ISSE 2009 Securing Electronic Business Processes Highlights of the I

This book presents the most interesting talks given at ISSE 2009 – the forum for the inter-disciplinary discussion of how to adequately secure electronic business processes. The topics include: - Economics of Security and Identity Management - Security Se

  • PDF / 180,758,110 Bytes
  • 374 Pages / 481.92 x 680.16 pts Page_size
  • 6 Downloads / 214 Views

DOWNLOAD

REPORT


I Helmut Reimer I Wolfgang

Schneider (Eds.)

ISSE 2009 Securing Electronic Business Processes

Norbert Pohlmann I Helmut Reimer Wolfgang Schneider (Eds.)

I

ISSE 2009 Securing Electronic Business Processes Highlights of the Information Security Solutions Europe 2009 Conference With 73 illustrations

11 VIEWEG+ TEUBNER

Bibliographic information published by the Deutsche Nationalbibliothek The Deutsche Nationalbibliothek lists this publication in the Deutsche Nationalbibliografie; detailed bibliographic data are available in the Internet at http :/ /dnb.d-nb.de.

Many of designations used by manufacturers and seilers to distinguish their products are claimed as trademarks.

The editors are grateful to Professor Dr. Patrick Horster for grant ing permiss ion to use his layout for the following cont ribut ions.

1st Edition 2010 All rights reserved © Vieweg+Teubner Editorial

I GWV Fachverlage GmbH, Wiesbaden 2010 Office : Christel Roß I Andrea Broßler

Vieweg+Teubner is part of the specialist publishing group Springer Science+Business Media. www.viewegteubner.de No part of this publication may be reproduced, stored in a retrieval system or transmitted, in any form or by any means, electronic, mechanical , photocopying, recording, or otherwise , without the prior written permission of the copyright holder. Registered and/or industrial names, trade names, trade descriptions etc . cited in this publication are part of the law for trade-mark protection and may not be used free in any form or by any means even if this is not specifically marked. Cover design: KünkelLopka Medienentwicklung, Heidelberg Typesetting: Oliver Reimer, Jena Printing company: STRAUSS GMBH, Mörlenbach Printed on acid-free paper Printed in Germany ISBN 978-3-8348-0958-2

v

Contents

Contents Preface About this Book Welcome

xi

xiii xv

Microsoft Sponsoring Contribution Claims and Identity: On-Premise and Cloud Solutions

1

Vittorio Bertoeei

Economics of Security and Identity Management Measuring Information Seeurity: Guidelines to Build Metries

15 17

Eberhard von Faber

Demystifying SAP seeurity

27

Mare Sei · Kristof Van Der Auwera

The ISACA Business Model for Information Seeurity

37

Rolf von Roessing

ICT Systems Contributing to European Seeure-by-Design Critieallnfrastruetures

48

Fabien Cavenne

ROI, Pitfalls and Best Praetiees with an Enterprise Smart Card Deployment_ 63 Philip Hoyer

A General Quality Classifieation System for eiDs and e-Signatures

72

Jon 01nes . Leif Buene . Anette Andresen . Havard Grindheim Jörg Apitzseh . Adriano Rossi

Seeond Wave of Biometrie ID-doeuments in Europe: The Residenee Permit for non-EUIEEA Nationals Detlef Houdeau

87

Contents

VI

Security Services and Large Scale Public Applications User and Access Management in Belgian e-Government

95 97

Jos Dumortier . Frank Robben

PKI - Crawling Out of the Grave & Into the Arms of Government

108

Phil D'Angio . Panos Vassilliadas . Phaidon Kaklamanis

Entitlement Management: Ready to Enter the IdM Mainstream

116

Gerry Gebel . Alice Wang

Secure E