|
|
Mutli-Dimensional Access Control in Web Applications
Grešša, Pavol ; Burget, Radek (referee) ; Kolář, Dušan (advisor)
This master's thesis deals with the analysis, design and implementation of authentication and authorization subsystem into the environment of distributed web application. It unifies the well-known security models into the one universal security model that can be used for the development of authorization device enabling the user to secure the applications with various security models. Furthermore, it applies this integration of models into the Takeplace system.
|
|
|
SSH Public Key Management in FreeIPA and SSSD
Cholasta, Jan ; Smrčka, Aleš (referee) ; Zelený, Jan (advisor)
SSH je jeden z nejpoužívanějších protokolů pro vzdálený přístup v Internetu. SSH je flexibilní a rozšiřitelný protokol, který se skládá ze tří hlavních součástí: SSH transportního protokolu, který obstarává důvěrnost, integritu a autentizaci serveru, SSH autentizačního protokolu, který obstarává autentizaci uživatelů a SSH spojovacího protokolu, který obstarává multiplexování více kanálů různých typů (interaktivní sezení, přesměrování TCP/IP spojení, atd.) do jednoho spojení. OpenSSH je jedna z nejrozšířenějších implemetací SSH. OpenSSH obsahuje SSH server, SSH klienty, generátor SSH klíčů a autentizační agent, který usnadňuje autentizaci pomocí veřejných klíčů. FreeIPA a SSSD jsou projekty poskytující centrální správu identit pro Linuxové a Unixové systémy. Tyto projekty sice v době psaní této práce přímou podporu SSH neobsahovaly, ale do jisté míry je ve spojení s OpenSSH používat možné bylo.
|
|
|
Identity management
Kefer, Daniel ; Polívka, Michal (referee) ; Pelka, Tomáš (advisor)
The master thesis is divided into two parts. In the first part, identity management is described on theoretical basis. Particular domains of identity management including authentication, authorization and audit are explained as well as Single Sign-On concept, i.e. using single credentials and entering them just once for access to multiple independent systems or services. In the second part, which forms the main part of this thesis, a practical project was implemented on the infrastructure of the Department of Telecommunications within the Faculty of Electrical Engineering and Communication, Brno University of Technology. The goal of this project was to create an environment for central 4 authentication and Single Sign-On using only open source technologies within a computer laboratory used for teaching OS Linux. The project is based on OS Linux Debian, Kerberos as a protocol for secure authentication and LDAP server OpenLDAP. For the Single Sign-On demonstration, NFS services for accessing data on the network were chosen. Using NFS services, users can sign-on to any workstation and access all their data. Administration of users and their import from central FEEC databases was implemented using scripts developed in Python. Next, using Apache, PHP and MySQL, a front-end audit interface for the network administrator was developed in order to inspect and evaluate security events in the network. Messages about suspicious events are delivered to administrator’s mailbox in real time. The project is intended as a security platform which means that other services can be implemented for Single Sign-On as well as new mechanisms for evaluation of suspicious events.
|
|
|
Identity management in the bank
Gustab, Tomáš ; Svatá, Vlasta (advisor) ; Černý, Miroslav (referee)
The main focus of this thesis is to analyse the identity management of Czech bank. The author deals with the authentication and authorization of bank employees, the lifecycle of identities and also suggests the operational improvement of systems that relate to identity management. The aim is to show the view from every angle on identity management, highlight the problems and propose countermeasures, respectively measures to improve the identity management running.The main methods of research are analysis of documents, unstructured interview with employees and observation of systems operation. The benefit of this work is in providing author's opinion and recommendations, which can lead to an overall better running identity management in the bank.
|
|
|
Identity Management Solution for Small and Medium Businesses
MAXA, Karel
The topic of this master's thesis is development of identity management solution for small and medium business. The thesis is divided into four major parts. The first part contains theoretical background as description of RBAC model or model with relationships between practically used objects (user identity, role, position, permission, account...). Analysis of functioning and needs of targeted organizations was carried out in the second part. The third part describes the design of the developed application. The fourth part discusses actual implementation of the application. The main outcome of the thesis is implemented application that can be deployed at thesis defined organizations. The application includes all the functionality required in the first phase of the project.
