Intel API & PCI Security

3 mega trends (mobile apps, partner/developer API programs, and
healthcare data integration/portability) have converged to create a new
revenue generating opportunity for Providers and Payers that is all the
rage: API Developer Community Portals. In this webinar, we present
premier case study from AETNA that illustrate best practices to building a successful API Program.From security expert Gunnar Peterson learn gateway security patterns that should be employed to safely surface legacy data & services for packaging as raw API information assets, hear from API management MQ leader Mashery how to construct, share, and promote APIs to developers using branded Portals & Partner API Workshops, and finally from Intel see how to build a mobile optimized back-end that bridges mobile friendly security/protocols (eg OAuth) with enterprise grade security &
integration controls. All attendees will receive a Mobile API Architecture White Paper.

A sound enterprise mobile app strategy focuses on automating and scaling 4 key pillars: back-end data/app integration, app composition/packaging/promotion, secure channel from device to enterprise, and tools to simplify app creation cross-device. Mastering these disciplines delivers native mobile apps that offer consistent and compelling user experiences and brand expansion through engaged developer communities. In this webinar, Forrester & Intel focus on how mobile middleware solutions have evolved the from traditional 3-tier web apps to provide direct access to back-end data via APIs. However, the evolution to this model presents new challenges to developers: inconsistent formats and protocols, inadequate security controls, and rapidly evolving interfaces, to name just a few.

You will learn:
-Tips for integrating BYOD platforms into your enterprise app offerings
-Tradeoffs between web app portals and native mobile apps
-The gateway approach to streamline development while improving security
-Tools to provide a unified foundation for mobile enterprise application development

As the Enterprise begins to expose application APIs as packaged products consumed by developer communities, partners, and mobile devices- they are also opening new threat vectors into their back end infrastructure. APIs include self documenting meta data that often mistakenly provides information on usage and connections that can be used for SQL injection or other content borne attacks. The application layer must deal with a wide range of protocols with potential threats… from XML/SOAP, REST/JSON, and OAuth/and API Keys used in application requests. In this webinar, we outline API best practice security measures such as encryption, SSL, key management, DLP, and schema validation. To scale deployment Intel showcases how an API Gateway combined with a portal managed service in the cloud can safely share APIs while tightly integrating cloud/on-prem applications.

In this product launch webinar, Intel & API Management magic quadrant leader Mashery discuss the market drivers that have created the need for enterprise class API management solutions that scale to thousands of developers and consumers. We showcase a new composite API platform solution available from Intel, that packages a cloud based API portal from Mashery for promotion, monitoring, and sharing of meta data to developer communities with the Intel gateway security & integration solution that exposes RESTful APIs for consumption at the network edge. The lifecycle for APIs will be discussed along with the typical separation of duties for API management within the enterprise: Service Administrators, Developers, and Architects. Tune in to learn how to package APIs as revenue generating products, safely expose back end applications, and drive usage with mobile consumers and developer communities.

HITEC and the Patient Protection & Affordable Care Act (PPACA) are fueling the requirement for, and subsequent growth of, interoperable systems in the US -- with a common thread between all the various initiatives being the use of SOA, mobile focused information exchange, and protecting patient data privacy.

In this webinar, Intel looks specifically at the Health Insurance Exchange (HIX) ecosystem and posits a "Service Gateway Reference Architecture" that incorporates legacy protocols, the workflows involved in information exchange, information delivery to mobile APIs, and PHI data protection. Maximus, a leader with programs in health and human services, that has partnered with state, local, and Federal government - discusses how to protect PHI for HIPAA compliance.

The issue with the predominant multi-tier data center application architecture is that it is designed with a browser in mind. Mobile Device Management and Web-only Firewalls do not address how to incorporate server side applications, legacy data, and identity infrastructure with the sea of heterogeneous mobile platforms, operating systems, and programming languages used today. We present how Service/API Gateway enables the mobile application economy via REST APIs with JSON and mobile friendly tokens such as OAuth. Finally we outline an end-to-end mobile enablement architecture to expose app data via APIs, advertise APIs to developers via a portal, and tools that make it easy for developers to use those APIs to create mobile apps.

Cloud Service Brokerage (CSB) presents an emerging operational role where IT aggregates services from multiple cloud providers, applies corporate policies, & exposes a simplified consumption API for internal developers and partners. Its clear point-to-point management of billing, SLAs, API versioning/governance, integration connectors, and security cannot be managed by individual developers or departments in a controlled compliant way. Gartner discusses different CSB types, market spend, required technical capabilities, and where enablement solutions exist on the technology adoption curve. Chief Architect, Plamen Petrov presents a real world CSB deployment that Blue Cross Blue Shield Association implemented to help aggregate 3rd party services & deliver integration/security services for 38 independent BCBA companies.

Organizations need something stronger than a simple UserID/password logon to protect sensitive data in the cloud. Strong authentication is the industry standard for protecting personal, financial, healthcare or confidential corporate information. In this webinar, identity security experts from Intel/McAfee, Nordic Edge and BioID discuss the various types of multi-factor authentication that are available, and when, where and how they can be deployed to provide essential protections.

Over the past decade, Salesforce.com has evolved from a CRM destination to a suite of platforms that enable social enterprise collaboration. Now identity and access management are at the forefront of the latest capabilities enabled by Salesforce.com and its ISV partners Intel & McAfee. Not only can an enterprise enable seamless SSO access into Salesforce.com from corporate ID stores, they can manage access to any external SaaS app or up-level cloud provider authentication with multi-factor authentication, all managed 100% within the Salesforce platform.

In this webinar, Salesforce.com’s identity experts present their latest platform capabilities for cloud security & outline new areas of focus in federation standards, such as provisioning and support for mobile apps. Intel presents their experience in leveraging the Force.com platform to build their Identity-as-a-Service offering: Intel Cloud SSO - now available on AppExchange.

You will learn:

* How to enable seamless SSO into custom apps deployed on Force.com
* How to leverage resident Salesforce.com identities for cloud access
* How to implement SSO across large multi-org Salesforce.com hierarchies
* Mobile cloud SSO design patterns and emerging standards
* How to apply Multi-Factor Authentication for access to Salesforce or SaaS
* How to leverage Active Directory for access to external SaaS apps
* New Force.com cloud security capabilities

When securing credit card data, the imperative to be PCI DSS compliant remains a constant, while the actual solution implemented by merchants can vary depending on the size and nature of an organization. A solution for a small merchant with low transactions will differ from mid-sized retailers with a web presence…from a large merchant with POS & back-office payment infrastructure. Securosis.com’s expert PCI-DSS analyst Adrian Lane, dissects the deployment models with pros and cons of: on-prem vs outsourced models, proxy based tokenization, and format preserving encryption. Adrian covers base tokenization flows for newbies and reflects on detailed cost, pricing, & vendor lock-in concerns for deployments in progress. You will learn:

•3 Core Models: Tokenize all infrastructure, modify point apps with API/SDK, Proxy-modify data in transit
•Patterns for tightly coupled payment & back office systems
•Tokenization as a Service- expense of token format migration
•Cost considerations to consider