<?xml version="1.0"?>


<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
<title>IBM developerWorks : Security</title> 
<id>tag:developerWorks.dw,24 May 2013 12:32:53 +0000</id>
<author>
	<name>developerWorks</name>
</author>
<subtitle type="html">The latest content from IBM developerWorks</subtitle>
<rights>Copyright 2004 IBM Corporation</rights>	
<link rel="self" type="text/html" hreflang="en" href="http://www.ibm.com/developerworks/"/>
<updated>24 May 2013 12:32:53 +0000</updated>


<entry>
<title><![CDATA[Introduction to Manual Explorer in IBM Security AppScan Enterprise 8.7]]></title> 
<summary><![CDATA[IBM Security AppScan Enterprise V8.7
       includes the new Manual Explorer tool, which helps security analysts find more URLs and explore
      pages that are difficult to explore with automated explorer tools. The Security AppScan Enterprise team has improved the Manual Explorer 
      to address some drawbacks of the earlier plug-in.  Currently, Security AppScan Enterprise
      V8.7 supports both the Manual Explorer tool and the Manual Explore plug-in. 
      In this article, learn about the new Manual Explorer tool by using step-by-step instructions
    to install and configure the tool.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-manual/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-manual/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,21 May 2013 04:00:00 +0000</id>
<published>21 May 2013 04:00:00 +0000</published>
<updated>21 May 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Integrate IBM Tivoli Directory Integrator Password Synchronizer with Tivoli Identity Manager]]></title> 
<summary><![CDATA[Wouldn&apos;t it be great to validate password strength prior to
		synchronization? In this article, 
		learn how to integrate the IBM Tivoli Directory Integrator
		Password Synchronizer Plug-in with IBM Tivoli Identity
		Manger to validate password strength using Tivoli Identity
		Manager&apos;s password policies prior to synchronization. Detailed
		instructions walk you through the setup and configuration processes.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-password/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-password/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,14 May 2013 04:00:00 +0000</id>
<published>14 May 2013 04:00:00 +0000</published>
<updated>14 May 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Restricting database connections using the CONNECT_PROC database configuration parameter in DB2 for Linux, Unix, and Windows]]></title> 
<summary><![CDATA[System administrators are responsible for, among other things, protecting a database against unauthorized access 
            or misuse by authorized database users (for example, inappropriate access to sensitive information within a database). 
            A common requirement to mitigate such risks is ensuring that users are allowed to connect to the database only from 
            a list of trusted hosts or IP addresses that are known to be secure. This article gives a practical example of how 
            such a requirement can be put in practice by making use of the CONNECT_PROC database configuration parameter of 
            IBM DB2 for Linux, UNIX, and Windows.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1305db2access/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1305db2access/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,02 May 2013 04:00:00 +0000</id>
<published>02 May 2013 04:00:00 +0000</published>
<updated>02 May 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[IAM Solution for implementing EULAs with IBM Security Access Manager]]></title> 
<summary><![CDATA[This article is focused on a common license management scenario  in which a service is made available to a set of users, and the condition for accessing the service is that users must agree to accept the documented terms and conditions. Although implementations may vary, technology solutions normally focus on implementing such functionality as part of authentication processing, ensuring conditions are met prior to allowing a user to access the service. This article focuses on an implementation of an End User License Agreement (EULA) process using the IBM Security Access Manager (ISAM) WebSEAL product component.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www.ibm.com/developerworks/community/groups/service/html/communityview?ca=dat-&amp;communityUuid=6701129e-d213-4582-afa8-ca20fd3a2fdd#fullpageWidgetId=Wea7c23b6815d_4fdb_8b2b_2dbb468c275a&amp;file=c4819939-45f7-4bdc-a14f-cbf4ebc366aa"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www.ibm.com/developerworks/community/groups/service/html/communityview?ca=dat-&amp;communityUuid=6701129e-d213-4582-afa8-ca20fd3a2fdd#fullpageWidgetId=Wea7c23b6815d_4fdb_8b2b_2dbb468c275a&amp;file=c4819939-45f7-4bdc-a14f-cbf4ebc366aa"/> 
<id>tag:developerWorks.dw,01 May 2013 04:00:00 +0000</id>
<published>01 May 2013 04:00:00 +0000</published>
<updated>01 May 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Cybersecurity education for the next generation]]></title> 
<summary><![CDATA[David Jarvis, from the IBM Center for Applied Insights, discusses their
            report, &quot;Cybersecurity education for the next generation: Advancing a
            collaborative approach.&quot; He explains the three types of collaboration 
            recommended for institutions that want to develop a cybersecurity curriculum 
            and discusses three cases studies from the report.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-education/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-education/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,30 Apr 2013 04:00:00 +0000</id>
<published>30 Apr 2013 04:00:00 +0000</published>
<updated>30 Apr 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Delegated administration with IBM Security Identity Manager]]></title> 
<summary><![CDATA[Organizations that work with several business partners, vendors, and contractors need a delegated user administration model for identity management tasks. This article provides in-depth details about implementing delegated administration of identity management tasks for a business partner organization with IBM Security Identity Manager.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www.ibm.com/developerworks/mydeveloperworks/groups/service/html/communityview?ca=dat-&amp;communityUuid=6701129e-d213-4582-afa8-ca20fd3a2fdd#fullpageWidgetId=Wea7c23b6815d_4fdb_8b2b_2dbb468c275a&amp;file=617514c3-e186-4f87-8004-b07f92c8d923"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www.ibm.com/developerworks/mydeveloperworks/groups/service/html/communityview?ca=dat-&amp;communityUuid=6701129e-d213-4582-afa8-ca20fd3a2fdd#fullpageWidgetId=Wea7c23b6815d_4fdb_8b2b_2dbb468c275a&amp;file=617514c3-e186-4f87-8004-b07f92c8d923"/> 
<id>tag:developerWorks.dw,23 Apr 2013 04:00:00 +0000</id>
<published>23 Apr 2013 04:00:00 +0000</published>
<updated>23 Apr 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Privacy and security of patient data in the cloud]]></title> 
<summary><![CDATA[Comply with the security and privacy requirements of U.S. healthcare law. This
    article gives you a basic understanding of the relevant laws, then discusses their implications with respect to cloud services, covering the issues of data control, access, integrity, and availability; shared multitenant environments; incident preparedness and response; and data security. (Nothing in this article should be perceived as legal advice.)]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/cl-hipaa/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/cl-hipaa/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,16 Apr 2013 04:00:00 +0000</id>
<published>16 Apr 2013 04:00:00 +0000</published>
<updated>16 Apr 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Secure your mobile applications]]></title> 
<summary><![CDATA[With the explosive growth in the mobile ecosystem, 
    mobile application security is a huge concern. New mobile application
    designs require new ways of testing to ensure data safety. In this article,
   explore different aspects of mobile application security. With 
   hands-on examples, learn to
    use IBM Security AppScan Standard with mobile user agents and
    with emulators
    and actual devices for Android and iOS.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-testing/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-testing/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,16 Apr 2013 04:00:00 +0000</id>
<published>16 Apr 2013 04:00:00 +0000</published>
<updated>16 Apr 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Integrate RSA SecurID token authentication with WebSeal]]></title> 
<summary><![CDATA[This tutorial explains how to integrate the IBM Security Access Manager product with RSA&apos;s token authentication solution by using the WebSeal component to provide strong authentication to secure web based resources.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-integratersa/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-integratersa/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,16 Apr 2013 04:00:00 +0000</id>
<published>16 Apr 2013 04:00:00 +0000</published>
<updated>16 Apr 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[IBM X-Force 2012 Trend and Risk Report]]></title> 
<summary><![CDATA[Michael Hamelin discusses some of the key findings from the IBM X-Force
            2012 Trend and Risk Report.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-xforce/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-xforce/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,29 Mar 2013 04:00:00 +0000</id>
<published>29 Mar 2013 04:00:00 +0000</published>
<updated>29 Mar 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[IBM InfoSphere Optim Test Data Management Solution, Part
                3: Masking a person&apos;s first name using a gender-specific lookup table]]></title> 
<summary><![CDATA[This demo is the third in a series about masking sensitive data to privatize that data. 
