Windley phil phil windley (21 risultati)

Paperback. Condizione: new. Paperback. The rise of network-based, automated services in the past decade has definitely changed the way businesses operate, but not always for the better. Offering services, conducting transactions and moving data on the Web opens new opportunities, but many CTOs and CIOs are more concerned with the risks. Like the rulers of medieval cities, they've adopted a siege mentality, building walls to keep the bad guys out. It makes for a secure perimeter, but hampers the flow of commerce. Fortunately, some corporations are beginning to rethink how they provide security, so that interactions with customers, employees, partners, and suppliers will be richer and more flexible. Digital Identity explains how to go about it. This book details an important concept known as "identity management architecture" (IMA): a method to provide ample protection while giving good guys access to vital information and systems. In today's service-oriented economy, digital identity is everything. IMA is a coherent, enterprise-wide set of standards, policies, certifications and management activities that enable companies like yours to manage digital identity effectively--not just as a security check, but as a way to extend services and pinpoint the needs of customers. Author Phil Windley likens IMA to good city planning. Cities define uses and design standards to ensure that buildings and city services are consistent and workable. Within that context, individual buildings--or system architectures--function as part of the overall plan. With Windley's experience as VP of product development for and CIO of Governor Michael Leavitt's administration in Utah, he provides a rich, real-world view of the concepts, issues, and technologies behind identity management architecture. How does digital identity increase business opportunity? Windley's favorite example is the ATM machine. With ATMs, banks can now offer around-the-clock service, serve more customers simultaneously, and do it in a variety of new locations. This fascinating book shows CIOs, other IT professionals, product managers, and programmers how security planning can support business goals and opportunities, rather than holding them at bay." Some corporations are beginning to rethink how they provide security, so that interactions with customers, employees, partners, and suppliers will be richer and more flexible. This book explains how to go about it. It details an important concept known as "identity management architecture" (IMA): a method to provide ample protection. Shipping may be from multiple locations in the US or from the UK, depending on stock availability.…

Condizione: New. pp. xviii + 234 Illus.

Condizione: New. Some corporations are beginning to rethink how they provide security, so that interactions with customers, employees, partners, and suppliers will be richer and more flexible. This book explains how to go about it. It details an important concept known as "identity management architecture" (IMA): a method to provide ample protection. Num Pages: 256 pages, 1, black & white illustrations. BIC Classification: URY. Category: (P) Professional & Vocational. Dimension: 234 x 180 x 14. Weight in Grams: 432. . 2005. 1st Edition. Paperback. . . . .…

Condizione: New. pp. xviii + 234.

PAP. Condizione: New. New Book. Shipped from UK. Established seller since 2000.

Paperback / softback. Condizione: New. New copy - Usually dispatched within 4 working days.

Condizione: New. Some corporations are beginning to rethink how they provide security, so that interactions with customers, employees, partners, and suppliers will be richer and more flexible. This book explains how to go about it. It details an important concept known as "identity management architecture" (IMA): a method to provide ample protection. Num Pages: 256 pages, 1, black & white illustrations. BIC Classification: URY. Category: (P) Professional & Vocational. Dimension: 234 x 180 x 14. Weight in Grams: 432. . 2005. 1st Edition. Paperback. . . . . Books ship from the US and Ireland.…

paperback. Condizione: New. Brand new book, sourced directly from publisher. Dispatch time is 24-48 hours from our warehouse. Book will be sent in robust, secure packaging to ensure it reaches you securely.

