A security blueprint for e-business applications based on the three-tier architecture

Abstract

Building a secure e-business environment becomes top critical to e-business applications, however, security can't be attained by simply applying security protection systems like firewalls, I S or anti-virus. This paper develops a security blueprint for e-business applications based on the three-tier e-business architecture. The security blueprint provides best practices in general, including security controls layered from physical access, network communication, operating system, to application and management processes staged from planning, deployment, administration, to auditing. Moreover, the paper discusses the applicability of this security blueprint using a Singapore multinational corporation as a case study. Also discussed are security control analyses, management process analysis, and cost benefits analysis