            Learn how mask a person’s first name in a table using a 
            gender-specific lookup table. The Optim random lookup data privacy provider is used in this column map procedure script.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/offers/lp/demos/summary/im-optimmaskdata3.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/offers/lp/demos/summary/im-optimmaskdata3.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Mar 2013 04:00:00 +0000</id>
<published>22 Mar 2013 04:00:00 +0000</published>
<updated>22 Mar 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[2013 IBM Global Reputational Risk and IT Study]]></title> 
<summary><![CDATA[The IBM Global Reputational Risk and IT Study is one of the largest studies ever 
            conducted to examine the relationship between IT and reputational risk. The initial group of 427 respondents participated in a survey conducted for IBM by the Economist Intelligence Unit. 
            An additional 175 respondents participated in the study online at a special IBM survey website. All participants answered questions specifically designed to provide a detailed picture of the
connection between reputational risk and IT in business today—including which IT risks have the
most impact on reputation, whether these risks are being managed effectively, and identifying the
gaps that need to be closed.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-global/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-global/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,21 Mar 2013 04:00:00 +0000</id>
<published>21 Mar 2013 04:00:00 +0000</published>
<updated>21 Mar 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Introduction to intrusion prevention systems]]></title> 
<summary><![CDATA[This article focuses on intrusion prevention systems (IPS),
             a technology that can detect and prevent computer systems from
             intrusions in real time. Learn about the different types of IPSs, 
             how they work,
             and why they are better than traditional firewalls. This article discusses Snort, OSSEC, and 
             Suricata, three popular 
             free or open-source IPSs.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-intrusion/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-intrusion/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,19 Mar 2013 04:00:00 +0000</id>
<published>19 Mar 2013 04:00:00 +0000</published>
<updated>19 Mar 2013 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Manage five common privileged identity management scenarios]]></title> 
<summary><![CDATA[Take a look at this set of common use cases/scenarios based on customers&apos; uses of shared and privileged identities. Then look at the how-to guides for each scenario to learn how IBM Security Privileged Identity Manager offers controlled sharing and automated logon for privileged identities.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-common/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-common/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,07 Mar 2013 05:00:00 +0000</id>
<published>07 Mar 2013 05:00:00 +0000</published>
<updated>07 Mar 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Claims-based authentication for Sharepoint with Access Manager]]></title> 
<summary><![CDATA[Step through the process of implmenting claims-based authentication for Microsoft Sharepoint applications
            using IBM Security Access Manager.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-claims/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-claims/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,05 Mar 2013 05:00:00 +0000</id>
<published>05 Mar 2013 05:00:00 +0000</published>
<updated>05 Mar 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Encrypt data on a Windows instance on SmartCloud Enterprise]]></title> 
<summary><![CDATA[Set up data encryption on your Windows instance using TrueCrypt for full disk
            encryption, BitLocker for volume encryption, EFS for file and folder encryption, and fsutil for swap file
            encryption.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-scedataencryption-windows/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-scedataencryption-windows/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,04 Mar 2013 05:00:00 +0000</id>
<published>04 Mar 2013 05:00:00 +0000</published>
<updated>04 Mar 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[ISAM ESSO under the hood]]></title> 
<summary><![CDATA[This article takes a deep look into IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) configuration troubleshooting. Explore how ISAM ESSO components interact with the client operating system, and learn how to configure single sign-on support for multidesktop client environments and for console applications running on Windows 2008.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-esso/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-esso/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,26 Feb 2013 05:00:00 +0000</id>
<published>26 Feb 2013 05:00:00 +0000</published>
<updated>26 Feb 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Use data-level security for granular access control of auditing results
            in InfoSphere Guardium]]></title> 
<summary><![CDATA[InfoSphere Guardium offers enterprise-wide data activity monitoring for 
            data protection and auditing. Two critical elements to consider for a successful 
            enterprise implementation of InfoSphere Guardium for enterprise-wide data 
            protection and audit include support for separation of duties, and enterprise 
            deployment capabilities that eliminate redundant configurations and streamline 
            enterprise deployments to match your organizational structures. By using Guardium 
            data-level security mechanisms, administrators can assign responsibilities for 
            particular databases or systems to individuals (or groups) which align with their 
            hierarchical organizational structure. This article describes the benefits of 
            data-level security as well as step-by-step instructions for implementing the 
            solution for a sample scenario.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1302datalevelsecurity/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1302datalevelsecurity/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,21 Feb 2013 05:00:00 +0000</id>
<published>21 Feb 2013 05:00:00 +0000</published>
<updated>21 Feb 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[A sweeping approach to security]]></title> 
<summary><![CDATA[Explore various security steps to help you create a broader security approach for your organization. Learn how you can anticipate and stop attackers
            from infiltrating your system.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-sweep/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-sweep/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,19 Feb 2013 05:00:00 +0000</id>
<published>19 Feb 2013 05:00:00 +0000</published>
<updated>19 Feb 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Integrating Access Manager&apos;s WebSEAL and NetWeaver App Server]]></title> 
<summary><![CDATA[Learn how to integrate WebSEAL and SAP NetWeaver Application Server ABAP.  Follow along in the video to see how to configure and enable single sign-on and single sign-off, then how to test the integration.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-webseal/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-webseal/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,12 Feb 2013 05:00:00 +0000</id>
<published>12 Feb 2013 05:00:00 +0000</published>
<updated>12 Feb 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Learn how to raise the bar on mainframe's industry leading security with zEnterprise EC12]]></title> 
<summary><![CDATA[Examne how the new zEnterprise platform will help IT improve data analytics and create more secure hybrid cloud offerings.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://ibmsystemsmag.com/mainframe/trends/security/security_zec12/?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://ibmsystemsmag.com/mainframe/trends/security/security_zec12/?ca=dat-"/> 
<id>tag:developerWorks.dw,04 Feb 2013 05:00:00 +0000</id>
<published>04 Feb 2013 05:00:00 +0000</published>
<updated>04 Feb 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Who’s doing what in your database?]]></title> 
<summary><![CDATA[Organizations need a database activity monitoring solution that 
            efficiently enables quick detection of unauthorized intrusion and provides 
            reporting and analysis capabilities that present a clear picture of 
            data access activities on a System z server. This article describes how
            IBM InfoSphere Guardium can be used to achieve these goals.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://ibmdatamag.com/2012/08/whos-doing-what-in-your-database/?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://ibmdatamag.com/2012/08/whos-doing-what-in-your-database/?ca=dat-"/> 
<id>tag:developerWorks.dw,31 Jan 2013 05:00:00 +0000</id>
<published>31 Jan 2013 05:00:00 +0000</published>
<updated>31 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Jeffrey Douglas on the current tools for fraud detection]]></title> 
<summary><![CDATA[Jeffrey Douglas talks about IBM&apos;s tools to help companies with fraud
            detection.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-fraud/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-fraud/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,29 Jan 2013 05:00:00 +0000</id>
<published>29 Jan 2013 05:00:00 +0000</published>
<updated>29 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Case study: AppScan security scan of Rational Focal Point]]></title> 
<summary><![CDATA[Using IBM Rational Focal Point as an example, Shivakumar Patil describes using IBM Security AppScan Standard edition to test web-based applications and their external endpoints, such as SOAP and REST web services.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/appscan-security-scan-rational-focal-point/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/appscan-security-scan-rational-focal-point/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,29 Jan 2013 05:00:00 +0000</id>
<published>29 Jan 2013 05:00:00 +0000</published>
<updated>29 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[DevOps distilled, Part 1: The three underlying principles]]></title> 
<summary><![CDATA[In this series of articles, learn about DevOps and how it can:
            create a collaborative relationship between development and IT 
            operations; enable high deployment rates; and increase the reliability,
            resilience, and security of your production environment. In this first 
            article, get a history
             of DevOps, explore the three
             underpinning principles of the DevOps movement, and learn how DevOps
             complements existing frameworks such as Agile and ITIL.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part1/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part1/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Jan 2013 05:00:00 +0000</id>
<published>22 Jan 2013 05:00:00 +0000</published>
<updated>22 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[DevOps distilled, Part 2: Create environments early for smooth, secure code releases]]></title> 
<summary><![CDATA[In this series of articles, learn about DevOps and how it can:
        create a collaborative relationship between development and IT 
        operations; enable high deployment rates; and increase the reliability,
        resilience, and security of your production environment. Part 1 explored the three
             underlying principles of the DevOps movement. In this article, Gene Kim
             explains how making
             environments early in the development process creates more 
             deterministic, predictable, and secure releases.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part2/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part2/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Jan 2013 05:00:00 +0000</id>
<published>22 Jan 2013 05:00:00 +0000</published>
<updated>22 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[DevOps distilled: A new look at DevOps]]></title> 
<summary><![CDATA[In this series of articles, learn about DevOps and how it can:
            create a collaborative relationship between development and IT 
            operations; enable high deployment rates; and increase the reliability,
            resilience, and security of your production environment.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Jan 2013 05:00:00 +0000</id>
<published>22 Jan 2013 05:00:00 +0000</published>
<updated>22 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[DevOps distilled, Part 3: Integrate IT operations and information security into development]]></title> 
<summary><![CDATA[In this series of articles, learn about DevOps and how it can:
        create a collaborative relationship between development and IT 
        operations; enable high deployment rates; and increase the reliability,
        resilience, and security of your production environment.  In this article, learn
             how to amplify 
             feedback loops by bringing Operations and Information Security
             into development. Encouraging collaboration and ensuring 
             communication will help achieve your goals.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part3/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part3/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Jan 2013 05:00:00 +0000</id>
<published>22 Jan 2013 05:00:00 +0000</published>
<updated>22 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[DevOps distilled, Part 4: Standardize IT operations deployment work]]></title> 
<summary><![CDATA[In this series of articles, learn about DevOps and how it can:
        create a collaborative relationship between development and IT 
        operations; enable high deployment rates; and increase the reliability,
        resilience, and security of your production environment.
