Sicherheit bei Diensten: ArcGIS Server und ArcGIS Online Matthias Schenker, Esri Schweiz AG Basics & Strategy 22 © 2014 Esri Schweiz AG 3 © 2014 Esri Schweiz AG Where are the vulnerabilities? SANS Relative Vulnerabilities 4 © 2014 Esri Schweiz AG Vulnerabilities in Applications 5 © 2014 Esri Schweiz AG 7 © 2014 Esri Schweiz AG 8 © 2014 Esri Schweiz AG Mechanisms 99 © 2014 Esri Schweiz AG 10 © 2014 Esri Schweiz AG Authentication + GIS Tier (Default) > Built-in User store > Enterprise (AD / LDAP / SAML) > oAuth > ArcGIS Tokens + Web Tier (Add web adaptor) > Enterprise (AD / LDAP) > Any authentication supported by web server > HTTP Basic / Digest > PKI > Windows Integrated 11 © 2014 Esri Schweiz AG