Abstract: Systems, methods, and apparatus, including computer program products, for securing access to a server computer that is operable to process client requests from a client computer. A firewall is located between a dispatcher and the server computer. The firewall prevents requests from the dispatcher's side of the firewall from crossing through the firewall. The dispatcher is operable to establish a static connection with the server computer through the firewall, to receive a client request transmitted from the client computer, and to transmit the client request to the server computer through the static connection.

Abstract: A framework for comprehensive auditing of applications involved in business processes in distributed application landscapes, including local, distributed and collaborative audit, is based on the concept of a collaborative “audit warehouse” that enables a central, tool-supported audit of cross-enterprise business processes. The interface for the audit data warehouse is defined in an intermediate format language with verification capabilities, such as XML (Extensible Markup Language). Applications in effect write audit data to audit data pools in the warehouse, e.g., in XML format transferred via http over the Internet. Alternatively, data is pulled from the applications by the warehouse automatically or on command.

Abstract: Methods and apparatus, including computer program products, for risk assessment and analysis. Asset data representing a set of assets is received. Threat data representing a set of threats is received. Measures data representing a set of measures is received. A loss expectancy based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures is automatically calculated. Project data representing a simulated project is received. A revised loss expectancy is automatically calculated based upon the value of the assets, the potential reduction of value caused by the threats, and the protection of the value caused by the measures as modified by the simulated project. A savings caused by the simulated project is automatically calculated based upon the loss expectancy and revised loss expectancy.

Abstract: Methods and apparatus, including computer program products, for risk assessment and analysis In one general aspect, asset data representing a set of assets is received, the asset data includes a respective value for each asset in the set of assets having a value. Threat data representing a set of threats is received; each threat in the set of threats potentially reduces the value of one or more of the assets in the set of assets. Measures data representing a set of measures is received; each measure in the set of measures protects the value of one or more assets from one or more threats. Assessment data representing one or more assessments is received; each assessment rates one or more measures. An implementation level for each measure is calculated based upon the assessment data.

Abstract: An efficient undeniable digital signature scheme based on a quadratic field is disclosed. Public keys (D, P, k, t) and secret keys (D1, q) are defined by generating two primes p, q (p, q>4, p=3 mod 4, ?{square root over (p/3)}<q), computing D1=?p and D=D1q2, obtaining a bit length k of ?{square root over (|D1|)}/4 and a bit length t of q?(D1/q) where (D1/q) denotes Kronecker symbol, and generating a kernel element P of a map from a class group Cl(D) to a class group Cl(D1).

Abstract: Systems, methods, and apparatus, including computer program products, for securing access to a server computer that is operable to process client requests from a client computer. A firewall is located between a dispatcher and the server computer. The firewall prevents requests from the dispatcher's side of the firewall from crossing through the firewall. The dispatcher is operable to establish a static connection with the server computer through the firewall, to receive a client request transmitted from the client computer, and to transmit the client request to the server computer through the static connection.

Abstract: A framework for comprehensive auditing of applications involved in business processes in distributed application landscapes, including local, distributed and collaborative audit, is based on the concept of a collaborative “audit warehouse” that enables a central, tool-supported audit of cross-enterprise business processes. The interface for the audit data warehouse is defined in an intermediate format language with verification capabilities, such as XML (Extensible Markup Language). Applications in effect write audit data to audit data pools in the warehouse, e.g., in XML format transferred via http over the Internet. Alternatively, data is pulled from the applications by the warehouse automatically or on command.