        In this article, Gene Kim talks about standardizing the work of IT
         operations to increase project predictability, accuracy, and 
          throughput.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part4/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part4/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Jan 2013 05:00:00 +0000</id>
<published>22 Jan 2013 05:00:00 +0000</published>
<updated>22 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[DevOps distilled, Part 5: Why everyone needs DevOps now]]></title> 
<summary><![CDATA[In this series of articles, learn about DevOps and how it can:
        create a collaborative relationship between development and IT 
        operations; enable high deployment rates; and increase the reliability,
        resilience, and security of your production environment.
        In this final article, learn why DevOps is the key to 
        unlocking tremendous economic value.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part5/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-devops/part5/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Jan 2013 05:00:00 +0000</id>
<published>22 Jan 2013 05:00:00 +0000</published>
<updated>22 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Extend IBM Security Access Manager for ESSO 
            AccessProfile with Windows native libraries]]></title> 
<summary><![CDATA[IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 
      responds to requests for user credentials. In this article, learn how to develop 
      and embed a Windows native library inside an ISAM ESSO AccessProfile.
An example walks you through the steps of the COM component registration
based on the sample library.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-extendesso/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-extendesso/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,22 Jan 2013 05:00:00 +0000</id>
<published>22 Jan 2013 05:00:00 +0000</published>
<updated>22 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Install IBM InfoSphere Guardium Data Encryption on the IBM PureApplication System]]></title> 
<summary><![CDATA[This article focuses on deploying the IBM InfoSphere Guardium data encryption software to provide data encryption for Red Hat Linux V6.2 IBM DB2
	hosts. This software provides encryption for both regular files and DB2 files. InfoSphere
	Guardium also provides a DB2 agent for DB2 encrypted backup and restore operations.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-installguardium/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-installguardium/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,16 Jan 2013 05:00:00 +0000</id>
<published>16 Jan 2013 05:00:00 +0000</published>
<updated>16 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Loaded pages: How your website can infect visitors with malware]]></title> 
<summary><![CDATA[Google claims that 9,500 websites per day are infected with malware meant to harm the site&apos;s visitors. Understanding how malware infects a website and what can be done to stop it 
can help keep your visitors&apos; computers free of malware.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/wa-loadedpages/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/wa-loadedpages/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,15 Jan 2013 05:00:00 +0000</id>
<published>15 Jan 2013 05:00:00 +0000</published>
<updated>15 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Look-ahead Java deserialization]]></title> 
<summary><![CDATA[When Java serialization is used to exchange information
            between a client and a server, attackers can try to replace the legitimate
            serialized stream with malicious data. This article explains the nature of
            this threat and describes a simple way to protect against it. Find out how to
            stop the deserialization process as soon as an unexpected Java class is found
            in the stream.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-lookahead/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-lookahead/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,15 Jan 2013 05:00:00 +0000</id>
<published>15 Jan 2013 05:00:00 +0000</published>
<updated>15 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[IBM AIX system administration, part 1: Installation]]></title> 
<summary><![CDATA[This knowledge path series introduce how to install IBM AIX (using CDs or online), create a virtualized environment, and configure console management.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/training/kp/au-kp-aix-sys-admin-1/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/training/kp/au-kp-aix-sys-admin-1/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,10 Jan 2013 05:00:00 +0000</id>
<published>10 Jan 2013 05:00:00 +0000</published>
<updated>10 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Use SAML assertions from an application server acting as an identity provider]]></title> 
<summary><![CDATA[With the advent of cloud computing, many companies 
            rely on third-party service providers that reside outside their 
            network. However, a company might want to integrate its existing single 
            sign-on (SSO) feature with these service providers but perform authentication with
            their own identity provider. Security Assertion Markup Language
            (SAML) is the industry standard for identity propagation of an authenticated subject between
            a company&apos;s identity provider and a third-party service. In this article,
            learn how to enable SSO so an employee can log in to a third-party service provider using company
            credentials.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-sso/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-sso/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,08 Jan 2013 05:00:00 +0000</id>
<published>08 Jan 2013 05:00:00 +0000</published>
<updated>08 Jan 2013 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Send system notifications to social media with IBM Tivoli Directory Integrator]]></title> 
<summary><![CDATA[IBM Tivoli Directory Integrator (TDI) easily integrates with a wide
            variety of environments with minimal disruptions. Its plug-and-play nature
            provides easy prototyping and implementation. In this article, learn how to
            use the TDI framework to extend integration components and gain easy access to
            a range of management tools. The tools help you perform system configuration
            and send real-time notifications to external applications or to social media sites
            such as Twitter.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-system/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-system/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,11 Dec 2012 05:00:00 +0000</id>
<published>11 Dec 2012 05:00:00 +0000</published>
<updated>11 Dec 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Benefits of InfoSphere Guardium for System Z in the healthcare industry]]></title> 
<summary><![CDATA[Mark Simmonds is a guest on The Pulse Network TV to discuss the benefits
            of InfoSphere Guardium on System z for the healthcare industry.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-guardium/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-guardium/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,27 Nov 2012 05:00:00 +0000</id>
<published>27 Nov 2012 05:00:00 +0000</published>
<updated>27 Nov 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Use Tivoli Integrated Portal and Tivoli Common Reporting to create
            read-only access to Cognos reports]]></title> 
<summary><![CDATA[In Cognos Business Intelligence, default users have a wider range of capabilities than would be typically appropriate for users that only need to view reports. In this article, learn how to use  Tivoli Integrated Portal and Tivoli Common Reporting to create a class of users that have read-only access to Cognos reports.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-cognos/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-cognos/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,20 Nov 2012 05:00:00 +0000</id>
<published>20 Nov 2012 05:00:00 +0000</published>
<updated>20 Nov 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Introduction to AppScan Policies]]></title> 
<summary><![CDATA[IBM Security Appscan is a tool that provides automated security scanning
to web applications. Each scan policy within IBM Security AppScan covers a particular aspect of the application security. 
Using the right policy produces optimal scanning results and reduces false positives. In this article, get an overview of IBM Security AppScan policies, and learn which policy is optimal based on the type of application and its stage of
development. The article also provides a side-by-side policy
comparison that details each scan policy that is offered by the IBM Security AppScan tool.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-appscan/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-appscan/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,13 Nov 2012 05:00:00 +0000</id>
<published>13 Nov 2012 05:00:00 +0000</published>
<updated>13 Nov 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Use InfoSphere Guardium Universal Feed to create a customized
                data activity monitoring solution, Part 2: Creating a feed for a user-defined data source]]></title> 
<summary><![CDATA[New databases and new applications are continually being created and adopted to
            meet specific organizational needs. The requirement for data protection and auditing
            capabilities is required by mandate and is more critical than ever. The InfoSphere
            Guardium data protection solution is extensible to enable the integration of a wide
            variety of new databases and sources into its platform, thereby providing a consistent
            enterprise-wide monitoring solution. In this article series, you learn how to integrate
            event logs from any software into InfoSphere Guardium using Guardium Universal Feed.
