Application Dispatcher Security

Security is a complex topic for networked, client/server applications. Security issues include user authentication, authorization, communications security, and writing secure applications. Here are some of the many approaches and tools you can use to secure the Application Dispatcher.

• Application Broker and Web Server Security
  • Using a Secure Web Server
  • Hiding Sensitive Information from Web Server Logs
  • Protecting the Application Broker Configuration File
  • Creating Encrypted Usernames and Passwords
  • Authenticating the Application Broker

• Application Server Security
  • The Application Server Should Not Trust the Application Broker
  • Application Server May Restrict Application Broker Access
  • Supplying a Password When Starting the Application Server
  • Hiding Passwords and Other Sensitive Data from the SAS Log
  • Restricting Access to Program Libraries
  • Disabling Sample Programs
  • Reviewing New or Modified Code

• Controlling Access to SAS Data Sources With the AUTHLIB Data Set
  • AUTHLIB Functions
  • Verifying the AUTHLIB Data Set

• Dispatcher Program Security
  • Using SCL or Compiled Macro Code
  • Using Password-Protected Data Sets

Related Topics

• Host Authentication
• Firewalls
• Application Broker Directives. See BrokerPassword under Administrator Directives and Encrypt under General Service Directives.