Book details of 'Enterprise Directory and Security Implementation Guide: Designing and Implementing Directories in Your Organization (The Korper and Ellis E-Commerce Books Series)'

Title	Enterprise Directory and Security Implementation Guide: Designing and Implementing Directories in Your Organization (The Korper and Ellis E-Commerce Books Series)
Author(s)	Charles Carrington, Timothy Speed, Juanita Ellis, Steffano Korper
ISBN	0121604527
Language	English
Published	August 2002
Publisher	Academic Press

---

Back to shelf Computer networks
Amazon.com info for Enterprise Directory and Security Implementation Guide: Designing and Implementing Directories in Your Organization (The Korper and Ellis E-Commerce Books Series)

Score:

Vote for this book

The Virtual Bookcase Reviews of 'Enterprise Directory and Security Implementation Guide: Designing and Implementing Directories in Your Organization (The Korper and Ellis E-Commerce Books Series)':

Reviewer Rob Slade wrote:
You've got to wonder about the quality of a book that starts out with an eight page section dedicated to copyright notices and disclaimers. The foreword is unclear about what directories are, although it does name DNS as a directory. One sentence starts out by saying that there are both risks and benefits to publishing a directory and then lists only the most dire of risks. There is no mention that directories can be used to support security activities such as PKI (Public Key Infrastructure.) Chapter one is an introduction, stating that directories provide information and mentioning X.500 and LDAP (Lightweight Directory Access Protocol) without clarifying why directories need a formal protocol. (There seems to be, in the text, a preference for humour over information.) The basics of directories as information sources are given in chapter two (although there is no material on the problems of distribution, scaling, and replication), as well as a brief mention of security. There is a bit of discussion of directory architecture design, another mention of LDAP, and illustrations that do not illuminate, in chapter three. Chapter four has an explanation of LDAP that will make sense to those already familiar with relational database concepts (but probably not, otherwise), and an allusion to the difference between security information stored in the database and the security of the directory, but this important point is not given the emphasis it deserves. Chapter five gives us a history of street directories, some discussion of privacy, and a consideration of email routing. Basic relational database concepts are examined fairly simplistically in chapter six. Chapter seven is a generic overview of enterprise security. There is a good outline of the suggested contents of a high-level security policy in chapter eight, although the material becomes repetitive when an email policy basically duplicates the previous material. Chapter nine has a brief but reasonable overview of PKI, several pages of screenshots (of questionable utility) of a Cylink demonstration, and a fifteen page sample "Certification Practices Statement." Examples of directories in chapter ten include Kerberos and DNS. A list of miscellaneous PC security products is in chapter eleven. Although the issues of security related to directories are both important and sparsely covered in the security literature, this poorly focussed and structured work does not provide much useful direction. copyright Robert M. Slade, 2003
Add my review for Enterprise Directory and Security Implementation Guide: Designing and Implementing Directories in Your Organization (The Korper and Ellis E-Commerce Books Series)

Book description:

The Internet is connecting enterprises into a global economy. Companies are exposing their directories, or a part of their directories, to customers, business partners, the Internet as a whole, and to potential "hackers." If the directory structure is compromised, then the whole enterprise can be at risk. Security of this information is of utmost importance.This book provides examples and implementation guidelines on building secure and structured enterprise directories. The authors have worked with corporations around the world to help them design and manage enterprise directories that operate efficiently and guard against outside intrusion. These experts provide the reader with "best practices" on directory architecture, implementation, and enterprise security strategies.