Specific Inquiry I am responsible for information security at my company. I have been assigned information security responsibilities for an information system development project that the company is pursuing.I am requesting assistance because I want to know which authentication technologies can be considered in a distributed environment such as an MSA, and how they are
Details of the inquiry I have heard that, unlike the session method, the JWT token method does not store the generated JWT on the server.If so, how does the server identify a client that is allowed access, and how is the token later revoked? If the session method is one in which the server creates
Specific Inquiry We want to implement JWT-based authentication and authorization management in a development project.When implementing JWT (JSON Web Token)-based authentication and authorization management, we request help with specific implementation measures that can strengthen security by using client information. User authentication and authorization management are increasingly implemented on the basis of JWT (JSON Web Token).
Specific Inquiry I am in charge of information security at my company. I have been assigned information security responsibilities for the next-generation system development and implementation project the company is pursuing.The development environment plans to rebuild various services on the basis of a microservice architecture, and as the information security officer I must provide various
Details of the Inquiry I am in charge of technical security at my company. While talking with a developer, I was told that the JWT Token method, unlike the existing Session method, does not store the JWT on the server. I would like to know how the client is authenticated in that case. Unlike the
Specific Inquiry I would like to know how Session ID, Access Token, and JWT, the representative technologies used for user authentication and authorization, differ.I am also requesting help because I want to know the main points that should be considered to secure each technology. Comparison of Session ID, Access Token, and JWT Characteristics Session ID,
1. Roles between the developer (development organization) and the operator (operations organization) for S/W supply chain security 2. SBOM security vulnerability scanner for S/W operators 3. SBOM OSS vulnerability scanning website How to use: SBOM Vulnerability Scanner https://sbomvul.wikisecurity.net/Step 1. Click the text box and select a JSON-format SBOM file through the Windows Explorer window.Step 2. Click
The Ministry of Science and ICT (Korea Internet & Security Agency), the National Intelligence Service, and the Digital Platform Government Committee recently released the ‘Software (SW) Supply Chain Security Guideline 1.0’ jointly, and many companies and institutions are likely holding internal discussions on SBOM together with supply chain security. Integrating vulnerability information attributes into the
Details of the inquiry We have downloaded the “Guide to the Use and Management of Open Source Software in the Financial Sector” from the Financial Supervisory Service and are preparing for it. It does not appear to be something that can be resolved simply by introducing a product or a solution. There seem to be