Designing Security Architecture Solutions (eBook)

JAY RAMACHANDRAN is a certified architect and security expert at AT&T, involved in enterprise security architecture and development. Over the past eight years, he has developed software and evaluated tools for security assurance, auditing, and management for many mission-critical network systems. He coordinated architecture reviews for operations support systems for AT&T's core network for two years, and currently teaches workshops on systems architecture and network security. Jay holds a PhD from Ohio State University.

Preface xvii

Acknowledgments xxvii

PART I: ARCHITECTURE AND SECURITY 1

Chapter 1. Architecture Reviews 3

Chapter 2. Security Assessments 21

Chapter 3. Security Architecture Basics 43

Chapter 4. Architecture Patterns in Security 75

PART II: LOW-LEVEL ARCHITECTURE 105

Chapter 5. Code Review 107

Chapter 6. Cryptography 129

Chapter 7. Trusted Code 151

Chapter 8. Secure Communications 179

PART III: MID-LEVEL ARCHITECTURE 199

Chapter 9. Middleware Security 201

Chapter 10. Web Security 223

Chapter 11. Application and OS Security 247

Chapter 12. Database Security 269

PART IV: HIGH-LEVEL ARCHITECTURE 293

Chapter 13. Security Components 295

Chapter 14. Security and Other Architectural Goals 323

Chapter 15. Enterprise Security Architecture 349

PART V: BUSINESS CASES AND SECURITY 375

Chapter 16. Building Business Cases for Security 377

Conclusion 407

Glossary 413

Bibliography 421

Index 435