jeudi 23 juillet 2015

JavaEE application security auditing

I need to produce a security audit report of a Servlet/EJB based application deployed to WebSphere 8.5. The report must include user login, authentication time, logout time and the ip address.

The solution so far is to parse WebSphere security audit logs and interpret them into a report. The problem with this approach is that WebSphere produces copious amounts of security audit records which are not easy to analyze.

Is there a better way to get basic security audit information for a JavaEE application?

Aucun commentaire:

Enregistrer un commentaire