IBM WebSphere V5.0 Security - CGISecurity

2.1.2 Logical securityLogical security is related to particular IT solutions: the IT architecture andapplications, including the business processes.CommunicationNetwork communication must be protected not only on a physical level but on alogical level as well. Most of the companies’ networks are connected to publicnetworks. Therefore, applications are accessible from the outside world. Networklevel security must prevent unauthorized access.ApplicationSecuring an application is done on different levels. Security is designed from thevery beginning of the implementation, when the processes and flows aredesigned.► Securing the resourcesThis implies protecting the resources on an application level and exercisingthe security features of the runtime platform (authentication andauthorization).► Implementing the business processes securelyThe processes have to be designed in a way that no weakness in logic can befound.2.1.3 Security policySecurity policies are guidelines for an organization; they can be part of a widelyaccepted standard (ISO) or implemented by a certain organization or company.Policies can define processes for different areas in an organization. Securitypolicies focus on security related processes, for example, how to request a newpassword, how to renew a password, and so on.These guidelines are very important in implementing a robust security for thewhole system organization-wide.Chapter 2. Security fundamentals 7