            Part 1 described how to create a feed for a relational data source. In this article you
            will learn how to create a feed for any arbitrary data source. You will learn how to
            upload event descriptions into the Guardium repository and how to use the reporting
            capability for event data. This article includes a sample event description file and
            sample program.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211universalfeed2/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211universalfeed2/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,08 Nov 2012 05:00:00 +0000</id>
<published>08 Nov 2012 05:00:00 +0000</published>
<updated>08 Nov 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Managing certificates with IBM GSKit]]></title> 
<summary><![CDATA[This tutorial explains how to set up and use IBM Global Security Kit
            (GSKit) for typical certificate management tasks such as self-signed
            certificate generation, creation of a Certificate Authority (CA), requesting a
            certificate from a third-party CA, and installing certificates for use in SSL
            protocols.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/tutorials/se-gskit/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/tutorials/se-gskit/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,06 Nov 2012 05:00:00 +0000</id>
<published>06 Nov 2012 05:00:00 +0000</published>
<updated>06 Nov 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Use InfoSphere Guardium Universal Feed to create a customized
            data activity monitoring solution, Part 1: Create a feed for a database source]]></title> 
<summary><![CDATA[New databases and new applications are continually being created and
            adopted to meet specific organizational needs. The requirement for data protection and
            auditing capabilities is required by mandate and is more critical than ever. The
            InfoSphere Guardium data protection solution is extensible to enable the integration of
            a wide variety of new databases and sources into its platform, thereby providing a
            consistent enterprise-wide monitoring solution. This article provides an example of how
            to use the Universal Feed feature in InfoSphere Guardium to integrate logs and security
            events from a database source into an external system, ensuring separation of duties.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1210universalfeed/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1210universalfeed/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,25 Oct 2012 04:00:00 +0000</id>
<published>25 Oct 2012 04:00:00 +0000</published>
<updated>25 Oct 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Extend single sign-on to the cloud]]></title> 
<summary><![CDATA[Single sign-on (SSO) allows companies to enforce access control policies across multiple applications in a consistent manner. In this article, the author covers the core concepts of how SSO can be extended from your enterprise to the cloud. He discusses several different mechanisms to achieve SSO between traditional applications running in your data center and your SaaS applications. Topics include SAML, OAuth, and traditional agent-based SSO and the author will highlight in general terms about how different SaaS providers support the standards to different levels, thus complicating SSO implementations.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-singlesignoncloud/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-singlesignoncloud/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,19 Oct 2012 04:00:00 +0000</id>
<published>19 Oct 2012 04:00:00 +0000</published>
<updated>19 Oct 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Using IBM InfoSphere Guardium for monitoring and auditing IBM DB2 for i
            database activity]]></title> 
<summary><![CDATA[IBM® InfoSphere® Guardium® is an enterprise information audit and protection solution that helps enterprises to protect and audit information across a diverse set of relational and nonrelational data sources such as Oracle, Teradata, IMS, VSAM, Microsoft® SharePoint, and IBM Netezza®, and IBM DB2® for z/OS®, and DB2 for Linux, UNIX and Windows. With InfoSphere Guardium V9.0, DB2 for i can now be included as a data source, enabling you to monitor access through native interfaces and through SQL. This article provides a brief overview of the InfoSphere Guardium architecture, describes how to configure access (including best practices for performance), and describes how to access data activity reports.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/ibmi/library/i-infosphere_guardium_db2/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/ibmi/library/i-infosphere_guardium_db2/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,11 Oct 2012 04:00:00 +0000</id>
<published>11 Oct 2012 04:00:00 +0000</published>
<updated>11 Oct 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Big data security and auditing with IBM InfoSphere Guardium]]></title> 
<summary><![CDATA[In this article, you will learn how InfoSphere Guardium provides
            database activity monitoring and auditing capabilities that enable you to seamlessly
            integrate Hadoop data protection into your existing enterprise data security strategy.
            You will learn how to configure the system and to use InfoSphere Guardium security
            policies and reports tailored specifically for Hadoop environments. You will also learn
            about a quick start monitoring implementation available only with IBM InfoSphere
            BigInsights.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1210bigdatasecurity/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1210bigdatasecurity/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,11 Oct 2012 04:00:00 +0000</id>
<published>11 Oct 2012 04:00:00 +0000</published>
<updated>11 Oct 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Secure and harden Netezza data warehouse appliance with InfoSphere Guardium]]></title> 
<summary><![CDATA[This article will build the basic foundation of a hardened, monitored,
            and secured Netezza environment. To achieve this, InfoSphere Guardium, IBM&apos;s solution for
            database activity monitoring and auditing, will be used. Hardening Netezza with Guardium
            will be presented as a multi-step process:  The first step will address the basic initial
            setup from a security and user access management perspective. Configuration of users,
            groups, and privileges will be addressed. The second step will leverage Guardium 
            Vulnerability Assessment to scan the environment for Netezza-specific insecure
            configurations and privileges. The third step will detail how to address some of the
            failed Vulnerability Assessment test by making appropriate adjustments in Netezza configuration. 
            The last step is ensuring that the optimal configuration of privileges built in the first 
            and third stages are not tampered with. Guardium Entitlement Reports will be used to 
            audit the Netezza user management. By this stage we have built a hardened Netezza appliance 
            with ongoing assessments using InfoSphere Guardium.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1210guardiumnetezza/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1210guardiumnetezza/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,04 Oct 2012 04:00:00 +0000</id>
<published>04 Oct 2012 04:00:00 +0000</published>
<updated>04 Oct 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Cyber security for the nuclear energy industry]]></title> 
<summary><![CDATA[When deploying software based systems, such as, digital
            instrumentation and controls for the nuclear industry, it is vital to include
            cyber security assessment as part of architecture and development process.
            When integrating and delivering software-intensive systems for the nuclear
            industry, engineering teams should make use of a secure, requirements driven,
            software development life cycle, ensuring security compliance and optimum
            return on investment. Reliability protections, data loss prevention, and
            privacy enforcement provide a strong case for installing strict cyber security
            policies.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/industry/library/ind-cyber-security-energy/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/industry/library/ind-cyber-security-energy/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,27 Sep 2012 04:00:00 +0000</id>
<published>27 Sep 2012 04:00:00 +0000</published>
<updated>27 Sep 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Monitor database activity for application users with Guardium and WebSphere
            Application Server]]></title> 
<summary><![CDATA[Certain audit requirements mandate that specific database activity can be traced 
            back to the user who is responsible for the specific activity. This is especially challenging in
            application scenarios where the pooled database connections are used and the application itself is responsible for authentication and authorization. 
