安全新兵营第四天：认证管理

InfoWorld Security Boot Camp: Day 4: Get a handle on authentication

September 24, 2009

YOUR ASSIGNMENT TODAY: Get a handle on authentication.     WHY DO IT: One rational, standardized authentication policy across the organization will make all your applications more secure.     HOW TO DO IT: Outline the security issue for your boss: you’ve got a hodgepodge of access and authentication methods, and they’re ripe for access by the right inquisitive hacker. Once the boss realizes there's a real problem, get to work. Fix the highest-risk assets first, followed by applications with lower use and exposure. This means fixing existing systems, implementing the new policies in new custom projects, and enforcing the new policies when buying new software. If a legacy application cannot be brought in line with the new policies, consider getting rid of it.   RECOMMENDED READING: " Strategic security: Get a handle on authentication," Infoworld.com