database Security Department of Computer Science and Engineering University at Buffalo 1 Review of Access Control Types We previously studied four types
Copyright
This video looks at Claim Based/Identity Based systems using Active Directory Federation Services as an example. An example of a claim based system is where the user logs into a system like a web page
CS6501: Great Works in Computer Science
CS6501: Great Works in Computer Science Jan. 29th 2013 Longze Chen The Protection of Information in Computer Systems Jerome H. Saltzer and Michael D. Schroeder Jerry Saltzer Michael Schroeder 1 The Meaning
European General Data Protection Regulation is active in 2018! How to master the challenge of Data Protection and Security?
European General Data Protection Regulation is active in 2018! How to master the challenge of Data Protection and Security? Considerations for Your Progress OpenEdge Application Conor Patten, Laurent Kieffer
European General Data Protection Regulation is looming in 2018! How to master the challenge of Data Protection and Security?
European General Data Protection Regulation is looming in 2018! How to master the challenge of Data Protection and Security? Considerations for Your Progress OpenEdge Application Jarmo Nieminen, Laurent
Architecture Assessment Case Study. Single Sign on Approach Document PROBLEM: Technology for a Changing World
Technology for a Changing World Architecture Assessment Case Study Single Sign on Approach Document PROBLEM: Existing portal has Sign on Capabilities based on the SQL Server database and it s not having
Securing ArcGIS Services
Federal GIS Conference 2014 February 10 11, 2014 Washington DC Securing ArcGIS Services James Cardona Agenda Security in the context of ArcGIS for Server Background concepts Access Securing web services
Partner Center: Secure application model
Partner Center: Secure application model The information provided in this document is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including
Oracle Database 12c R2: Administration Workshop Ed 3 NEW
Oracle Database 12c R2: Administration Workshop Ed 3 NEW Duration: 5 Days What you will learn The Oracle Database 12c R2: Administration Workshop Ed 3 course is designed to provide you with a firm foundation
Oracle Database 12c R2: Administration Workshop Ed 3
Oracle University Contact Us: +27 (0)11 319-4111 Oracle Database 12c R2: Administration Workshop Ed 3 Duration: 5 Days What you will learn The Oracle Database 12c R2: Administration Workshop Ed 3 course
Training 24x7 DBA Support Staffing. Administering a SQL Database Infrastructure (40 Hours) Exam
Administering a SQL Database Infrastructure (40 Hours) Exam 70-764 Prerequisites Basic knowledge of the Microsoft Windows operating system and its core functionality. Working knowledge of Transact-SQL.
Real Application Security Administration
Oracle Database Real Application Security Administration Console (RASADM) User s Guide 12c Release 2 (12.2) E85615-01 June 2017 Real Application Security Administration Oracle Database Real Application
Web Security 2 https://www.xkcd.com/177/ http://xkcd.com/1323/ Encryption basics Plaintext message key secret Encryp)on Func)on Ciphertext Insecure network Decryp)on Func)on Curses! Foiled again! key Plaintext
Code performance. ABL Profiler & Indexes
Code performance ABL Profiler & Indexes compile-listing ain t enough Intro ABL Profiler: your new best friend Indexes: it's easier to find things quickly when you know where you left them Conclusion 2
