February 2004 - Posts

• Application Security, Part 3

  So, its 9 a.m: do you know where your users are? I’ll bet I do, because although we have just talked about where they should be, in the global directory service of the enterprise, I will wager that your user data is in your application’s own Read More... Posted Monday, February 23, 2004 9:42 AM by CraigMcMurtry | 4 Comments

• Application Security, Part 2

  The most important idea that has ever emerged from attempts to grapple with application security is this one. In an enterprise, there are going to be a lot of computers, a lot of applications and a lot of users, and administering the security of the enterprise Read More... Posted Saturday, February 21, 2004 4:30 PM by CraigMcMurtry | 5 Comments

• Application Security Part 1

  The posts over the next few days concern application security. What does that term signify? Well, there are several dimensions to computer security. First, there is physical security, controlling who has physical access to the hardware. Then, there is Read More... Posted Friday, February 20, 2004 8:22 AM by CraigMcMurtry | 9 Comments

• Message to attendees of the AD/AM, MIIS and Authorization TouchDown event, February 18th: updated with the location of the Webcast

  Thanks for coming, and for bearing with the complexity of the material. A recording of the WebCast of the event can be found at http://www200.placeware.com/cc/lmevents/view . I'll start posting the text of the presentation here tomorrow. Read More... Posted Thursday, February 19, 2004 12:29 PM by CraigMcMurtry | 1 Comments

• The Riddle of The Sphinx Part Three

  Technical re-architecture to accommodate future changes in the platform is not all that is required in solving the Riddle of the Great Sphinx, nor even, perhaps the most important part. I have studied a number of software vendors seeking to learn what Read More... Posted Thursday, February 19, 2004 12:25 PM by CraigMcMurtry | 1 Comments

• The Riddle of the Sphinx Part Two

  The best answers to the Riddle of the Great Sphinx that I can offer are these. First, build a framework to implement the key elements of your architecture. One's architecture should not merely be a story one tells about the design of one's application, Read More... Posted Thursday, February 19, 2004 12:24 PM by CraigMcMurtry | 0 Comments

• The Riddle of the Sphinx, Part One

  The Sphinx is a mythical creature that delighted in posing seemingly unsolvable riddles. The riddle posed by the greatest Sphinx, the one at Giza , in Egypt , is surely one to which its architects knew the solution, and which I believe every truly successful Read More... Posted Tuesday, February 17, 2004 7:23 AM by CraigMcMurtry | 1 Comments

• To blog or not to blog?

  Here I am doing something that I never thought I ever would: blog. Blogging assumes an audience, otherwise one would maintain a private journal. Yet, for one to assume that there is an audience for one's private journal implies something about how one Read More... Posted Monday, February 16, 2004 10:04 PM by CraigMcMurtry | 0 Comments