On CBS.com: Teams travel the world in 23 days
1 Resources for

authorization policy

  • Subscribe to this listing via:
  • RSS
  • Email

TechRepublic Resources

Automatic Placement of Authorization Hooks in the Linux Security Modules Framework
The authors present a technique for automatic placement of authorization hooks, and apply it to the Linux Security Modules LSM framework. LSM is a generic framework which allows diverse authorization policies to be enforced by the Linux kernel. It consists of a kernel module which encapsulates an authorization policy, and...
Tags: Authorization, Linux Kernel, Kernel, Linux Security Modules, Authorization Policy, Kernel Module, Linux, Open Source, UNIX, Operating Systems, Software
White papers 2005-09-09

Additional Resources

MSDN Webcast: Role-Based Security With Microsoft Authorization Manager (Level 300)
The increasing adoption of distributed application development has led to a heightened appreciation of application security. In the context of software, security involves asking two questions: "Who are you?" and "What can you do?" Microsoft Windows Server 2003 introduces an authorization policy that is role-based, making Microsoft Authorization Manager AzMan...
Tags: Role-based Security, Microsoft Developer Network, Webcast, Role-based Authorization, Microsoft Corp., Microsoft Windows Server 2003, Software Development, Digital Media, Security, Servers, Operating Systems, Microsoft Windows, Software, Software/Web Development, Consumer Electronics, Personal Technology, Hardware
Webcasts
Implementing Authentication and Authorization With AD/AM and AzMan - Level 200
Microsoft developers have been using SQL Server for authentication and Role Based Authorization since the days of ASP and Visual Basic 6.0. Although still effective, the industry has been moving towards LDAP authentication, and "Policy" servers for authorization. Security sub-systems based on AD/AM are compliant with the LDAP standard, and...
Tags: Authorization, Server, Microsoft Corp., Authentication, LDAP, Directory Services, Security, Enterprise Software, Software
Webcasts
Authorization Concepts and Solutions for J2EE Applications
Authentication and privacy are security issues that have been largely standardized and productized. Authorization, on the other hand, is generally an area where every solution tends to become unique, depending on specific characteristics of the application in question. That said, there are some fairly common patterns that are repeated in...
Tags: Authorization, Application Server, J2EE Application, IBM Corp., Application Servers, J2Ee, Middleware, Enterprise Software, Software, Software Development, Software/Web Development
White papers 2006-07-19
Essentials of Application Security (Part 3) - Authorization - Level 300
This webcast is the third of a 3-part series about the importance of Application Security and its best practices and guidelines. This part specifically addresses Authorization in the context of secure application development. After an overview of the costs of inadequate security and the benefits of developing secure applications, we...
Tags: Authorization, Webcast, Best Practice, Application Security, Security
Webcasts
Provide secure reliable VPN connections with IPSec authentication and authorization
This sample chapter, taken from IPSec VPN Design, explores authentication and authorization models for the IPSec telecommuter. Given that telecommuters can be anywhere in the Internet, the successful completion of authorization and authentication is critical for granting access to the VPN.This sample chapter, taken from IPSec VPN...
Tags: Authorization, IPSec VPN, Authentication, IPSec, VPNs, Network Security, Networking, Security
Book chapters 2006-04-17
MSDN Architecture Webcast: Authorization Manager From the Developer Perspective (Level 200)
As corporate security and regulatory compliance requirements increase, the need for a simple and common application authorization model grows. Application developers and enterprise administrators are aligning around Role-Based Access Control RBAC, but they are frustrated by the differences in terminology between various implementations of RBAC. This webcast discusses the Microsoft...
Tags: Microsoft Developer Network, Role-based Access Control, Webcast, Microsoft Corp., Regulatory Compliance, Human Resources, Policies And Procedures
Webcasts
Block some sites
How can block surfers from accesing pornographic sites?It takes up a chunck of the bandwidth and slows down the net.Once in a while i also have to format the machine.One approach is to allow access only to sites needed for business. This requires a firewall appliance with web proxy...
Tags: kamgash@..., windows, server
Q&A 2005-10-26
Overview of Federal Government Authentication Efforts White Paper
Currently, there are two major government-wide authentication efforts under way the E-Authentication Initiative EAI and the Personal Identity Verification PIV System. This paper highlights essential aspects of each effort, and compares and contrasts the two. Authentication is the process of establishing confidence in user identities. This is accomplished by establishing...
Tags: Authorization, Government, Authentication, Security
White papers 2005-06-06
Using Samba: Accounts, Authentication, and Authorization
Authentication is proving that the user is who he or she says they are. One does this every day, during such activities as printing a document or saving a file to a network drive. When things are working correctly, the steps taken by a server to authenticate a request are...
