Security Links

Articles & Papers

• Access Management White Paper - Overview of network application security requirements and access management terminology and architectures
• Choosing the right cryptography for your e-business application - Clear guidelines on cryptographic use
• Security challenges for Enterprise Java in an e-business environment - Detailed analysis of enterprise Java security
• Security ROI: Web Application Security as a Business Enabler - How to structure ROI metrics to model security as a business enabling technology
• Single Sign-on Simplicity with SAML - An overview of Single Sign-on Capabilities based on the Security Assertions Markup Language (SAML) specification
• The New Holy Grail? - Good overview of access management products and the market

Presentations

• My Stuff, Your Stuff, Their Stuff - A tutorial given by Cafésoft at JavaOne on application security for the Java 2 Platform, Enterprise Edition (J2EE).
• Securing Your Stuff: What Java Web Programmers Should Know - A session on general web application security terminology, Java web application security design issues, web and application server security, and the Cams web single sign-on security framework.
• Single Sign-on to Web Applications - A presentation about Single Sign-on in the web tier including use of the SSO protocol and emerging standards like SAML.

Organizations

• Liberty Alliance - An alliance formed to deliver and support a federated network identity solution for the Internet that enables single sign-on for consumers as well as business users in an open, federated way.
  
• SAML (OASIS) - OASIS committee dedicated to advancing SAML, an XML-based security standard for exchanging authentication and authorization information
• Open Web Application Security Project - Open source site for development and exchange of ideas on Web Service and Application security.
• SANS - A research and education organization of 156,000 security professionals who share the lessons they are learning and find solutions to the challenges they face

Publications

• Information Security Magazine - Security news, insight and analysis
• SC Magazine - The largest circulation information security magazine and is read in more than 50 countries around the world
• Security Magazine - Technologies, applications, products and solutions for buyers
• Security Management Magazine - Industry trends and solutions, including security strategies, management techniques, and new technologies

Shows

• RSA Conference - February
• Infosec - April
• NetSec - June
• Black Hat - July
• WebSec - August
• USENIX Security Symposium - August
• Digital ID World - October
• CSI - November