Paperback. Condizione: new. Paperback. Underlying all software security is access control: deciding who can get into a system and what they can do once they enter. This book shows you how to streamline and automate access control by replacing static manually assigned permissions with a dynamic, Policy-Based Access Control (PBAC) model. Author and identity expert Phillip Windley frames authorization as a first-class citizen in your architecture and shows you how to use the intuitive Cedar policy language to integrate modern access control efficiently into both new and legacy applications. Rather than relying on abstract theory, this practical guide uses the journey of a fictional corporation to demonstrate how policy-based access models succeed at scales where static models inevitably fail. You will watch the corporate systems transition from basic Access Control Lists (ACLs) to sophisticated, multi-tenant SaaS environments that include zero trust architectures, secure APIs, verifiable credentials, and AI agents. This single, continuous case study is grounded in famous real-world security collapses, such as the infamous Target data breach that illustrates the catastrophic consequences of weak authorization boundaries. At the core of the book is the Cedar policy language, which makes it much easier to unify Role-Based (RBAC), Attribute-Based (ABAC), and Relationship-Based (ReBAC) access control into PBAC. The book describes typed schemas and how to write policies that are safe by construction, eliminating the common security risks of hard-coded runtime conditionals. As reviewer Michael Schleichardt of eHealth Experts GmbH points out, By decoupling authorization logic from application code, you gain the ability to reduce operational overhead and adapt seamlessly to shifting regulatory compliance. Windley tackles cutting-edge security, including decentralized identity and AI. Youll explore how to integrate cryptographically signed verifiable credentials using a Trust Diamond framework. Crucially, the book addresses agentic AI systems, introducing patterns like authorization before retrieval for Retrieval-Augmented Generation (RAG). Professor Yang Luo of Peking University notes, This book provides excellent integration of real-world context, which makes dynamic decisions actually dynamic, and ensures that LLMs operate strictly on authorized data. Spanning 19 comprehensive chapters, Authorization in Action provides a complete roadmap from foundational access concepts to enterprise-level policy governance. The hands-on learning experience is deeply enhanced by practical appendices, including an end-to-end tutorial using Amazon Verified Permissions and live, executable agent demonstrations using the OpenClaw runtime. When youve finished, youll have mastered a battle-tested toolkit of reusable patterns ready to secure access dynamically to your APIs, microservices, and distributed cloud systems. What's inside Unify RBAC, ABAC, and ReBAC into a single PBAC framework Write secure, statically validated policies using the Cedar language Implement robust zero trust security controls across distributed microservices Authorize autonomous AI agents and protect sensitive RAG workflows About the reader For IT professionals, software architects, security engineers, and product managers who want to build secure, scalable systems. About the author Phillip J. Windley is the co-founder of the Internet Identity Workshop and was a Senior Software Development Manager at AWS Identity. His deep enterprise experience in cloud-native identity systems makes him a premier authority on modern, policy-based access control architectures. </ Shipping may be from multiple locations in the US or from the UK, depending on stock availability. …

Condizione: New.

Paperback. Condizione: new. Paperback. The rise of network-based, automated services in the past decade has definitely changed the way businesses operate, but not always for the better. Offering services, conducting transactions and moving data on the Web opens new opportunities, but many CTOs and CIOs are more concerned with the risks. Like the rulers of medieval cities, they've adopted a siege mentality, building walls to keep the bad guys out. It makes for a secure perimeter, but hampers the flow of commerce. Fortunately, some corporations are beginning to rethink how they provide security, so that interactions with customers, employees, partners, and suppliers will be richer and more flexible. Digital Identity explains how to go about it. This book details an important concept known as "identity management architecture" (IMA): a method to provide ample protection while giving good guys access to vital information and systems. In today's service-oriented economy, digital identity is everything. IMA is a coherent, enterprise-wide set of standards, policies, certifications and management activities that enable companies like yours to manage digital identity effectively--not just as a security check, but as a way to extend services and pinpoint the needs of customers. Author Phil Windley likens IMA to good city planning. Cities define uses and design standards to ensure that buildings and city services are consistent and workable. Within that context, individual buildings--or system architectures--function as part of the overall plan. With Windley's experience as VP of product development for and CIO of Governor Michael Leavitt's administration in Utah, he provides a rich, real-world view of the concepts, issues, and technologies behind identity management architecture. How does digital identity increase business opportunity? Windley's favorite example is the ATM machine. With ATMs, banks can now offer around-the-clock service, serve more customers simultaneously, and do it in a variety of new locations. This fascinating book shows CIOs, other IT professionals, product managers, and programmers how security planning can support business goals and opportunities, rather than holding them at bay." Some corporations are beginning to rethink how they provide security, so that interactions with customers, employees, partners, and suppliers will be richer and more flexible. This book explains how to go about it. It details an important concept known as "identity management architecture" (IMA): a method to provide ample protection. Shipping may be from our Sydney, NSW warehouse or from our UK or US warehouse, depending on stock availability.…

