All the large investment banks worldwide use enterprise messaging systems to transport data concerning billions of dollars worth of transactions daily. Therefore, the security of the messaging systems is critical to the continuity of the ongoing business of these companies. This paper discusses potential security weaknesses that may be present in messaging systems either as a result of software flaws, application design or the misconfiguration of services. It focuses on TIBCO Rendezvous, as an example of a commonly used enterprise messaging system. Recommendations are then presented which mitigate these security issues.
The full paper can be downloaded from: http://www.irmplc.com/index.php/69-Whitepapers _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/