Integrative security management for web-based enterprise applications

Authors:
Chen Zhao;Yang Chen;Dawei Xu;NuerMaimaiti Heilili;Zuoquan Lin
Affiliations:
Department of Information Science, Peking University, Beijing, China;Department of Information Science, Peking University, Beijing, China;Department of Information Science, Peking University, Beijing, China;Department of Information Science, Peking University, Beijing, China;Department of Information Science, Peking University, Beijing, China
Venue:
WAIM'05 Proceedings of the 6th international conference on Advances in Web-Age Information Management
Year:
2005

Citing 6
Cited 2

Role-Based Access Control Models

Computer
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
Secure Cookies on the Web

IEEE Internet Computing
Portal Server Technology

IEEE Internet Computing
Single Sign-On Using Cookies for Web Applications

WETICE '99 Proceedings of the 8th Workshop on Enabling Technologies on Infrastructure for Collaborative Enterprises
Security in Plan 9

Proceedings of the 11th USENIX Security Symposium

Core role-based access control: efficient implementations by transformations

Proceedings of the 2006 ACM SIGPLAN symposium on Partial evaluation and semantics-based program manipulation
Web application security gateway with java non-blocking IO

NGITS'06 Proceedings of the 6th international conference on Next Generation Information Technologies and Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

In enterprise environment, security becomes increasingly important and costly. Enterprises are struggling to protect the increasing amount of disparate resources. Simple patchwork of security controls no longer suffices. Enterprises require a comprehensive solution that provides centralized security management, from authentication, to authorization and to auditing. To this end, we present a design and implementation of an integrative security management solution for Web-based enterprise applications, WebDaemon. It provides Single Sign-On to multiple Web applications. It also provides restricted access to Web-based content, portals, and Web applications based on Role-Based Access Control (RBAC) policies. The WebDaemon can help enterprises secure all Web resources with consistency of policy management and reduced administrative costs.