2 Me. 3 The Problem. Speaker. Company. Ed Breay Sr. Sales Engineer, Hitachi ID Systems.
1 2 Me Speaker Ed Breay Sr. Sales Engineer, Hitachi ID Systems. Company Hitachi, Ltd.: a 100 year old Fortune 100 conglomerate. Hitachi ID Systems, Inc.: a 19 year old IAM software subsidiary. Headquarters
Extend EBS Using Applications Express
Extend EBS Using Applications Express John Peters JRPJR, Inc. Abstract Few people know about Oracle Applications Express (APEX) an actual free Oracle Tool included with your Oracle DB Licenses. How many
The Device Has Left the Building
The Device Has Left the Building Mobile Security Made Easy With Managed PKI Christian Brindley Principal Systems Engineer, Symantec Identity and Information Protection Agenda 1 2 3 Mobile Trends and Use
OpenEdge 11 Strategy & Roadmap. Jarmo Nieminen Senior Solution Engineer, Nordics
OpenEdge 11 Strategy & Roadmap Jarmo Nieminen Senior Solution Engineer, Nordics OpenEdge Vision The leading integrated Application Platform for Simplifying Development and Deployment of Responsive Business
Oracle Database 11g: Security Release 2
Oracle University Contact Us: 001-855-844-3881 & 001-800-514-06-97 Oracle Database 11g: Security Release 2 Duration: 5 Days What you will learn In this course, you'll learn how to use Oracle Database features
Course: Oracle Database 12c R2: Administration Workshop Ed 3
Course: Oracle Database 12c R2: Administration Workshop Ed 3 The Oracle Database 12c R2: Administration Workshop Ed 3 course is designed to provide you with a firm foundation in administration of an Oracle
Securing ArcGIS for Server. David Cordes, Raj Padmanabhan
Securing ArcGIS for Server David Cordes, Raj Padmanabhan Agenda Security in the context of ArcGIS for Server User and Role Considerations Identity Stores Authentication Securing web services Protecting
Securing ArcGIS Server Services An Introduction
2013 Esri International User Conference July 8 12, 2013 San Diego, California Technical Workshop Securing ArcGIS Server Services An Introduction David Cordes & Derek Law Esri - Redlands, CA Agenda Security
Microsoft Architecting Microsoft Azure Solutions.
Microsoft 70-535 Architecting Microsoft Azure Solutions https://killexams.com/pass4sure/exam-detail/70-535 QUESTION: 106 Your organization has developed and deployed several Azure App Service Web and API
Lotus Domino Security NSL, Web SSO, Notes ID vault. Collin Murray Program Director, Lotus Domino Product Management
Lotus Domino Security NSL, Web SSO, Notes ID vault Collin Murray Program Director, Lotus Domino Product Management Challenge: Reduce Cost of Ownership IBM Lotus Notes and Domino have been providing a secure
Protecting Information Assets - Week 10 - Identity Management and Access Control. MIS 5206 Protecting Information Assets
Protecting Information Assets - Week 10 - Identity Management and Access Control MIS5206 Week 10 Identity Management and Access Control Presentation Schedule Test Taking Tip Quiz Identity Management and
INFO-H-415 Project Overview- Security Database and SQL Server
INFO-H-415 Project Overview- Security Database and SQL Server Kirubel Yaekob Yasmine Daoud December 2017 1 Introduction A defense-in-depth strategy, with overlapping layers of security, is the best way
Microsoft Exam Questions and Answers (PDF) Microsoft Exam Questions BrainDumps
Microsoft 70-535 Dumps with Valid 70-535 Exam Questions PDF [2018] The Microsoft 70-535 Microsoft Architecting Microsoft Azure Solutions Exam exam is an ultimate source for professionals to retain their
Protect Your Application with Secure Coding Practices. Barrie Dempster & Jason Foy JAM306 February 6, 2013
Protect Your Application with Secure Coding Practices Barrie Dempster & Jason Foy JAM306 February 6, 2013 BlackBerry Security Team Approximately 120 people work within the BlackBerry Security Team Security
SAP Security in a Hybrid World. Kiran Kola
SAP Security in a Hybrid World Kiran Kola Agenda Cybersecurity SAP Cloud Platform Identity Provisioning service SAP Cloud Platform Identity Authentication service SAP Cloud Connector & how to achieve Principal
MongoDB Security (Users & Roles) MongoDB User Group 22 March 2017, Madrid