            This article presents a generic approach for WebSphere Application Server applications that enables 
            database activity monitoring solutions like InfoSphere Guardium to reliably assign the application user to
            the database activity without requiring changes to the respective applications.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1208monitordbactivity/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1208monitordbactivity/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,23 Aug 2012 04:00:00 +0000</id>
<published>23 Aug 2012 04:00:00 +0000</published>
<updated>23 Aug 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Security in Development: The IBM Secure Engineering Framework]]></title> 
<summary><![CDATA[This IBM Redguide describes IBM&apos;s approach to secure engineering
            practices for software products.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-framework/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-framework/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,15 Aug 2012 04:00:00 +0000</id>
<published>15 Aug 2012 04:00:00 +0000</published>
<updated>15 Aug 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Design and implement just-in-time provisioning with SAML 2.0]]></title> 
<summary><![CDATA[Understand and get a demonstration of how to design and implement just-in-time (JIT) provisioning at a service provider with SAML 2.0 Federated Single Sign-On using Tivoli Federated Identity Manager, Tivoli Directory Integrator, and Tivoli Access Manager.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-jitp/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/se-jitp/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,14 Aug 2012 04:00:00 +0000</id>
<published>14 Aug 2012 04:00:00 +0000</published>
<updated>14 Aug 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Using OAuth on IBM WebSphere DataPower Appliances, Part
                1: Introducing OAuth 2.0 support in DataPower firmware revision 5.0]]></title> 
<summary><![CDATA[This article is the first in a multi-part series of articles describing
            OAuth support on WebSphere DataPower Appliances. Part 1 starts with an
            overview of OAuth and then describes DataPower support for OAuth features. The
            rest of the article series will go into detail on several aspects of OAuth and
            DataPower usage and configuration.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/library/techarticles/1208_rasmussen/1208_rasmussen.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/library/techarticles/1208_rasmussen/1208_rasmussen.html?ca=dat-"/> 
<id>tag:developerWorks.dw,01 Aug 2012 04:00:00 +0000</id>
<published>01 Aug 2012 04:00:00 +0000</published>
<updated>01 Aug 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[The OpenStack network]]></title> 
<summary><![CDATA[Networking is an essential part of an IaaS system; that is no different with OpenStack, an open source, Infrastructure as a Service, cloud computing project by Rackspace Cloud and NASA. In this article, the author describes the iptable chains and rules behind the OpenStack Cloud Compute-Nova project, a cloud computing fabric controller (the main part of an IaaS system) written in Python that uses many external libraries. The author details the nova-network FlatDHCPManager component, as well as other OpenStack components. An iptable is a user-space application program that allows a system administrator to configure the tables provided by the Linux kernel firewall.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-openstack-network/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-openstack-network/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,26 Jul 2012 04:00:00 +0000</id>
<published>26 Jul 2012 04:00:00 +0000</published>
<updated>26 Jul 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Secure programming with the OpenSSL API, Part 1: Overview of the API]]></title> 
<summary><![CDATA[Learning how to use the API for OpenSSL -- the best-known open library for secure communication --  can be intimidating, because the documentation is incomplete.  Fill in the gaps, and tame the API, with the tips in this article.  After setting up a basic connection, see how to use OpenSSL&apos;s BIO library to set up both a secured and unsecured connection. And learn a bit about error detection as well.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-openssl/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-openssl/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,28 Jun 2012 04:00:00 +0000</id>
<published>28 Jun 2012 04:00:00 +0000</published>
<updated>28 Jun 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[System Administration Certification exam 919 for Informix 11.70 prep, Part
                8: Security]]></title> 
<summary><![CDATA[Data security is always a concern for database administrators. This
            tutorial helps you understand how to secure your data 
        by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database 
        server to monitor database activities. This tutorial prepares you for Part 8 of
        the System Administration Certification exam 919 for Informix(R) v11.70.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/tutorials/db2-cert9198/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/tutorials/db2-cert9198/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,20 Jun 2012 04:00:00 +0000</id>
<published>20 Jun 2012 04:00:00 +0000</published>
<updated>20 Jun 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[The Secure Sockets Layer and Transport Layer Security]]></title> 
<summary><![CDATA[With the explosive growth of computing devices connected with the Internet in recent years, security of communications and computer systems became more important than ever. We will learn about history of secure communications, the SSL/TLS protocols, handshake, network layers and a tool that makes our lives easier for SSL/TLS connection verification.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/ws-ssl-security/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/ws-ssl-security/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,06 Jun 2012 04:00:00 +0000</id>
<published>06 Jun 2012 04:00:00 +0000</published>
<updated>06 Jun 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Secure Linux: Part 1. SELinux – history of its development, architecture
            and operating principles]]></title> 
<summary><![CDATA[Learn about the basic milestones in the development, architecture, and operating principles of Security-Enhanced Linux, the powerful remix of Linux providing mandatory access control.  
This article was specially selected for translation by developerWorks Russia as an example of developerWorks world-wide offerings.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-secure-linux-ru/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-secure-linux-ru/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,30 May 2012 04:00:00 +0000</id>
<published>30 May 2012 04:00:00 +0000</published>
<updated>30 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Implementing Database Security and Auditing - Auditing Categories]]></title> 
<summary><![CDATA[This is the definitive guide for information security professionals, DBAs, and auditors. Authored by database security expert, IBM Gold Consultant, and Guardium CTO Ron Ben-Natan, this paper contains hundreds of practical tips and examples for protecting sensitive information and passing audits smoothly. In Chapter 12, you learn which audit logging trails you need in order to address key security and compliance requirements.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500011058&amp;S_CMP=Guardium_getting_started_auditing_security"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500011058&amp;S_CMP=Guardium_getting_started_auditing_security"/> 
<id>tag:developerWorks.dw,24 May 2012 04:00:00 +0000</id>
<published>24 May 2012 04:00:00 +0000</published>
<updated>24 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Implementing Database Security and Auditing - Authentication and Password Security]]></title> 
<summary><![CDATA[This book is the definitive guide for information security professionals, DBAs, and auditors. Authored by database security expert, IBM Gold Consultant, and Guardium CTO Ron Ben-Natan, this paper contains hundreds of practical tips and examples for protecting sensitive information and passing audits smoothly. In Chapter 4,  you learn best practices and techniques involving authentication and user account management, password strength and password profiles, as well as user account/password maintenance]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500018626&amp;S_CMP=Guardium_Implementing%20Database%20Security%20and%20Auditing_WP"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500018626&amp;S_CMP=Guardium_Implementing%20Database%20Security%20and%20Auditing_WP"/> 
<id>tag:developerWorks.dw,24 May 2012 04:00:00 +0000</id>
<published>24 May 2012 04:00:00 +0000</published>
<updated>24 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[HOWTO Secure and Audit Oracle 10g and 11g - Authentication]]></title> 
<summary><![CDATA[This guide provides authoritative and succinct instructions highlighted by examples. In this chapter, you learn best practices and techniques for securing your Oracle database environments, including how to enforce complex passwords, how to check for weak passwords, how to define how many failed logins are allowed before locking accounts, and how to limit system resource usage to prevent denial-of-service attacks.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500010969&amp;S_CMP=Secure_and_Audit_Oracle_Authentication_bk"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500010969&amp;S_CMP=Secure_and_Audit_Oracle_Authentication_bk"/> 
<id>tag:developerWorks.dw,23 May 2012 04:00:00 +0000</id>
<published>23 May 2012 04:00:00 +0000</published>
<updated>23 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[HOWTO Secure and Audit Oracle 10g and 11g - Account Security]]></title> 
<summary><![CDATA[This guide provides authoritative and succinct instructions highlighted by examples. Account security is one of the fundamental building blocks of ensuring a secure Oracle environment. In this chapter, you learn how to create users, manage passwords, limit accounts, and review which limits are assigned to accounts.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500010844"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500010844"/> 
<id>tag:developerWorks.dw,23 May 2012 04:00:00 +0000</id>
<published>23 May 2012 04:00:00 +0000</published>
<updated>23 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Configuring Secure Network Communication (SNC) between SAP systems and clients using WebSphere Adapter for SAP Software V7.5]]></title> 
<summary><![CDATA[Learn how to set up SNC between SAP systems and clients using WebSphere Adapter for SAP Software V7.5. This article describes SNC configuration at the SAP server end and shows you how to exchange the keys between the SAP and client systems.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/library/techarticles/1205_agarwal/1205_agarwal.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/library/techarticles/1205_agarwal/1205_agarwal.html?ca=dat-"/> 
<id>tag:developerWorks.dw,23 May 2012 04:00:00 +0000</id>
<published>23 May 2012 04:00:00 +0000</published>
<updated>23 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Implementing database security and auditing:  Getting started]]></title> 