Paperback. Condizione: New. Underlying all software security is access control: deciding who can get into a system and what they can do once they enter. This book shows you how to streamline and automate access control by replacing static manually assigned permissions with a dynamic, Policy-Based Access Control (PBAC) model. Author and identity expert Phillip Windley frames authorization as a first-class citizen in your architecture and shows you how to use the intuitive Cedar policy language to integrate modern access control efficiently into both new and legacy applications.  Rather than relying on abstract theory, this practical guide uses the journey of a fictional corporation to demonstrate how policy-based access models succeed at scales where static models inevitably fail. You will watch the corporate systems transition from basic Access Control Lists (ACLs) to sophisticated, multi-tenant SaaS environments that include zero trust architectures, secure APIs, verifiable credentials, and AI agents. This single, continuous case study is grounded in famous real-world security collapses, such as the infamous Target data breach that illustrates the catastrophic consequences of weak authorization boundaries.  At the core of the book is the Cedar policy language, which makes it much easier to unify Role-Based (RBAC), Attribute-Based (ABAC), and Relationship-Based (ReBAC) access control into PBAC. The book describes typed schemas and how to write policies that are safe by construction, eliminating the common security risks of hard-coded runtime conditionals. As reviewer Michael Schleichardt of eHealth Experts GmbH points out, "By decoupling authorization logic from application code, you gain the ability to reduce operational overhead and adapt seamlessly to shifting regulatory compliance."  Windley tackles cutting-edge security, including decentralized identity and AI. You'll explore how to integrate cryptographically signed verifiable credentials using a "Trust Diamond" framework. Crucially, the book addresses agentic AI systems, introducing patterns like authorization before retrieval for Retrieval-Augmented Generation (RAG). Professor Yang Luo of Peking University notes, "This book provides excellent integration of real-world context, which makes dynamic decisions actually dynamic," and ensures that LLMs operate strictly on authorized data.  Spanning 19 comprehensive chapters, Authorization in Action provides a complete roadmap from foundational access concepts to enterprise-level policy governance. The hands-on learning experience is deeply enhanced by practical appendices, including an end-to-end tutorial using Amazon Verified Permissions and live, executable agent demonstrations using the OpenClaw runtime. When you've finished, you'll have mastered a battle-tested toolkit of reusable patterns ready to secure access dynamically to your APIs, microservices, and distributed cloud systems.  What's inside  . Unify RBAC, ABAC, and ReBAC into a single PBAC framework . Write sec.…

Paperback. Condizione: Brand New. 426 pages. 7.38x1.16x9.25 inches. In Stock.

Paperback. Condizione: Brand New. 426 pages. 7.38x1.16x9.25 inches. In Stock.

Paperback. Condizione: new. Paperback. Underlying all software security is access control: deciding who can get into a system and what they can do once they enter. This book shows you how to streamline and automate access control by replacing static manually assigned permissions with a dynamic, Policy-Based Access Control (PBAC) model. Author and identity expert Phillip Windley frames authorization as a first-class citizen in your architecture and shows you how to use the intuitive Cedar policy language to integrate modern access control efficiently into both new and legacy applications. Rather than relying on abstract theory, this practical guide uses the journey of a fictional corporation to demonstrate how policy-based access models succeed at scales where static models inevitably fail. You will watch the corporate systems transition from basic Access Control Lists (ACLs) to sophisticated, multi-tenant SaaS environments that include zero trust architectures, secure APIs, verifiable credentials, and AI agents. This single, continuous case study is grounded in famous real-world security collapses, such as the infamous Target data breach that illustrates the catastrophic consequences of weak authorization boundaries. At the core of the book is the Cedar policy language, which makes it much easier to unify Role-Based (RBAC), Attribute-Based (ABAC), and Relationship-Based (ReBAC) access control into PBAC. The book describes typed schemas and how to write policies that are safe by construction, eliminating the common security risks of hard-coded runtime conditionals. As reviewer Michael Schleichardt of eHealth Experts GmbH points out, By decoupling authorization logic from application code, you gain the ability to reduce operational overhead and adapt seamlessly to shifting regulatory compliance. Windley tackles cutting-edge security, including decentralized identity and AI. Youll explore how to integrate cryptographically signed verifiable credentials using a Trust Diamond framework. Crucially, the book addresses agentic AI systems, introducing patterns like authorization before retrieval for Retrieval-Augmented Generation (RAG). Professor Yang Luo of Peking University notes, This book provides excellent integration of real-world context, which makes dynamic decisions actually dynamic, and ensures that LLMs operate strictly on authorized data. Spanning 19 comprehensive chapters, Authorization in Action provides a complete roadmap from foundational access concepts to enterprise-level policy governance. The hands-on learning experience is deeply enhanced by practical appendices, including an end-to-end tutorial using Amazon Verified Permissions and live, executable agent demonstrations using the OpenClaw runtime. When youve finished, youll have mastered a battle-tested toolkit of reusable patterns ready to secure access dynamically to your APIs, microservices, and distributed cloud systems. What's inside Unify RBAC, ABAC, and ReBAC into a single PBAC framework Write secure, statically validated policies using the Cedar language Implement robust zero trust security controls across distributed microservices Authorize autonomous AI agents and protect sensitive RAG workflows About the reader For IT professionals, software architects, security engineers, and product managers who want to build secure, scalable systems. About the author Phillip J. Windley is the co-founder of the Internet Identity Workshop and was a Senior Software Development Manager at AWS Identity. His deep enterprise experience in cloud-native identity systems makes him a premier authority on modern, policy-based access control architectures. <br Shipping may be from our UK warehouse or from our Australian or US warehouses, depending on stock availability. …