MongoDB Security (Users & Roles) MongoDB User Group 22 March 2017, Madrid Who am I Juan Roy Twitter: @juanroycouto Email: juanroycouto@gmail.com MongoDB DBA at Grupo Undanet 2 MongoDB - Characters The
Are You Sure Your AWS Cloud Is Secure? Alan Williamson Solution Architect at TriNimbus
Are You Sure Your AWS Cloud Is Secure? Alan Williamson Solution Architect at TriNimbus 1 60 Second AWS Security Review 2 AWS Terminology Identity and Access Management (IAM) - AWS Security Service to manage
Oracle Database 11g: Security Release 2
Oracle University Contact Us: + 38516306373 Oracle Database 11g: Security Release 2 Duration: 5 Days What you will learn In this course, students learn how they can use Oracle Database features to meet
Enhancing MySQL Security. Vinicius Grippa Percona
Enhancing MySQL Security Vinicius Grippa Percona About me Support Engineer at Percona since 2017 Working with MySQL for over 5 years - Started with SQL Server Working with databases for 7 years 2 Agenda
PASS4TEST. IT Certification Guaranteed, The Easy Way! We offer free update service for one year
PASS4TEST IT Certification Guaranteed, The Easy Way! \ http://www.pass4test.com We offer free update service for one year Exam : 1Z0-235 Title : Oracle 11i applications DBA:Fundamentals I Vendors : Oracle
SQL Server 2016 New Security Features. Gianluca Sartori
SQL Server 2016 New Security Features Gianluca Sartori Our Sponsors Gianluca Sartori Independent SQL Server consultant SQL Server MVP, MCTS, MCITP, MCT Works with SQL Server since version 7 DBA @ Scuderia
20764C: Administering a SQL Database Infrastructure
20764C: Administering a SQL Database Infrastructure Course Details Course Code: Duration: Notes: 20764C 5 days This course syllabus should be used to determine whether the course is appropriate for the
Oracle - Oracle Database 12c R2: Administration Workshop Ed 3
Oracle - Oracle Database 12c R2: Administration Workshop Ed 3 Code: Lengt h: URL: 12cDB-A 5 days View Online The Oracle Database 12c R2: Administration Workshop Ed 3 course is designed to provide you with
WAVE: A decentralised authorization system for IoT via blockchain smart contracts
WAVE: A decentralised authorization system for IoT via blockchain smart contracts Michael P Andersen, John Kolb, Kaifei Chen, Gabe Fierro, David E. Culler, Raluca Ada Popa The problem Authorization mechanisms
C1: Define Security Requirements
OWASP Top 10 Proactive Controls IEEE Top 10 Software Security Design Flaws OWASP Top 10 Vulnerabilities Mitigated OWASP Mobile Top 10 Vulnerabilities Mitigated C1: Define Security Requirements A security
IBM C Exam. Volume: 65 Questions
Volume: 65 Questions Question No: 1 A customer has a requirement which is currently unavailable in an out-of-the-box product. Who would be able to assist in troubleshooting the customer when developing
Tivoli Federated Identity Manager. Sven-Erik Vestergaard Certified IT Specialist Security architect SWG Nordic
Tivoli Federated Identity Manager Sven-Erik Vestergaard Certified IT Specialist Security architect SWG Nordic svest@dk.ibm.com IBM Software Day Vilnius 2009 Agenda IBM strategy on IAA What is a federation
Setting Up Jive for SharePoint Online and Office 365. Introduction 2
Setting Up Jive for SharePoint Online and Office 365 Introduction 2 Introduction 3 Contents 4 Contents Setting Up Jive for SharePoint Online and Office 365...5 Jive for SharePoint Online System Requirements...5
An Oracle White Paper September Security and the Oracle Database Cloud Service
An Oracle White Paper September 2012 Security and the Oracle Database Cloud Service 1 Table of Contents Overview... 3 Security architecture... 4 User areas... 4 Accounts... 4 Identity Domains... 4 Database
Integrating the Progress Rollbase Portal into OpenEdge Applications. Mike Fechner, Director, Consultingwerk Ltd.
Integrating the Progress Rollbase Portal into OpenEdge Applications Mike Fechner, Director, Consultingwerk Ltd. mike.fechner@consultingwerk.de Consultingwerk Ltd. Independent IT consulting organization
Managing Data in an Object World. Mike Fechner, Director, Consultingwerk Ltd.