<summary><![CDATA[Written by security expert Ron Ben Natan, Ph.D., this book provides valuable information for protecting sensitive information and passing audits smoothly. In Chapter 1, Getting Started, you will learn the first steps and best practices for effectively securing Oracle, SQL Server, DB2, MySQL, and Sybase environments.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500011009&amp;S_CMP=Guardium_getting_started_implementing_security"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500011009&amp;S_CMP=Guardium_getting_started_implementing_security"/> 
<id>tag:developerWorks.dw,23 May 2012 04:00:00 +0000</id>
<published>23 May 2012 04:00:00 +0000</published>
<updated>23 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[HOWTO Secure and Audit Oracle 10g and 11g - Standard auditing]]></title> 
<summary><![CDATA[This guide provides authoritative and succinct instructions highlighted by examples.This chapter explores the reasons why your auditors and multiple regulations, such as Sarbanes Oxley and PCI, require database auditing to provide records of what was done in your database, what certain users did, what privileges were used, and so on. An audit trail is one of the most effective ways to combat wrongdoing and detect suspicious activity.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;lang=en_US&amp;source=sw-infomgt&amp;S_PKG=500010659&amp;S_CMP=Guardium_how_to_secure_oracle_standard_auditing_ebook_lib"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;lang=en_US&amp;source=sw-infomgt&amp;S_PKG=500010659&amp;S_CMP=Guardium_how_to_secure_oracle_standard_auditing_ebook_lib"/> 
<id>tag:developerWorks.dw,23 May 2012 04:00:00 +0000</id>
<published>23 May 2012 04:00:00 +0000</published>
<updated>23 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[HOWTO Secure and Audit Oracle 10g and 11g - Mandatory and administrator auditing]]></title> 
<summary><![CDATA[This guide provides authoritative and succinct instructions highlighted by examples. Administrative and mandatory auditing are separate mechanisms that provide capabilities to tighten controls and access, monitor business operations, and find any activities that may deviate from company policy. In this chapter, learn how to audit SYS activities and SYSDBA privileges, use mandatory auditing, enable  administrator auditing, and use Syslog auditing.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;lang=en_US&amp;source=sw-infomgt&amp;S_PKG=500010978&amp;S_CMP=Guardium_how_to_secure_oracle_manditory_auditing_ebook_lib"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;lang=en_US&amp;source=sw-infomgt&amp;S_PKG=500010978&amp;S_CMP=Guardium_how_to_secure_oracle_manditory_auditing_ebook_lib"/> 
<id>tag:developerWorks.dw,23 May 2012 04:00:00 +0000</id>
<published>23 May 2012 04:00:00 +0000</published>
<updated>23 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[HOWTO Secure and Audit Oracle 10g and 11g - Hardening the database]]></title> 
<summary><![CDATA[This guide provides authoritative and succinct instructions highlighted by examples. In this chapter, you learn how to  choose a hardening guideline, use a vulnerability assessment tool, and create and maintain a secure configuration baseline.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500011079&amp;S_CMP=Guardium_how_to_secure_oracle_hardening_database"/> 
<link rel="self" type="text/html"  hreflang="en" href="https://www14.software.ibm.com/webapp/iwm/web/signup.do?ca=dat-&amp;source=sw-infomgt&amp;S_PKG=500011079&amp;S_CMP=Guardium_how_to_secure_oracle_hardening_database"/> 
<id>tag:developerWorks.dw,22 May 2012 04:00:00 +0000</id>
<published>22 May 2012 04:00:00 +0000</published>
<updated>22 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Anatomy of Security-Enhanced Linux (SELinux)]]></title> 
<summary><![CDATA[Linux has been described as one of the most secure operating systems
      available, but the National Security Agency (NSA) has taken Linux to the next level
      with the introduction of Security-Enhanced Linux (SELinux). SELinux takes the
      existing GNU/Linux operating system and extends it with kernel and user-space
      modifications to make it bullet-proof. If you&apos;re running a 2.6 kernel today, you
      might be surprised to know that you&apos;re using SELinux right now! This article
      explores the ideas behind SELinux and how it&apos;s implemented.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-selinux/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-selinux/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,17 May 2012 04:00:00 +0000</id>
<published>17 May 2012 04:00:00 +0000</published>
<updated>17 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Use of IPSEC in Linux when configuring network-to-network and point-to-point VPN connections]]></title> 
<summary><![CDATA[This article takes a detailed look at the design principles, the basis for deploying VPN, and the IPSEC protocol concept, providing a description of the general features of IPSEC and of the mechanisms required for its implementation.  This article was specially selected for translation by developerWorks Russia as an example of developerWorks world-wide offerings.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-ipsec/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-ipsec/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,15 May 2012 04:00:00 +0000</id>
<published>15 May 2012 04:00:00 +0000</published>
<updated>15 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Setting up SSL configuration in WebSphere Message Broker]]></title> 
<summary><![CDATA[This article shows you how to set up SSL communication in WebSphere Message Broker on AIX.  
It includes an example of an important factor to be considered during SSL troubleshooting and problem determination.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/library/techarticles/1205_bhat/1205_bhat.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/library/techarticles/1205_bhat/1205_bhat.html?ca=dat-"/> 
<id>tag:developerWorks.dw,09 May 2012 04:00:00 +0000</id>
<published>09 May 2012 04:00:00 +0000</published>
<updated>09 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Add Linux power to wireless routers with advanced tips and tricks for DD-WRT]]></title> 
<summary><![CDATA[DD-WRT brings all the power of the Linux networking stack to inexpensive wireless routers, turning a consumer router into a mighty networking powerhouse. Learn how to install and secure DD-WRT, and learn about the powerful, flexible command line behind the GUI.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-wifisecureddwrt/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-wifisecureddwrt/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,08 May 2012 04:00:00 +0000</id>
<published>08 May 2012 04:00:00 +0000</published>
<updated>08 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Protect your data at the speed of light with gKrypt, Part 2]]></title> 
<summary><![CDATA[Meet the gKrypt engine, the world&apos;s first package to employ general purpose
            graphics units (GPGPUs) for data encryption. It uses an Advanced Encryption Standard (AES) based 256-bit block cipher. This is the second article in a two-part series on AES encryption and the gKrypt engine. Part 1 introduced gKrypt and explained the AES algorithm in detail, its parallel breakdown and how to map it on a massive GPU architecture using the Compute Unified Device Architecture (CUDA). Part 2 looks at how AES is implemented on CUDA.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-gkryptdataencrypt2/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-gkryptdataencrypt2/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,01 May 2012 04:00:00 +0000</id>
<published>01 May 2012 04:00:00 +0000</published>
<updated>01 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Protect your data at the speed of light with gKrypt, Part 1]]></title> 
<summary><![CDATA[Meet the gKrypt engine, the world&apos;s first package to employ general purpose
        graphics units (GPGPUs) for data encryption, which is an important tool for information security. It uses an Advanced Encryption Standard (AES) based 256-bit block cipher to provide robust security.  In this Part 1 of a two-part series, explore the AES, the GPU port of the Rijndael algorithm for Linux, the parallelizing of the AES algorithm, and the use of the gKrypt Engine supporting CUDA for NVIDIA-based GPUs.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-gkryptdataencrypt1/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-gkryptdataencrypt1/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,01 May 2012 04:00:00 +0000</id>
<published>01 May 2012 04:00:00 +0000</published>
<updated>01 May 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Data transformation with IBM Netezza appliance using IBM InfoSphere Data
            Masking solution]]></title> 
<summary><![CDATA[Learn about using the IBM InfoSphere Optim Data Masking solution with 
		IBM InfoSphere Federation Server to de-identify data residing in an IBM Netezza 
		Data Warehouse appliance. In this article, you will follow a series of detailed 
		steps to configure InfoSphere Federation Server and InfoSphere Optim, establish 
		a connection to a Netezza appliance, extract and de-identify data from Netezza 
		appliance using InfoSphere Optim, and upload the masked data back to the Netezza 
		appliance.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1204datamasking/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1204datamasking/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,26 Apr 2012 04:00:00 +0000</id>
<published>26 Apr 2012 04:00:00 +0000</published>
<updated>26 Apr 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Enable multiuser logins with VNC]]></title> 
<summary><![CDATA[Virtual Network Computing (VNC) is a popular tool for providing remote access to computers. The usual VNC configuration is optimized for single-user workstations, and logging in to the VNC port directly accesses a single user&apos;s desktop. This configuration is awkward on multiuser computers, however. Fortunately, you have an alternative. By linking VNC to a Linux computer&apos;s normal X Display Manager Control Protocol (XDMCP) server, accessing the VNC port enables users to provide their user names and passwords, thereby enabling a single VNC server instance to handle multiple user logins.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/os-multiuserloginsvnc/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/os-multiuserloginsvnc/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,24 Apr 2012 04:00:00 +0000</id>
<published>24 Apr 2012 04:00:00 +0000</published>
<updated>24 Apr 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Advantages and options of private cloud computing]]></title> 
<summary><![CDATA[When we think of computer resources in the cloud, we usually think of public
    clouds, such as the ones offered by Google or Amazon, with infrastructure or applications shared by millions of clients worldwide, through the Internet. Some organizations, because of their organizational cultures or for security or regulatory concerns, cannot move directly into public clouds, but they have the option of private clouds. Sandra Sergi Santos explains the advantages and ways to use them to optimize your investments, processes, and infrastructure.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/private-cloud-advantages-options/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/private-cloud-advantages-options/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,17 Apr 2012 04:00:00 +0000</id>
<published>17 Apr 2012 04:00:00 +0000</published>
<updated>17 Apr 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Implement strong WiFi encryption the easy way with hostapd]]></title> 
<summary><![CDATA[Keep wireless security simple. hostapd, the Host Access Point daemon provides solid WiFi encryption that meets enterprise standards without all the overhead of running FreeRADIUS. Learn more about this tool and how to incorporate it into your environment.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-wifiencrypthostapd/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-wifiencrypthostapd/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,10 Apr 2012 04:00:00 +0000</id>
