Comparative analysis and design philosophy of next generation unified enterprise application security

Riaz A. Shaikh, Saeed Rajput, S. M.H. Zaidi, Kashif Sharif

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Citations (Scopus)


Unified Enterprise application security is a newly emerging approach for providing protection against application level attacks. Conventional application security approaches that embed security into each critical application results into scattered security mechanism, which is not only difficult to manage but also creates security loopholes, Therefore, new unified enterprise application security concept is evolving in the industry that consists of centralized authentication, access control, incident response and auditing. Industries such as Computer Associate, Cerebit, Entrust, Evidian, IBM Tivoli, Netegrity, Oblix and SunOne have comes up with the identity and access management solutions that are based on this concept. Significant amount of misunderstanding exists in the industry and research community about appropriate features of such a unified product. Therefore we have proposed new enterprise application security (EAS) comparison framework to compare existing enterprise application security products. This framework helps an enterprise in selecting appropriate application security product. From comparison we found that Computer Associate and Netegrity solutionn are the best available solutions, however none of the current available solutions are providing complete enterprise application security. Therefore we have proposed new unified enterprise application security architecture. This architecture provides all basic information security and other critical services such as, auditing, reporting, authentication, access control, confidentiality, integrity, commitment to standards, incident response, scalability, flexibility, manageability, and compliance of regulatory mandates.

Original languageEnglish
Title of host publicationProceedings - Thirteenth International Symposium on Temporal Representation and Reasoning, TIME 2006
Number of pages8
Publication statusPublished - 2005
EventIEEE 2005 International Conference on Emerging Technologies, ICET 2005 - Islamabad, Pakistan
Duration: 17 Sep 200518 Sep 2005

Publication series

NameProceedings - IEEE 2005 International Conference on Emerging Technologies, ICET 2005


ConferenceIEEE 2005 International Conference on Emerging Technologies, ICET 2005


  • Application security
  • Identity and access management
  • Unified architecture

Cite this