Managing Data in an Object World Mike Fechner, Director, Consultingwerk Ltd. mike.fechner@consultingwerk.de Consultingwerk Ltd. Independent IT consulting organization Focusing on OpenEdge and.net Located
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in the InCommon Federation ( Federation ) enables a federation participating organization ("Participant") to use Shibboleth identity
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2 nd ed. Chapter 10 Authenticating Users
FIREWALLS & NETWORK SECURITY with Intrusion Detection and VPNs, 2 nd ed. Chapter 10 Authenticating Users Learning Objectives Explain why authentication is a critical aspect of network security Explain
Karthik Bharathy Program Manager, SQL Server Microsoft
Karthik Bharathy Program Manager, SQL Server Microsoft Key Session takeaways Understand the many views of SQL Server Look at hardening SQL Server At the network level At the access level At the data level
COURSE 20462C: ADMINISTERING MICROSOFT SQL SERVER DATABASES
Page 1 of 11 ABOUT THIS COURSE This five-day instructor-led course provides students with the knowledge and skills to maintain a Microsoft SQL Server 2014 database. The course focuses on teaching individuals
Identity Provider for SAP Single Sign-On and SAP Identity Management
Implementation Guide Document Version: 1.0 2017-05-15 PUBLIC Identity Provider for SAP Single Sign-On and SAP Identity Management Content 1....4 1.1 What is SAML 2.0.... 5 SSO with SAML 2.0.... 6 SLO with
Software as a Service Multi-tenant Data Architecture. Frederick Chong Architect DPE Architecture Strategy Microsoft Corporation
Software as a Service Multi-tenant Data Architecture Frederick Chong Architect DPE Architecture Strategy Microsoft Corporation Agenda SIMT principles and considerations Database options for storing multi-tenant
TEN LAYERS OF CONTAINER SECURITY
TEN LAYERS OF CONTAINER SECURITY Tim Hunt Kirsten Newcomer May 2017 ABOUT YOU Are you using containers? What s your role? Security professionals Developers / Architects Infrastructure / Ops Who considers
Show Manager. How To Enter
Show Manager How To Enter help@showmanager.com.au Table of Contents 2 1. Introduction 3 2. Select an Event 4 3. View Event Details 5 4. Create Entries 6 5. Review Entries 9 6. Shopping Cart 10 7. Check
Oracle Database. Installation and Configuration of Real Application Security Administration (RASADM) Prerequisites
Oracle Database Real Application Security Administration 12c Release 1 (12.1) E61899-04 May 2015 Oracle Database Real Application Security Administration (RASADM) lets you create Real Application Security
Application vulnerabilities and defences
Application vulnerabilities and defences In this lecture We examine the following : SQL injection XSS CSRF SQL injection SQL injection is a basic attack used to either gain unauthorized access to a database
Avanan for G Suite. Technical Overview. Copyright 2017 Avanan. All rights reserved.
Avanan for G Suite Technical Overview Contents Intro 1 How Avanan Works 2 Email Security for Gmail 3 Data Security for Google Drive 4 Policy Automation 5 Workflows and Notifications 6 Authentication 7
Understanding Perimeter Security
Understanding Perimeter Security In Amazon Web Services Aaron C. Newman Founder, CloudCheckr Aaron.Newman@CloudCheckr.com Changing Your Perspective How do I securing my business applications in AWS? Moving
02/11/2015. This is a slide for graphics (It has a white background)
This is a slide for graphics (It has a white background) 1 2 Now & Future Password 1 Password 2 Password 3 Password 4 GAfE, AzureAD, onprem AD. ChromeOS, PC, ios. Various web apps. Distributed. Last 10
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES
INCOMMON FEDERATION: PARTICIPANT OPERATIONAL PRACTICES Participation in InCommon Federation ( Federation ) enables the participant to use Shibboleth identity attribute sharing technologies to manage access
MS-20462: Administering Microsoft SQL Server Databases
MS-20462: Administering Microsoft SQL Server Databases Description This five-day instructor-led course provides students with the knowledge and skills to maintain a Microsoft SQL Server 2014 database.
