B2B Integration : A Practical Guide to Collaborative E-commerce

312 B2B Integration — A Practical Guide to Collaborative E-commerce
Commission a DMZ (demilitarized zone)
As a crucial part of e-security revamping efforts, a company should
commission a DMZ that is delineated by an external and an internal
firewall. The external firewall secures the systems inside the DMZ from
external intruders. It provides access to these systems only to authorized
parties. The internal firewall, on the other hand, prevents unauthorized
access to enterprise networks and systems from the DMZ.
Formulate policies for detecting intrusion
Formulate corporate security policies that require logging and minute
level inspection of every inbound and outbound call. This will assist in
identifying dubious activities and patterns leading to a network or
system attack.
Build an effective entitlements management system
This system should be geared towards setting up the entitlements and
user access privileges for all the applications, independent of their
respective platform. Such a system would eliminate the need for
proprietary security components built into each individual application.
Implement cross-domain single sign-on
Single Sign-on (SSO) enables the user to log in (by providing user ID
and password) just once and then caching that information for the
whole session until the user logs out. Once the user is logged in
successfully, the user's identity can be shared and passed on from one
system to another, thereby making it unnecessary to have a separate
sign-on for each system. With a cross-domain single sign-on, this
information can be passed over from one secured domain to another.
10.8.2. B2Bi software
Your B2B integration software/server provides the primary source of
access over the Internet. It acts as an external interface to a company's