Eduardo B. Fernandez (FL, USA - www.cse.fau.edu/~ed) is a professor in the Department of Computer Science and Engineering at the Florida Atlantic University in Boca Raton, Florida. Ed has published numerous papers and four books on authorization models, object-oriented analysis & design, and security patterns. He has lectured all over the world at both academic and industrial meetings. His current interests include security patterns, web services, cloud computing security and fault tolerance. He holds a MS degree in Electrical Engineering from Purdue University and a Ph.D. in Computer Science from UCLA. Ed is an active consultant for industry, including assignments with IBM, Allied Signal, Motorola, Lucent, and others.

• Foreword xvii Preface xixPart I IntroductionChapter 1 Motivation and Objectives 1Chapter 2 Patterns and Security Patterns 7Chapter 3 A Secure Systems Development Methodology 23 Part II Patterns Chapter 4 Patterns for Identity Management 31 Chapter 5 Patterns for Authentication 51Chapter 6 Patterns for Access Control 71Chapter 7 Patterns for Secure Process Management 117Chapter 8 Patterns for Secure Execution and File Management 145Chapter 9 Patterns for Secure OS Architecture and Administration 163Chapter 10 Security Patterns for Networks 193Chapter 11 Patterns for Web Services Security 231Chapter 12 Patterns for Web Services Cryptography 285Chapter 13 Patterns for Secure Middleware 337Chapter 14 Misuse Patterns 383Chapter 15 Patterns for Cloud Computing Architecture 411Part III Use of the PatternsChapter 16 Building Secure Architectures 441Chapter 17 Summary and the Future of Security Patterns 479Appendix A Pseudocode for XACML Access Control Evaluation 499Glossary 501References 509Index of Patterns 543Index 547

Select Guide Rating

Eduardo B. Fernandez (FL, USA - www.cse.fau.edu/~ed) is a professor in the Department of Computer Science and Engineering at the Florida Atlantic University in Boca Raton, Florida. Ed has published numerous papers and four books on authorization models, object-oriented analysis & design, and security patterns. He has lectured all over the world at both academic and industrial meetings. His current interests include security patterns, web services, cloud computing security and fault tolerance. He holds a MS degree in Electrical Engineering from Purdue University and a Ph.D. in Computer Science from UCLA. Ed is an active consultant for industry, including assignments with IBM, Allied Signal, Motorola, Lucent, and others.

• Foreword xvii Preface xixPart I IntroductionChapter 1 Motivation and Objectives 1Chapter 2 Patterns and Security Patterns 7Chapter 3 A Secure Systems Development Methodology 23 Part II Patterns Chapter 4 Patterns for Identity Management 31 Chapter 5 Patterns for Authentication 51Chapter 6 Patterns for Access Control 71Chapter 7 Patterns for Secure Process Management 117Chapter 8 Patterns for Secure Execution and File Management 145Chapter 9 Patterns for Secure OS Architecture and Administration 163Chapter 10 Security Patterns for Networks 193Chapter 11 Patterns for Web Services Security 231Chapter 12 Patterns for Web Services Cryptography 285Chapter 13 Patterns for Secure Middleware 337Chapter 14 Misuse Patterns 383Chapter 15 Patterns for Cloud Computing Architecture 411Part III Use of the PatternsChapter 16 Building Secure Architectures 441Chapter 17 Summary and the Future of Security Patterns 479Appendix A Pseudocode for XACML Access Control Evaluation 499Glossary 501References 509Index of Patterns 543Index 547

Select Guide Rating

Eduardo B. Fernandez (FL, USA - www.cse.fau.edu/~ed) is a professor in the Department of Computer Science and Engineering at the Florida Atlantic University in Boca Raton, Florida. Ed has published numerous papers and four books on authorization models, object-oriented analysis & design, and security patterns. He has lectured all over the world at both academic and industrial meetings. His current interests include security patterns, web services, cloud computing security and fault tolerance. He holds a MS degree in Electrical Engineering from Purdue University and a Ph.D. in Computer Science from UCLA. Ed is an active consultant for industry, including assignments with IBM, Allied Signal, Motorola, Lucent, and others.

• Foreword xvii Preface xixPart I IntroductionChapter 1 Motivation and Objectives 1Chapter 2 Patterns and Security Patterns 7Chapter 3 A Secure Systems Development Methodology 23 Part II Patterns Chapter 4 Patterns for Identity Management 31 Chapter 5 Patterns for Authentication 51Chapter 6 Patterns for Access Control 71Chapter 7 Patterns for Secure Process Management 117Chapter 8 Patterns for Secure Execution and File Management 145Chapter 9 Patterns for Secure OS Architecture and Administration 163Chapter 10 Security Patterns for Networks 193Chapter 11 Patterns for Web Services Security 231Chapter 12 Patterns for Web Services Cryptography 285Chapter 13 Patterns for Secure Middleware 337Chapter 14 Misuse Patterns 383Chapter 15 Patterns for Cloud Computing Architecture 411Part III Use of the PatternsChapter 16 Building Secure Architectures 441Chapter 17 Summary and the Future of Security Patterns 479Appendix A Pseudocode for XACML Access Control Evaluation 499Glossary 501References 509Index of Patterns 543Index 547

Select Guide Rating