DEFENSIVE PROGRAMMING. Lecture for EDA 263 Magnus Almgren Department of Computer Science and Engineering Chalmers University of Technology
DEFENSIVE PROGRAMMING Lecture for EDA 263 Magnus Almgren Department of Computer Science and Engineering Chalmers University of Technology Traditional Programming When writing a program, programmers typically
SQL Server Security. Marek
SQL Server Security Marek Chmel Lead Database Administrator @ AT&T MVP: Data Platform MCSE: Data Management and Analytics MCT: Regional Lead Certified Ethical Hacker CEHv8 marek.chmel@technet.ms @MarekChmel
OpenEdge Roadmap. Rob Straight Director, OpenEdge Product Management October 25, 2018
OpenEdge Roadmap Rob Straight Director, OpenEdge Product Management October 25, 2018 Disclaimer All roadmaps are for informational purposes only, and the reader is hereby cautioned that actual product
Code performance profiler & index rules. Paul Koufalis White Star Software
Code performance profiler & index rules Paul Koufalis White Star Software Paul Koufalis pk@wss.com Progress DBA and UNIX admin since 1994 Expert consulting related to technical aspects of Progress and
Enhanced OpenID Protocol in Identity Management
Enhanced OpenID Protocol in Identity Management Ronak R. Patel 1, Bhavesh Oza 2 1 PG Student, Department of Computer Engg, L.D.College of Engineering, Gujarat Technological University, Ahmedabad 2 Associate
PRACTICAL SECURITY PRINCIPLES FOR THE WORKING ARCHITECT. Eoin Woods,
PRACTICAL SECURITY PRINCIPLES FOR THE WORKING ARCHITECT Eoin Woods, Endava @eoinwoodz BACKGROUND Eoin Woods CTO at Endava (technology services, ~4000 people) 10 years in product development - Bull, Sybase,
Introduction to Security and User Authentication
Introduction to Security and User Authentication Brad Karp UCL Computer Science CS GZ03 / M030 14 th November 2016 Topics We ll Cover User login authentication (local and remote) Cryptographic primitives,
Distributed Systems 8. Remote Procedure Calls
Distributed Systems 8. Remote Procedure Calls Paul Krzyzanowski pxk@cs.rutgers.edu 10/1/2012 1 Problems with the sockets API The sockets interface forces a read/write mechanism Programming is often easier
How to Configure Authentication and Access Control (AAA)
How to Configure Authentication and Access Control (AAA) Overview The Barracuda Web Application Firewall provides features to implement user authentication and access control. You can create a virtual
DevOps Anti-Patterns. Have the Ops team deal with it. Time to fire the Ops team! Let s hire a DevOps unit! COPYRIGHT 2019 MANICODE SECURITY
DevOps Anti-Patterns Have the Ops team deal with it. Time to fire the Ops team! Let s hire a DevOps unit! 31 Anti-Pattern: Throw it Over the Wall Development Operations 32 Anti-Pattern: DevOps Team Silo
Oracle Database Security and Audit. Authentication and authorization
Copyright 2014, Oracle Database Security and Audit Beyond Checklists Authentication and authorization Copyright 2014, Learning objectives Understand authentication Understand authorization Understand the
Oracle 1Z MySQL 5.6 Database Administrator. Download Full Version :
Oracle 1Z0-883 MySQL 5.6 Database Administrator Download Full Version : http://killexams.com/pass4sure/exam-detail/1z0-883 D. The mysqld binary was not compiled with SSL support. E. The server s SSL certificate
Radius, LDAP, Radius used in Authenticating Users
CSCD 303 Lecture 5 Fall 2017 Kerberos Radius, LDAP, Radius used in Authenticating Users Introduction to Centralized Authentication Kerberos is for authentication only and provides Single Sign-on (SSO)
The Australian Privacy Act An overview of the Australian Privacy Principles (APPs) Author: Paul Green
The Australian Privacy Act An overview of the Australian Privacy Principles (APPs) Author: Paul Green INTRODUCTION If you are collecting or processing personal information then you are likely to be required
Cello How-To Guide. Membership Management
Cello How-To Guide Membership Management Contents 1 Membership Management... 3 1.1 Roles and Access provisions in CelloSaaS... 3 1.2 Add/Edit Role... 4 1.3 Delete Role... 4 1.4 Mapping Privilege to Roles...
