Security Patterns in Practice
Description
Security is clearly a crucial issue to consider during thedesign and implementation of any distributed software architecture.Security patterns are increasingly being used by developers whotake security into serious consideration from the creation of theirwork. Written by the authority on security patterns, this uniquebook examines the structure and purpose of security patterns,illustrating their use with the help of detailed implementationadvice, numerous code samples, and descriptions in UML.
* Provides an extensive, up-to-date catalog of securitypatterns
* Shares real-world case studies so you can see when and how touse security patterns in practice
* Details how to incorporate security from the conceptualstage
* Highlights tips on authentication, authorization, role-basedaccess control, firewalls, wireless networks, middleware, VoIP, webservices security, and more
* Author is well known and highly respected in the field ofsecurity and an expert on security patterns
Security Patterns in Practice shows you how toconfidently develop a secure system step by step.
More details
Other editions
Additional editions
Person
Content
Preface xix
Part I Introduction
Chapter 1 Motivation and Objectives 1
Chapter 2 Patterns and Security Patterns 7
Chapter 3 A Secure Systems Development Methodology 23
Part II Patterns Chapter 4 Patterns for Identity Management 31
Chapter 5 Patterns for Authentication 51
Chapter 6 Patterns for Access Control 71
Chapter 7 Patterns for Secure Process Management 117
Chapter 8 Patterns for Secure Execution and File Management 145
Chapter 9 Patterns for Secure OS Architecture and Administration 163
Chapter 10 Security Patterns for Networks 193
Chapter 11 Patterns for Web Services Security 231
Chapter 12 Patterns for Web Services Cryptography 285
Chapter 13 Patterns for Secure Middleware 337
Chapter 14 Misuse Patterns 383
Chapter 15 Patterns for Cloud Computing Architecture 411
Part III Use of the Patterns
Chapter 16 Building Secure Architectures 441
Chapter 17 Summary and the Future of Security Patterns 479
Appendix A Pseudocode for XACML Access Control Evaluation 499
Glossary 501
References 509
Index of Patterns 543
Index 547
