Best Practices for Identity Access and Information Security Management

ombiesecured

Welcome to Zombiesecured Best Practice Identity Access and Information Security Management site!

What is covered on Zombiesecured? There are tutorials, examples, how-tos, and much more for everyone to use and reference. Please feel free to reach out if you have any suggestions, corrections, or just comments. Thank you and have a great day!

Tutorials: IAM Information
IAM Protocols IAM Tokens IAM Access Controls; Creating a Identity Access Management (IAM or ICAM) Program & Governance Board; Understanding Identity Governance (IG); Multi-Factor Authentication (MFA) - Goals, Policies and Methods (Update Soon); Privileged Access Management (PAM) - Goals, Policies and Methods; Single Sign-On (SSO) using NAM, MFA & PAM w/ 3 Application Use Cases; US & World Encryption Standards; Introduction to Java Keytool/Keystores - w/ examples of common commands; How are Website & Single Sign-On (SSO) Certificate Infrastructures Different? - Under Const.

How To's: How to secure Apache - Score A+ on security tests using OpenSSL with TLSv1.3 and/or TLSv1.2
Debian/Ubuntu Systems Fedora/SUSE/RedHat Systems; How to secure NGINX - Score A+ on security tests using OpenSSL with TLSv1.3 and/or TLSv1.2
Debian/Ubuntu Systems Fedora/SUSE/RedHat Systems; How to Secure Tomcat and score an A+ on all security tests- Under Construction
Debian/Ubuntu Systems Fedora/SUSE/RedHat Systems

Examples:   Java Keytool
             AES Certificates
             RSA Self-Signed Certificates   w/ JCEKS Keystore   w/ PKCS12 Keystore
             ECC Self-Signed Certificates   w/ JCEKS Keystore   w/ PKCS12 Keystore
             RSA Certificate for a Certificate Authority (CA)   w/ JCEKS Keystore   w/ PKCS12 Keystore
             ECC Certificate for a Certificate Authority (CA)   w/ JCEKS Keystore   w/ PKCS12 Keystore;   OpenSSL - Under Construction
             AES Certificates
             RSA Self-Signed Certificates
             ECC Self-Signed Certificates
             RSA Certificate for a Certificate Authority (CA)
             ECC Certificate for a Certificate Authority (CA);   Single Sign-On (SSO) Certificate Chaining using Java Keytool
             RSA Example w/ Tomcat Config - w/ & w/o Load Balancing
             ECC Example w/ Tomcat Config - w/ & w/o Load Balancing

Cool Tools: Tools for Testing Your Applications & Sites Security
Zombiesecured.com Appendix - Sources & Reference Materials used creating this site

ombiesecured

Welcome to Zombiesecured Best Practice Identity Access and Information Security Management site!

Tutorials

How To's

Examples

Cool Tools