Oracle Adaptive Access Manager: Administration

Rapid growth in online commerce has brought increasing sophistication of Internet fraud. Threats from phishing, pharming, trojans, key logging, and proxy attacks, combined with regulations and mandates governing online data privacy, place online security at a premium. Customers must feel protected for online business channels to grow. Oracle Adaptive Access Manager 10g (version 10.1.4) provides superior protection for businesses and their customers through strong yet easy-to-deploy multifactor authentication using two components: front-end Adaptive Strong Authenticator and back-end Adaptive Risk Manager. Adaptive Strong Authenticator's pure Web-based "virtual" authentication devices are graphical challenge/entry forms that enable online three-factor authentication, making applications safe from phishing, trojans, proxy attacks, and other threats. Adaptive Risk Manager offers proactive, real-time fraud prevention using risk analysis with scores and weights that trigger real-time alerts. Students install and configure the two components of Oracle Adaptive Access Manager: Adaptive Risk Manager (both Online and Offline) and Adaptive Strong Authenticator, integrating them with middleware environments.

In this course students configure rules for follow-up actions to prevent fraudulent transactions. Students schedule and run reports analyzing and describing the level of security for Web applications.

• Install the Adaptive Risk Manager and the Adaptive Strong Authenticator in an Application Server OC4J environment
• Group and list blacklisted and whitelisted originating locations
• Administer policies, models, and rules to control login behavior
• Discuss native static versus SOAP integration of Adaptive Strong Authentication and Adaptive Risk Management
• Integrate Oracle Adaptive Access Manager with Oracle Access Manager (OAM)
• Integrate Oracle Adaptive Access Manager with an LDAP server

A Live Virtual Class (LVC) is exclusively for registered students; unregistered individuals may not view an LVC at any time. Registered students must view the class from the country listed in the registration form. Unauthorized recording, copying, or transmission of LVC content may not be made.