Tags: Authorization, Network, Samba, O'Reilly Media Inc., Authentication
Book chapters 2007-01-01
BEFW11S4 (v4) Authorization
i''m currently running a Linksys BEFW11S4 (Version4) router to link 5 PCs to the internet. decently I've been encountering a box asking my for a under name and password. It doesn't matter what I enter, it won't let me in. When I cancel out, I get a red "401 Authorization...
Tags: dbrokof@...
Discussion threads 2007-04-09
A Grid Authorization Model for Science Gateways
Since the number of TeraGrid Science Gateways is expected to grow at least an order of magnitude in the next few years, a lightweight gateway deployment model is sought, one that facilitates growth but meets the security requirements of the TeraGrid. This paper present a new authorization model for science...
Tags: University Of Illinois, Authorization, Middleware, Identity Federation
White papers 2007-04-11
MSDN Webcast: Authentication and Authorization With ASP.NET 2.0 (Level 200)
This webcast explores how Microsoft ASP.NET 2.0 features a flexible authentication and authorization architecture that supports Windows, certificates, and custom credential types.
Tags: Microsoft Developer Network, Authorization, Webcast, Microsoft ASP.NET, Microsoft Corp., Microsoft ASP.NET 2.0, Authentication, .Net, Middleware, Digital Media, Software Development, Software/Web Development, Enterprise Software, Software, Consumer Electronics, Personal Technology
Webcasts
SOA-Aware Authorization Control
The question how to handle authorization of digital identities in a Service-Oriented Architecture SOA remains an open issue. In this paper, the authors present a design pattern for the integration of legacy systems with SOA using out-of-the-box unmodified application servers and discuss how the architecture has to be extended by...
Tags: Aware, Authorization, SOA, Implementation Case Study, Service-Oriented Architecture (SOA), Web Services, Middleware, Enterprise Software, Software
White papers 2006-05-01
Password Policy Reverts Automatically
We had changed the password policy of our server but it restores its default values automatically afters some minutesPlz explain why it happensthank uIf it is on a domain, the domain policy over writes local policy.Check the password age,if the machines is part of domain,then policy needs to get a...
Tags: password, Password Policy, sureshtech_aagac@..., windows
Q&A 2005-05-26
Single Sign-On Using Sun Java System Access Manager 2005Q4 and Sun Java System Access Manager Policy Agent 2.2
As the number of applications grows, both in type and complexity, the different ways in which authentication and authorization is achieved also become more numerous. Hence, a user who has access to multiple applications will probably end up having multiple identities. Even if the applications share a single user repository,...
Tags: Microsoft Access, Agent, Java, Sun Microsystems Inc., Sun Java, Single Sign-on, Sun Java System Access Manager, Authentication/Encryption, Security
White papers 2006-08-01
PKI Policy Note
This PKI Note provides general information about PKI policy, the role that policy plays in a PKI and how that policy applies to both traditional and PKI-enabled business environments. It also addresses the documentation required to support a PKI policy, what is specified in a PKI policy, how a...
Tags: Policy, PKI, Authentication/Encryption, Digital Security, Network Security, Security, Networking
White papers 2001-03-01
Security Annotations and Authorization in GlassFish and the Java EE 5 SDK
Security is very important in the enterprise environment. In the Java EE 5 / GlassFish environment, one can achieve security using Transport Level Security TLS / Secure Sockets Layer SSL technologies, authentication and authorization, and Message Level Security for Web Services in GlassFish only. This paper discusses authentication and authorization,...
Tags: Authorization, Java, Environment, Project GlassFish, Ssl/Tls, Authentication/Encryption, Security
White papers 2006-07-01
Active Directory and DirectControl
Microsoft's Active Directory is the standard in most organizations for authentication, authorization and policy management for Windows systems. Active Directory has proven highly scalable, very secure and resilient under almost any load. However, these organizations usually have no single technology for providing these services to UNIX, Linux, Mac, and Java...
Tags: Centrify, Microsoft Windows Active Directory, Directory Services, Enterprise Software, Software
White papers 2005-04-01
Distributed Authorization Using Delegation With Acyclic Paths
This paper presents a new trust management scheme for distributed authorization which can be easily implemented using X.509-based certificate chains, but does not require globally unique role names. A principal proves that he has authorization for a particular action by demonstrating the existence of an acyclic chain of bindings from...
Tags: Authorization, Principal, Delegation
White papers 2007-09-10
  • << Previous
  • page 1 of 1
  • Next >>


Network Administration in Windows Server 2003
While the role of a Windows network administrator would never be considered easy, you can lighten your load by knowing the ins and outs of Microsoft's ...
Buy Now
Creating and Configuring Home Networks
Home offices are increasingly becoming a part of everyday life, thanks to their convenience and the growth of supporting technologies such as DSL and ...
Buy Now