Taschenbuch. Condizione: Neu. Neuware - 'Covers every aspect of building dynamic authorization systems. No AI architect should be without it.' -Drummond Reed, Co-author of Self-Sovereign Identity.

Paperback. Condizione: New. Underlying all software security is access control: deciding who can get into a system and what they can do once they enter. This book shows you how to streamline and automate access control by replacing static manually assigned permissions with a dynamic, Policy-Based Access Control (PBAC) model. Author and identity expert Phillip Windley frames authorization as a first-class citizen in your architecture and shows you how to use the intuitive Cedar policy language to integrate modern access control efficiently into both new and legacy applications.  Rather than relying on abstract theory, this practical guide uses the journey of a fictional corporation to demonstrate how policy-based access models succeed at scales where static models inevitably fail. You will watch the corporate systems transition from basic Access Control Lists (ACLs) to sophisticated, multi-tenant SaaS environments that include zero trust architectures, secure APIs, verifiable credentials, and AI agents. This single, continuous case study is grounded in famous real-world security collapses, such as the infamous Target data breach that illustrates the catastrophic consequences of weak authorization boundaries.  At the core of the book is the Cedar policy language, which makes it much easier to unify Role-Based (RBAC), Attribute-Based (ABAC), and Relationship-Based (ReBAC) access control into PBAC. The book describes typed schemas and how to write policies that are safe by construction, eliminating the common security risks of hard-coded runtime conditionals. As reviewer Michael Schleichardt of eHealth Experts GmbH points out, "By decoupling authorization logic from application code, you gain the ability to reduce operational overhead and adapt seamlessly to shifting regulatory compliance."  Windley tackles cutting-edge security, including decentralized identity and AI. You'll explore how to integrate cryptographically signed verifiable credentials using a "Trust Diamond" framework. Crucially, the book addresses agentic AI systems, introducing patterns like authorization before retrieval for Retrieval-Augmented Generation (RAG). Professor Yang Luo of Peking University notes, "This book provides excellent integration of real-world context, which makes dynamic decisions actually dynamic," and ensures that LLMs operate strictly on authorized data.  Spanning 19 comprehensive chapters, Authorization in Action provides a complete roadmap from foundational access concepts to enterprise-level policy governance. The hands-on learning experience is deeply enhanced by practical appendices, including an end-to-end tutorial using Amazon Verified Permissions and live, executable agent demonstrations using the OpenClaw runtime. When you've finished, you'll have mastered a battle-tested toolkit of reusable patterns ready to secure access dynamically to your APIs, microservices, and distributed cloud systems.  What's inside  . Unify RBAC, ABAC, and ReBAC into a single PBAC framework . Write sec.…

