University of Birmingham Funmilade Faniyi Introduction Project - PowerPoint PPT Presentation

School of Computer Science University of Birmingham Funmilade Faniyi

 Introduction  Project Overview  Database Design Tips  Conclusion

Waterloo bank has recently suffered the loss of many of its valued customers due to high incidence of security breaches on its Internet banking platform and other applications. In response to this, the bank’s CTO decided to purchase a two-factor factor authentica nticati tion on system em to protect new and existing applications. As the database administrator, your job is to work with the rest of the team to ensure a successful deployment.

 User identity theft issues  Low patronage of business products due to security breaches  Inconsistent access control standards across applications

 Introduction  Project Overview  Database Design Tips  Conclusion

 To improve application security by using a two- factor authentication approach ( What is this?) ?)  To deploy a centralised authentication service User Name? Passwor ord? d? Initial Logon  2 nd Factor Challenge  2 nd Factor Authentication Authentication Online Platform Application

 Internal control/audit  Technical support  Project manager  Software engineers (you are here!)  End users

A service oriented architecture (SOA) harnessing the  capabilities of the authentication service Special provision was made for redundancy and extensibility 

 Testing – ensuring security works and applications are not broken  Application interoperability issues  Poor documentation of legacy applications  User adoption -change comes with a price!

 Deployment of a strong authentication service may be complex to manage if not properly planned ahead  Strong authentication solution reduced cases of impersonation and identity theft  Educating users about new technologies should begin very early in the project plan

 Extending the architecture to incorporate a secure Single-SignOn Solution  Extending the middleware product to work with other Authentication services other than Entrust IdentityGuard

 Introduction  Project Overview  Database Design Tips  Conclusion

 Ask good questions and listen even more (details count)  Plan for today’s problems with tomorrow in mind  Document! Document! Document!  Do not reinvent the wheel - master your platform

 Develop an open mind. There is always something new to learn on each project  Mastery of database design (and in general software development) requires a lot of practice and good habits  Stay up-to- date! Don’t wait for your first job