NYC IASA Meeting Tuesday, January 27th, 2009
The January meeting of the NYC chapter of International Association of Software Architects will be one week later than originally planned. The meeting will be on Tuesday January 27th, 2008, at 6 PM. It will be held at Microsoft, 1290 Avenue of the Americas on the 6th floor. (Between 51st and 52nd streets next to Radio City Music Hall.) The meeting will be held in the Ambassador room.
You must RSVP to wzack AT microsoft.com by close of business the TODAY to be admitted! Please make sure to include your first and last name in the RSVP.
Meeting Topic: Enterprise security architecture for information and other assets
Keywords: Security, RBAC, fine-grained authorization, entitlement management
Case Study: Especially as information is presented in multiple contexts, it is important to ensure that it is consistently secured. This need drove us to externalize authorization and activity rights from application code, and centralize it as an enterprise service. In order to ensure consistent application of policy, we need to define security in terms of business assets rather than in terms of applications or individual objects. Further, security as implemented should correspond to business statements of security policy, so we developed a structured process for security policy management. We will describe our business goals, security architecture, policy management process, and enforcement process, and conclude with some open design issues.
Presenters: Alina Hsu , Stan Gershengoren and Yuriy Drobitskiy
Alina Hsu is a member of our IASA chapter. She is also the Manager of Architecture & Development at Debevoise & Plimpton LLP. Alina has an undergraduate degree from MIT and a Master's degree in Experimental Psychology from NYU. She has worked in many capacities in many law firms. She has been at Debevoise for 8 years. Her professional interests include business-IT alignment, lean methodologies, and all aspects of business and technology architecture.
Stan Gershengoren is a Development Team Lead at Debevoise & Plimpton, LLP where he heads all internal development for one of the largest and most prestigious law firms in New York. He specializes in designing and developing web applications, frameworks and services using Microsoft technologies and is a big supporter of rapid deployment methodologies such as Lean and Agile.
Prior to joining the Debevoise team Stan worked on building and supporting high-traffic consumer websites with custom content management and security systems such as century21.com (and the broker intranet), gerber.com, 1800collect.com, 10-10-220.com
During high school and college years, Stan participated in numerous team competitions which earned him a gold and a silver medal in NYC math competition and a 2nd place in American Computer Science League. He holds a bachelor’s degree in Computer Science from Polytechnic University (currently NYU’s school of engineering) and has a number of published articles for ACSL newspaper and C# corner (c-sharpcorner.com).
Yuriy Drobitskiy has over 10 years of experience in software development, design and architecture. He started working at Debevoise & Plimpton LLP as a developer in 2004 and currently is a member of the architecture group at this company. Yuriy is a Microsoft Certified Professional and Microsoft Certified Application Developer for .NET. He is a graduate of Tula State University, Russia.
Refreshments will be sponsored by: Microsoft.
IASA is the premier association focused on the IT architecture profession through education, advocacy, events, and the development of best practices.
IASA New York Chapter web site: https://www.iasahome.org/web/newyork.