<published>10 Apr 2012 04:00:00 +0000</published>
<updated>10 Apr 2012 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Build a regulatory compliant web application]]></title> 
<summary><![CDATA[This article proposes creating three classifications for each type of data your organization owns, then using those classifications to determine how to apply security to each type of data as you design the application that will use the data. It&apos;s called Regulatory Compliant Cloud Computing (RC3).]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-regcloud/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-regcloud/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,02 Mar 2012 05:00:00 +0000</id>
<published>02 Mar 2012 05:00:00 +0000</published>
<updated>02 Mar 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Restricting database connections using trusted contexts in DB2 for Linux,
            UNIX, and Windows]]></title> 
<summary><![CDATA[Security administrators are responsible for, among other things, protecting a database against unauthorized 
 access or misuse by authorized database users (for example, inappropriate access to sensitive information within a database). A 
 common requirement to mitigate such risks is ensuring that users are allowed to connect to the database only from a list of 
 trusted hosts -- which are known to be secure. This article gives a practical example of how such a requirement can be put in 
 practice by making use of the trusted context feature of DB2 for Linux, UNIX, and Windows.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1202restrictluwconnex/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1202restrictluwconnex/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,09 Feb 2012 05:00:00 +0000</id>
<published>09 Feb 2012 05:00:00 +0000</published>
<updated>09 Feb 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[De-identify flat files and delimited files using InfoSphere Optim Data
            Privacy Solution and InfoSphere Federation Server]]></title> 
<summary><![CDATA[With the current environment of data sensitivity, there is a need to
            mask data not only in the traditional relational databases, but also in flat
            files that could be part of a testing scenario. Customers continue to need to
            send files to vendors, off-shore testers, and even internal testers, and the
            data in those files could be subject to regulations. In this article, learn
            how to de-identify private data in flat files by using IBM InfoSphere(TM)
            Federation Server to create a relational table (nickname) for data in flat
            files and then apply data privacy algorithms using IBM Optim(TM) Data Privacy
            Solution. [2012 Feb 9 update: This
                    article has been updated for the most recent versions of Optim. You
                    can now de-identify flat positional files, and you can use several new masking
                    functions for columns. --Ed.]]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-0907optimprivacy/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-0907optimprivacy/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,09 Feb 2012 05:00:00 +0000</id>
<published>09 Feb 2012 05:00:00 +0000</published>
<updated>09 Feb 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[InfoSphere Guardium application user translation]]></title> 
<summary><![CDATA[Many organizations today have data auditing requirements that make 
            it mandatory to be able to identify which application end users are executing 
            specific database transactions. In an environment where a connection pool is 
            being used to enhance performance, it can be a challenge to identify the end 
            user.  Learn five methods for solving this fundamental governance problem using 
            IBM InfoSphere Guardium, and understand which of these methods is most applicable 
            for your environment.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1105fivemethods/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1105fivemethods/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,01 Feb 2012 05:00:00 +0000</id>
<published>01 Feb 2012 05:00:00 +0000</published>
<updated>01 Feb 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Designing a database for multi-tenancy on the cloud]]></title> 
<summary><![CDATA[Learn some considerations that new software as a service
    (SaaS) vendors need to take into account when developing applications or 
    modifying existing ones to enable them for multi-tenancy on the cloud. The article
    discusses the considerations  only from a database perspective -- 
    specifically, from an IBM DB2 perspective. Six cases or methods are described.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1201dbdesigncloud/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1201dbdesigncloud/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,26 Jan 2012 05:00:00 +0000</id>
<published>26 Jan 2012 05:00:00 +0000</published>
<updated>26 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[WebSphere proxy server routing capabilities in a secured environment]]></title> 
<summary><![CDATA[This article discusses the various routing capabilities of the WebSphere
            proxy server, which is a feature of IBM WebSphere Application Server Network
            Deployment.  Multiple configuration scenarios are presented, along with
            background information, setup
            instructions and tips to help you achieve success routing content using proxy
            server features in a secured environment.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/techjournal/1201_huebler/1201_huebler.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/techjournal/1201_huebler/1201_huebler.html?ca=dat-"/> 
<id>tag:developerWorks.dw,25 Jan 2012 05:00:00 +0000</id>
<published>25 Jan 2012 05:00:00 +0000</published>
<updated>25 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Java development 2.0: Securing Java application data for cloud computing]]></title> 
<summary><![CDATA[Data security is a serious concern for organizations considering cloud
    adoption, but in many cases it needn&apos;t be.  In this installment of Java development
    2.0, learn how to use private-key encryption and the Advanced Encryption Standard to
    secure sensitive application data for the cloud. You&apos;ll also get a quick tutorial on encryption strategy, which is important for maximizing the efficiency of conditional searches on distributed cloud datastores.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/java/library/j-javadev2-23/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/java/library/j-javadev2-23/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,24 Jan 2012 05:00:00 +0000</id>
<published>24 Jan 2012 05:00:00 +0000</published>
<updated>24 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Migrating from DB2 Control Center to IBM Data Studio]]></title> 
<summary><![CDATA[Since the DB2 Control Center tools have been deprecated in DB2 9.7,
            users have been encouraged to adopt IBM Data Studio and IBM InfoSphere Optim
            tools for managing DB2 databases. IBM Data Studio 3.1 was released in
            October/2011 with several enhancements over previous versions that make it an
            excellent replacement for Control Center. This article aims to help DB2 users
            who are familiar with Control Center tools to quickly transition to IBM Data Studio.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1201migctrlctrdatastudio/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1201migctrlctrdatastudio/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,19 Jan 2012 05:00:00 +0000</id>
<published>19 Jan 2012 05:00:00 +0000</published>
<updated>19 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Customize container-managed security with AuthenticRoast]]></title> 
<summary><![CDATA[AuthenticRoast is an open source project that works with the Java Authentication Service Provider Interface for Containers (JSR 196) to let you develop custom authentication modules for use with container-managed, declarative security. Joe Sam Shirah shows how AuthenticRoast can minimize configuration impact on Java Enterprise Edition (JEE) containers and greatly reduce coding effort for custom security requirements. A downloadable WAR with demonstration code is provided.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/j-authenticroast/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/j-authenticroast/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,17 Jan 2012 05:00:00 +0000</id>
<published>17 Jan 2012 05:00:00 +0000</published>
<updated>17 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Avoid vulnerabilities and threats in the cloud]]></title> 
<summary><![CDATA[The cloud has been one of the most talked about technologies since Web 2.0. While the cloud has been lauded for its promise of cost savings, many organizations hesitate to pursue cloud-based solutions for security reasons. Like any other technology, the cloud is vulnerable to malicious attacks, but those who understand what security challenges they may face in the cloud find that they are able to better secure their resources that reside there.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-cloudthreats/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-cloudthreats/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,13 Jan 2012 05:00:00 +0000</id>
<published>13 Jan 2012 05:00:00 +0000</published>
<updated>13 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Craft a SaaS-oriented vulnerability mitigation policy]]></title> 
<summary><![CDATA[Many businesses and industries depend on web-based software to run business processes, conduct transactions, and deliver services to customers. When a deadline looms, organizations may get frantic and sacrifice secure features to bring the application into production. This is a fast (and reactive) solution that results in a usually defective application. A better, proactive solution is to create a SaaS-oriented web application vulnerability mitigation policy (and employ a SaaS-based vulnerability scanner) into place that anticipates application vulnerabilities and has several solutions to repair them ready to go. The author will provide a roadmap to such a policy and illustrate using a scanner tool in the form of IBM Rational AppScan products.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-vulnerabilitypolicy/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-vulnerabilitypolicy/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,12 Jan 2012 05:00:00 +0000</id>
<published>12 Jan 2012 05:00:00 +0000</published>
<updated>12 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Secure virtual machine instances in the cloud]]></title> 
<summary><![CDATA[The Internet is a very hostile place for a server to be running. Security is a crucial element of any deployment of compute resources within an enterprise and even more important when moving those resources beyond the physical walls of an enterprise. With the growth of cloud-based infrastructures, sometimes inexperienced or unaware users do not consider how important security is in a public cloud. In this article, the authors discuss some of the topics which need to be considered when a virtual machine (VM) is provisioned in IBM SmartCloud Enterprise.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-cloudvmsecurityrisks/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-cloudvmsecurityrisks/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,09 Jan 2012 05:00:00 +0000</id>