|
|
|
Identity Management
Fryaufová, Lucie ; Svatá, Vlasta (advisor) ; Ondruška, Marek (referee)
The topic of this thesis is focused on the issues of the Identity Management. The author of the work describes the possibilities using this concept and application Identity Management in organizations. This issue is not oriented just from the point of Information security where this area belongs. The goal of this work is to create a framework of the process Identity Management by using best practises and standards. The context of the work should describe new trends and using special tools for safety work with process of Identity Management and the risk in area of the Identity Management. To achieve these goals which are mentioned above is ensured by using analysis of information sources and consulting with professionals from organization. The benefit of this work is provide comparison of teoretical knowledges with practical usage in organization and its recommendation to improve the process Identity Management.
|
|
|
The Benefits of Identity and Access Management
Strachota, Marek ; Balada, Jakub (advisor) ; Buchalcevová, Alena (referee)
This thesis defines and verifies the benefits of Identity and Access management systems that firms and institutions make use of. The first part contains an examination of the very basic principles of Identity and Access management. This is where the characteristic features are described and their advantages and disadvantages valued. The last part sums up and comments all the advantages, drawbacks and possible risks, while a certain set of metrics are recommended. The following part describes the most important firms on the Identity and Access management market and their own products. Trends and market situation is examined. The practical part focuses on the real benefits of Identity and Access management solutions when used in a chosen firm. The situation before and after upgrading a certain Identity and Access management solution in a selected firm is observed and the benefits and shortcomings are evaluated. The outcome of this thesis is to confirm both theoretical and practical expectations and considerations of Identity and Access management solutions in a real life situation.
|
|
|
Identity management in the SaaS environment
Krčma, Marek ; Mészáros, Jan (advisor) ; Buchalcevová, Alena (referee)
This bachelor thesis deals with the identity management in the SaaS environment. The first part of the thesis defines and connects the areas which identity management is related. These areas are: cloud computing, authentication and authorization, legislation and standards. In areas of cloud computing, authentication and authorization is taken emphasis on security issues. The next part of the thesis compares three authentication and authorization standards (OpenID, OAuth and SAML) that are appropriate solution of the identity management in SaaS applications. The thesis defines the specifics for each standard and specifies the requirements for effective implementation. The last part describes how to implement OpenID authentication standard in an existing web application.
|
|
|
OpenID user authentication, implementation and support in PHP
Sokol, Vojtěch ; Pavlíček, Luboš (advisor) ; Gála, Libor (referee)
This bachelor work is focused on the user authentication on internet using the OpenID. The OpenID communication protocol is described and also other similar technologies are mentioned. The work introduces implementation methods within the PHP environment and lists which libraries are available and what are the possibilities of the most frequently used PHP frameworks to implement the OpenID authentication.
|
|
|
Centralized management of user roles
Kotora, Ondřej ; Gála, Libor (advisor) ; Vohnoutová, Marta (referee)
Správa rolí a identit se stává elementární součástí podnikových informačních systémů. Je součástí oboru Identity a Access managementu, který je velmi mladou a dynamicky se rozvíjející tržní oblastí. Tato diplomová práce poskytuje základní přehled o členění této tržní oblasti a zároveň charakterizuje tuto oblast z pohledu obecného přístupu a přístupu na úrovni odvětví. Je zde popsána nabídka několika hlavních hráčů na trhu s důrazem na vhodnost nasazení v českém prostředí. Konkrétně je vybírán vhodný produkt pro nasazení v České správě sociálního zabezpečení, největší finančně správní institucí státní správy ČR. Je zde také popsáno několik faktorů na které by měl být při podobném výběru kladen důraz. Samotný výběr je pouze informativní s účelem dodat aktuální přehled o možnostech řešení, které trh pro danou oblast nabízí. Identity a Access management totiž v České správě sociálního zabezpečení již zaveden byl. O tomto řešení se zmiňuje předposlední kapitola.
|
guest ::
