Solution Modeling
Runtime Seucurity Solution
Runtime Seucurity Solution
News
RSA 2012
From February 27th to March 2nd 2012, CORISECIO will be part of the world’s largest IT security conference in San Francisco. On the RSA CORISECIO will present Open Source solutions for Cloud Security. You can find us at booth 1342.
Version 1.2 of the SOA Security Gateway is available now. A download of the SSF Gateway is now available for all interested parties at: http://secrt.corisecio.com.
CORISECIO released the Open XML Gateway after a successful Public Beta Test. Using it companies may protect their Web Services in an efficient and easy way against threats. It is available as a free download.

Modeling of security processes following the BPEL standard


As add-on for the Open Source securityRunTime (secRT) CORISECIO provides the Modeling Adapter. By using the modular approach of reusable components, CORISECIO has taken over the modeling principle into their software development concepts at an early stage.

Using the Modeling Adapter customers are able to create complex security processes without programming effort. Security processes once configured may be distributed automatically to the runtime environments where they are enforced.

Following the SOA idea CORISECIO uses existing standards for modeling and realization of security processes. For this CORISECIO enhances the BPEL standard with security elements.

Also complex security processes like e.g. description of authentication and signature processes or realization of a Four-Eye principle may be realized as methods. Legal and regulatory requirements like PCI (Payment Card Industry Data Security Standard) can be modeled once and may be applied to existing services.

CORISECIO provides ready-made models as a part of their security solutions. Customers may model own complex security processes quick and easy using the Modeling Adapter.

The adapter BPEL Engine realizes the models defined in the adapter Modeling on basis of the runtime environment secRT. Analogous to the secRT workflow component the BPEL engine thereby enables modeling of complex processes, this realizes security processes efficiently.

Find additional information:
CORISECIO secRT provides a secure runtime for various security solutions in organizations. The secRT is developed as an Eclispe project and provides several advantages in the Enterprise Version, which enhances the security level of the solution.

Using adapter signature, it can be guaranteed that only allowed adapters are executed in the runtime. Additionally the Enterprise Version provides a central administration for all operated secRT entities in the organization, which improves the level of control over the security solution. Find out more about the secRT.
The secRT is a security platform for security infrastructures and is developed as an Eclipse runtime project. During development of the secRT, great emphasis was placed to provide a stable basis for security solutions.

To provide this goal, the secRT offers a multitude of basic requirements for security solutions like an Entity & Key Management, a Certificate Authority and a simple tool for the definition of security processes. Using the secRT, organizations may define customized security solutions to fit their requirements.

Take a look at secRT to find out more about this topic.
Did you know that CORISECIO security solutions do not require an additional entity management for entities, which are already existing in the directories of an organization? You can enhance every CORISECIO solution using the adapters LDAP and Remote Directory to directly work with entities inside your directories.

You may choose if you want to import the entities in the CORISECIO Security Repository or even using real-time access to the directory. Using this approach, the administration effort required for CORISECIO solutions is lowered and the costs and time required for the organization is lowered, too.
Security Modeling
Did you know that CORISECIO solutions provide the possibility to model your own security processes? To provide this functionality CORISECIO offers a graphical modeling tool, which enables the user to define complex security processes (e.g. doublechecking of certain actions) with a few mouse clicks.

Based on security enhancements for the BPEL standard, the user may assemble security services, which are customized to the organization´s needs. Find out more about this topic in Modeling.