IBM WebSphere V5.0 Security - CGISecurity

andwidth to and from the server until it can no longer handle legitimate
requests, are not strictly in the realm of security since no information is changed
or stolen. Real time operational performance reporting and pre-arranged
re-routing procedures are the only real defense. IP spoofing, impersonating
another legitimate connection and thereby passing the IP and protocol filters of
firewalls is an area of more concern and so IP addresses alone cannot be
reliably used to identify authorized connections unless you are absolutely certain
you have a trusted path between both the source machine and the target.
Where physical access is compromised, network sniffing, inserting a device or
software which reads all the traffic between two points for later analysis or even
real time substitution becomes possible. Virtual Private Networks (VPN) and
cryptographic technologies can address some of these issues on a point to point
basis between pieces of the infrastructure. A “trusted path”, that is, an
un-encrypted or non-certificate passed connection can only be considered within
Region 2 DMZs when physical access and personnel are absolutely controlled;
for example: a crossover cable from a firewall port to a security proxy.
Exploitation of bugs in the software services throughout the infrastructure is a
very real threat. In order to secure systems from this kind of attack, operational
procedures to keep patches and fixes up to date must be in place and the
implementation of a “defense in depth” architecture is recommended, such as
the one illustrated in Figure 12-1 on page 375, where there are multiple physical
and logical layers that an attack must compromise each in turn before gaining
access to the application and its information.
Each segment of the infrastructure which supports an e-business application
must be analyzed for possible risk and the overall design of your system should
include risk mitigation methods at each point.
12.2 Network identity and centralized security services
Tivoli Access Manager for e-business V3.9 is the current name for what in
immediately previous versions has been Tivoli SecureWay Policy Director.
Access Manager is a collected suite of security management services with a
variety of distributed blades and plug-ins for the infrastructure components of
e-business applications.
The renaming is significant as it highlights one of the overriding concerns for any
enterprise with multiple Web based applications: how do you control access
across your entire e-business infrastructure without multiple and possibly
conflicting security policies?
372 IBM WebSphere V5.0 Security Handbook