<published>09 Jan 2012 05:00:00 +0000</published>
<updated>09 Jan 2012 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Enforcing SOA message security policy with WebSphere Service Registry and
            Repository and WebSphere DataPower]]></title> 
<summary><![CDATA[This tutorial presents the reader with a concrete method for using a
            central repository in this example WebSphere Service Registry and Repository (WSRR) to implement business policies governing SOA
            message flows, enforced by the WebSphere DataPower SOA appliances.  The
            necessary configuraton steps for both the WSRR and the WebSphere DataPower appliance are detailed.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/webservices/library/ws-dpwsrr/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/webservices/library/ws-dpwsrr/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,21 Dec 2011 05:00:00 +0000</id>
<published>21 Dec 2011 05:00:00 +0000</published>
<updated>21 Dec 2011 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Configuring secured Web service calls from WebSphere Process Server V7 to
            a non-WebSphere server via SSL]]></title> 
<summary><![CDATA[This tutorial provides steps to configure an SSL for a Web service call from
            WebSphere Process Server to a non-WebSphere Web service. It covers generating client and
            sample server keys, importing certificates, configuring the SOAP UI for SSL,
            mocking up the Web service, and testing the SSL.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/tutorials/1112_sharath/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/websphere/tutorials/1112_sharath/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,21 Dec 2011 05:00:00 +0000</id>
<published>21 Dec 2011 05:00:00 +0000</published>
<updated>21 Dec 2011 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[IBM Cognos Proven Practices: Securing the IBM Cognos 10 BI Environment]]></title> 
<summary><![CDATA[A set of proven practices and guidelines to be taken into consideration when securing the IBM Cognos 10 BI environment.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/cognos/security/cognos_bi_platform/page602.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/cognos/security/cognos_bi_platform/page602.html?ca=dat-"/> 
<id>tag:developerWorks.dw,16 Dec 2011 05:00:00 +0000</id>
<published>16 Dec 2011 05:00:00 +0000</published>
<updated>16 Dec 2011 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Learn Linux, 302 (Mixed environments): Samba security]]></title> 
<summary><![CDATA[In preparation for taking the Linux Professional Institute Certification
            exam LPI-302 for systems administrators, learn how to secure Samba and
            troubleshoot problems related to security.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-lpic3-315-2/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/security/library/l-lpic3-315-2/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,13 Dec 2011 05:00:00 +0000</id>
<published>13 Dec 2011 05:00:00 +0000</published>
<updated>13 Dec 2011 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Automated vulnerability scanning of web applications with Rational AppScan]]></title> 
<summary><![CDATA[This article uses two examples to explain how to use Rational AppScan Standard Edition v8.5 for
            automated security vulnerability testing of web and web service applications. The authors also set the stage
            for examples to explore the regulatory compliance reporting capabilities.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/automated-vulnerability-scanning-web-applications/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/automated-vulnerability-scanning-web-applications/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,13 Dec 2011 05:00:00 +0000</id>
<published>13 Dec 2011 05:00:00 +0000</published>
<updated>13 Dec 2011 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Implement secure SSH access to IBM Cloud]]></title> 
<summary><![CDATA[Understand how to upgrade, choose, and implement a highly effective, Secure Shell
              (SSH) connectivity solution to the IBM Cloud by examining some recent
            trends underlying the migration of enterprise-level, remote computing to the
            cloud. Look at key areas to consider when making the shift from in-house
            handling of key processes to a cloud-based solution. Explore an existing end-to-end, 
            server and client SSH security solution and see how it addresses real world regulatory requirements.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-sshaccessibmcloud/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-sshaccessibmcloud/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,08 Dec 2011 05:00:00 +0000</id>
<published>08 Dec 2011 05:00:00 +0000</published>
<updated>08 Dec 2011 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Security authentication mechanism in AIX]]></title> 
<summary><![CDATA[Authentication mechanism verifies which users are allowed to access a
            system. Administrator can define authentication protocol; based on that
            protocol, users&apos; credentials are verified, and users are given access to the
            system. AIX provides several authentication and identification modules. A
            user&apos;s authentication and identification are done based on the user&apos;s
            attributes on AIX. This article covers the user&apos;s authentication and
            identification attributes, load modules available in AIX, and a new authentication attribute introduced AIX 6.1 Tl07 and AIX 7.1 Tl1 releases.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/aix/library/au-securityauthmeth/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/aix/library/au-securityauthmeth/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,15 Nov 2011 05:00:00 +0000</id>
<published>15 Nov 2011 05:00:00 +0000</published>
<updated>15 Nov 2011 05:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Integrate InfoSphere Guardium Data Redaction with IBM Classification Module]]></title> 
<summary><![CDATA[InfoSphere Guardium Data Redaction is capable of finding and concealing sensitive text within a document. 
            Within an organization, not all documents contain sensitive data. 
            For the data redaction to be effective, it is critical that relevant documents be identified.
            The sensitivity of the entities is often dependent on context. InfoSphere Classification Module
            is capable of identifying sensitive documents containing data that require redaction. This 
            article explains how to integrate Guardium Data Redaction and Classification Module to achieve the goal 
            of redacting only relevant documents.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1111guardiumclassmodule/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1111guardiumclassmodule/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,03 Nov 2011 04:00:00 +0000</id>
<published>03 Nov 2011 04:00:00 +0000</published>
<updated>03 Nov 2011 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Protect your sensitive data using InfoSphere Optim Designer]]></title> 
<summary><![CDATA[IBM InfoSphere Optim Data Masking Solution V2.2 is a solution to protect
            sensitive data in data sources with data privacy functions. IBM InfoSphere
            Optim Data Masking Solution V2.2 provides various features for data masking as
            &quot;data privacy policies&quot;. Optim Designer is a component of IBM InfoSphere Optim
            Data Masking Solution V2.2 that allows defining and designing &quot;data management
            services&quot; to mask sensitive data. This article explains how to protect
            sensitive data using Optim Designer and provides examples.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1111optimdesigner/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1111optimdesigner/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,03 Nov 2011 04:00:00 +0000</id>
<published>03 Nov 2011 04:00:00 +0000</published>
<updated>03 Nov 2011 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Securing your DB2 file systems with EFS]]></title> 
<summary><![CDATA[From AIX 6.1 onwards, user created filesystems can now be encrypted, which is
    implemented at the file system level. This approach allows for some applications to be
    encrypted, with not much overhead  maintenance. One such product that can be used for 
    data encryption is DB2. The need to encrypt application data is becoming  more common,
    especially if backups are taken and are moved off site, or the application resides on
    external sites. SOX even recommends that to maintain the confidentially of the data,
    encryption should be strongly considered. This article demonstrates how to create a
    DB2 database and encrypt it under AIX and looks at common EFS commands.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/aix/library/au-efsdb2/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/aix/library/au-efsdb2/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,25 Oct 2011 04:00:00 +0000</id>
<published>25 Oct 2011 04:00:00 +0000</published>
<updated>25 Oct 2011 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Craft security policy for mobile devices]]></title> 
<summary><![CDATA[Enterprise users are not bound to one mobile device to access a cloud service: A user can choose to enroll more than one mobile device to an enterprise server for better device access flexibility.  This flexibility makes having corporate security policy more critical than ever.  To help you understand security for mobile device access to the cloud, the author illuminates the service delivery model view and the device view of the environment and presents service delivery model scenarios with checklists.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-mobilesecuritypolicy/index.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/cloud/library/cl-mobilesecuritypolicy/index.html?ca=dat-"/> 
<id>tag:developerWorks.dw,17 Oct 2011 04:00:00 +0000</id>
<published>17 Oct 2011 04:00:00 +0000</published>
<updated>17 Oct 2011 04:00:00 +0000</updated>
</entry>



<entry>
<title><![CDATA[Business Agility: A technical perspective from the IBM Rational software staff]]></title> 
<summary><![CDATA[Mike Perrow, a Rational software manager, explains how Rational software and services can help you
            attain and sustain what IBM calls &quot;Business Agility:&quot; better decisions through analytics and business rules,
            a smarter approach to the process of software delivery, and ways to extend your reach with secure,
            multi-platform and cloud development. He cites relevant features and their significance and benefits in
            these products, among others: IBM Rational Asset Manager 7.5.1, Rational Automation Framework 3.0, Rational
            Focal Point 6.5, Rational Insight 1.1, Rational Team Concert, Rational System Architect 11.4, plus support
            for Open Services Lifecycle Collaboration (OSLC), the Rational solution for Collaborative Lifecycle
            Management (CLM), and CLM for Agility@Scale.]]></summary> 
<link rel="alternate" type="application/atom+xml"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/business-agility-launch.html?ca=dat-"/> 
<link rel="self" type="text/html"  hreflang="en" href="http://www.ibm.com/developerworks/rational/library/business-agility-launch.html?ca=dat-"/> 
<id>tag:developerWorks.dw,11 Oct 2011 04:00:00 +0000</id>
<published>11 Oct 2011 04:00:00 +0000</published>
<updated>11 Oct 2011 04:00:00 +0000</updated>
</entry>



</feed>

