Secure authentication for HIPAA compliance - Qlik Community

Anonymous · ‎2015-04-06

We are currently using Ntlm type of authentication with default login page (browser authentication). Wwe would like to customize our login process and use either the alternate login page (web form) or a custom login page but are unsure as to whether these methods would ensure secure connection for HIPAA. Our clients use the reports from a public website so this is not an internal implementation. I've looked through documentation for authentication but all they show is how to do various forms of logging in to Access Point and the portal. Has anyone had to set up Accesspoint and Qlikview for external customers on a public site but needed to maintain a high degree of secure authentication? And how have you done it?

swiftsafe · ‎2020-11-26

IoT is a platform to connect the things which have an internet. A connected device is a complex solution, with various potential entry doors for an attacker. A connected device pentest IoT includes tests on the entire object ecosystem. That is electronic layer, embedded softwares, communications protocol, servers, web and mobile interface. The pentest on the electrical side,embedded softwares, and communication protocol concern vulnerabilities more specifically the IoT.
There are three types of attacks on connected objects and embedded systems. Software attack, non-invasive and invasive hardware attacks. The first take advantage of software vulnerabilities, the second recover information from the hardware without damaging it while the third involve opening the components and therefore destroying them in order to be able to extract secrets. While the first two types of attacks do not require many resources, this is not thecase for invasive attacks, for which very expensive equipment is requires.

1. Increase Visibility Across Siloed Business Functions to Improve Business Maturity.
2. Drive Innovation with Data Analytics.
3. Improve Efficiency with Fleet Monitoring
4. Gain Real-time Insights from Connected Assets.
5. Increase Production with Data Analytics.
6. Monitor Workers to Mitigate Risk.