IBM WebSphere V5.0 Security - CGISecurity

11.5 Security guidelines in Patterns for e-business
The Patterns for e-business design approach also provides guidelines for
solution design. The guidelines consist of technology options, application design
and development, security, performance and availability, and system
management. The following short sections will point out some common security
guidelines that should be taken into consideration when designing an e-business
solution.
11.5.1 Securing connections in a solution
At the architecture level, as opposed to the application level, connections
between nodes should be secured. For information in relation with this topic, at
the application level, where secure connections should be ensured between
modules, refer to 3.1, “J2EE application” on page 22.
The purpose of securing the communication is to prevent non-authorized
persons and systems from listening to the communication or participating in the
interaction.
Figure 11-9 shows the commonly used and highly recommended secure
communication lines between nodes.
Outside World
Demilitarized Zone
(DMZ)
Internal Network
Client
Directory &
Security
Server
SSL
Registry
data
HTTPS
LDAPS
LDAPS
LDAPS
IP Network
Protocol firewall
Application HTTPS
Authentication
Proxy
Servers
HTTPS HTTPS HTTPS IIOP / SSL
Domain firewall
Application
Server
SSL
Existing
application
and data
SSL
Existing
application
and data
Figure 11-9 Secure connection between nodes
Chapter 11. Security in Patterns for e-business 365