Paperback. Condizione: new. Paperback. Underlying all software security is access control: deciding who can get into a system and what they can do once they enter. This book shows you how to streamline and automate access control by replacing static manually assigned permissions with a dynamic, Policy-Based Access Control (PBAC) model. Author and identity expert Phillip Windley frames authorization as a first-class citizen in your architecture and shows you how to use the intuitive Cedar policy language to integrate modern access control efficiently into both new and legacy applications. Rather than relying on abstract theory, this practical guide uses the journey of a fictional corporation to demonstrate how policy-based access models succeed at scales where static models inevitably fail. You will watch the corporate systems transition from basic Access Control Lists (ACLs) to sophisticated, multi-tenant SaaS environments that include zero trust architectures, secure APIs, verifiable credentials, and AI agents. This single, continuous case study is grounded in famous real-world security collapses, such as the infamous Target data breach that illustrates the catastrophic consequences of weak authorization boundaries. At the core of the book is the Cedar policy language, which makes it much easier to unify Role-Based (RBAC), Attribute-Based (ABAC), and Relationship-Based (ReBAC) access control into PBAC. The book describes typed schemas and how to write policies that are safe by construction, eliminating the common security risks of hard-coded runtime conditionals. As reviewer Michael Schleichardt of eHealth Experts GmbH points out, By decoupling authorization logic from application code, you gain the ability to reduce operational overhead and adapt seamlessly to shifting regulatory compliance. Windley tackles cutting-edge security, including decentralized identity and AI. Youll explore how to integrate cryptographically signed verifiable credentials using a Trust Diamond framework. Crucially, the book addresses agentic AI systems, introducing patterns like authorization before retrieval for Retrieval-Augmented Generation (RAG). Professor Yang Luo of Peking University notes, This book provides excellent integration of real-world context, which makes dynamic decisions actually dynamic, and ensures that LLMs operate strictly on authorized data. Spanning 19 comprehensive chapters, Authorization in Action provides a complete roadmap from foundational access concepts to enterprise-level policy governance. The hands-on learning experience is deeply enhanced by practical appendices, including an end-to-end tutorial using Amazon Verified Permissions and live, executable agent demonstrations using the OpenClaw runtime. When youve finished, youll have mastered a battle-tested toolkit of reusable patterns ready to secure access dynamically to your APIs, microservices, and distributed cloud systems. What's inside Unify RBAC, ABAC, and ReBAC into a single PBAC framework Write secure, statically validated policies using the Cedar language Implement robust zero trust security controls across distributed microservices Authorize autonomous AI agents and protect sensitive RAG workflows About the reader For IT professionals, software architects, security engineers, and product managers who want to build secure, scalable systems. About the author Phillip J. Windley is the co-founder of the Internet Identity Workshop and was a Senior Software Development Manager at AWS Identity. His deep enterprise experience in cloud-native identity systems makes him a premier authority on modern, policy-based access control architectures. <br Shipping may be from our Sydney, NSW warehouse or from our UK or US warehouse, depending on stock availability. …

Condizione: New. 2026. paperback. . . . . . Books ship from the US and Ireland.

Paperback. Condizione: New. Underlying all software security is access control: deciding who can get into a system and what they can do once they enter. This book shows you how to streamline and automate access control by replacing static manually assigned permissions with a dynamic, Policy-Based Access Control (PBAC) model. Author and identity expert Phillip Windley frames authorization as a first-class citizen in your architecture and shows you how to use the intuitive Cedar policy language to integrate modern access control efficiently into both new and legacy applications.  Rather than relying on abstract theory, this practical guide uses the journey of a fictional corporation to demonstrate how policy-based access models succeed at scales where static models inevitably fail. You will watch the corporate systems transition from basic Access Control Lists (ACLs) to sophisticated, multi-tenant SaaS environments that include zero trust architectures, secure APIs, verifiable credentials, and AI agents. This single, continuous case study is grounded in famous real-world security collapses, such as the infamous Target data breach that illustrates the catastrophic consequences of weak authorization boundaries.  At the core of the book is the Cedar policy language, which makes it much easier to unify Role-Based (RBAC), Attribute-Based (ABAC), and Relationship-Based (ReBAC) access control into PBAC. The book describes typed schemas and how to write policies that are safe by construction, eliminating the common security risks of hard-coded runtime conditionals. As reviewer Michael Schleichardt of eHealth Experts GmbH points out, "By decoupling authorization logic from application code, you gain the ability to reduce operational overhead and adapt seamlessly to shifting regulatory compliance."  Windley tackles cutting-edge security, including decentralized identity and AI. You'll explore how to integrate cryptographically signed verifiable credentials using a "Trust Diamond" framework. Crucially, the book addresses agentic AI systems, introducing patterns like authorization before retrieval for Retrieval-Augmented Generation (RAG). Professor Yang Luo of Peking University notes, "This book provides excellent integration of real-world context, which makes dynamic decisions actually dynamic," and ensures that LLMs operate strictly on authorized data.  Spanning 19 comprehensive chapters, Authorization in Action provides a complete roadmap from foundational access concepts to enterprise-level policy governance. The hands-on learning experience is deeply enhanced by practical appendices, including an end-to-end tutorial using Amazon Verified Permissions and live, executable agent demonstrations using the OpenClaw runtime. When you've finished, you'll have mastered a battle-tested toolkit of reusable patterns ready to secure access dynamically to your APIs, microservices, and distributed cloud systems.  What's inside  . Unify RBAC, ABAC, and ReBAC into a single PBAC framework . Write sec.…

Condizione: New. 2026. paperback. . . . . .