Office 365 and Azure Active Directory Identities In-depth
Office 365 and Azure Active Directory Identities In-depth Jethro Seghers Program Director SkySync #ITDEVCONNECTIONS ITDEVCONNECTIONS.COM Agenda Introduction Identities Different forms of authentication
Duration: 5 Days Course Code: M20764 Version: B Delivery Method: Elearning (Self-paced)
Administering a SQL Database Infrastructure Duration: 5 Days Course Code: M20764 Version: B Delivery Method: Elearning (Self-paced) Overview: This five-day instructor-led course provides students who administer
Personalized Prospecting Folders
Personalized Prospecting Folders User Guide Login existing users Existing users can login and proceed to the product catalogue Click here to re-set your password if you forget Login new users New users
USING THE OEBPM API. John Sadd Fellow and OpenEdge Evangelist Document Version 1.0 May May, 2012 Page 1 of 15
USING THE OEBPM API Fellow and OpenEdge Evangelist Document Version 1.0 May 2012 May, 2012 Page 1 of 15 DISCLAIMER Certain portions of this document contain information about Progress Software Corporation
Identity & Access Management
Identity & Access Management THE PROBLEM: HOW DO WE ENABLE PRODUCTIVITY WITHOUT COMPROMISING SECURITY? S E C U R I T Y OR P R O D U C T I V I T Y On-premises THE PROBLEM: HOW DO WE ENABLE PRODUCTIVITY
Securing Containers Using a PNSC and a Cisco VSG
Securing Containers Using a PNSC and a Cisco VSG This chapter contains the following sections: About Prime Network Service Controllers, page 1 Integrating a VSG into an Application Container, page 4 About
Horizontal Table Partitioning
Horizontal Table Partitioning Dealing with a manageable slice of the pie. Richard Banville Fellow, OpenEdge Development August 7, 2013 Agenda OverviewFunctionalityUsageSummary 2 Agenda 1 Overview 2 Feature
LastPass Enterprise Recommended Policies Guide
LastPass Enterprise Recommended Policies Guide This document will help guide you through common scenarios and selecting policies to enable on your LastPass Enterprise account. We will not cover all policies
Canadian Access Federation: Trust Assertion Document (TAD)
1. Canadian Access Federation Participant Information 1.1.1. Organization name: DOUGLAS COLLEGE 1.1.2. Information below is accurate as of this date: November 16, 2017 1.2 Identity Management and/or Privacy
Exam 1Z0-061 Oracle Database 12c: SQL Fundamentals
Exam 1Z0-061 Oracle Database 12c: SQL Fundamentals Description The SQL Fundamentals exam is intended to verify that certification candidates have a basic understanding of the SQL language. It covers the
Eoin Woods Secure by Design security design principles for the rest of us
Eoin Woods Endava @eoinwoodz Secure by Design security design principles for the rest of us 1 BACKGROUND Eoin Woods CTO at Endava (technology services, 3300 people) 10 years in product development - Bull,
Big Data Security. Facing the challenge
Big Data Security Facing the challenge Experience the presentation xlic.es/v/e98605 About me Father of a 5 year old child Technical leader in Architecture and Security team at Stratio Sailing skipper 3
Administration 1. DLM Administration. Date of Publish:
1 DLM Administration Date of Publish: 2018-07-03 http://docs.hortonworks.com Contents ii Contents Replication Concepts... 4 HDFS cloud replication...4 Hive cloud replication... 4 Cloud replication guidelines
Full Stack Web Developer
Full Stack Web Developer S.NO Technologies 1 HTML5 &CSS3 2 JavaScript, Object Oriented JavaScript& jquery 3 PHP&MYSQL Objective: Understand the importance of the web as a medium of communication. Understand
Securing Containers Using a PNSC and a Cisco VSG
Securing Containers Using a PNSC and a Cisco VSG This chapter contains the following sections: About Prime Network Service Controllers, page 1 Integrating a VSG into an Application Container, page 3 About
The ABAP/4 layer describes the data formats used by the ABAP/4 processor. The database layer describes the data formats used in the database.
1. What are the layers of data description in R/3? The external layer. The ABAP/4 layer. The database layer. 2. Define external layer? The external layer is the plane at which the user sees and interacts
SDR Guide to Complete the SDR
I. General Information You must list the Yale Servers & if Virtual their host Business Associate Agreement (BAA ) in place. Required for the new HIPAA rules Contract questions are critical if using 3 Lock
Remote Execution for Oracle SQL
Remote Execution for Oracle SQL https://method5.github.io 2018-03-15 1 Summary 1. Parallel remote execution SQL extension 2. Easily run SQL, PL/SQL, and shell scripts 3. Advanced features in a simple syntax: