iWay Service Manager (iSM) is designed to service secure message traffic. Security within the iSM framework focuses on the following areas:

• Policy-based protected configuration, which prevents tampering or unauthorized changes to system components and their use during message processing.
• Standards-based cryptography to process secure messages such as S/MIME messages.
• XML Digital Signature for non-repudiation of messages.
• Standards-based message protocols such as SSL and AS/2.
• Use of "white lists" of acceptable sources of messages.
• Identification and rejection of spurious messages including DOS-type attacks.

  Note: iWay realizes that hackers and attackers will constantly create new and ingenious means to circumvent security. iWay will consider it a bug if such attacks result in the compromise of a secure protocol or security mechanism and will address such a defect on an expedited basis upon the presentation of necessary reproduction or diagnostic data.

• Authentication and authorization for connection and access to secure services within the server.
• Masking of stored passwords.

This manual discusses each of these areas in terms of the security mechanisms being applied and the ways in which these mechanisms fit into the use of the server.