Security techniques and specifications for the resources protection in mediation systems

The information system today need reliable, flexible and secure methods for making public and confidential information available to multiple groups of people: partners, customers, suppliers, and employees. There are a number of available remote access methods, and a range of point products for providing dialup access, VPNs, Web, Citrix, and wireless access. However, information systems face significant challenges integrating multiple point products and providing a manageable framework for effective access control software. As many types of people need easy access to business-critical information, the challenge is to assure that only the right people have access to the right information. This paper presents various methods and techniques for controlling system resources users´ access to ensure that only authorized users can access secured resources. This article also covers the basics of access control, general methods and techniques used to manage access to resources, some common attacks that are launched against access control systems and the generalisation the basic security techniques specification for the protection of confidential resources in the mediation systems