Security Overview ​

AlphaTrust e-Sign™ is a Web-based software application running on a Windows Server. Security for AlphaTrust e-Sign™ consists of securing:

1. The host OS and components (IIS), firewall, ports.
2. Web application segregation.
3. The service account used by AlphaTrust e-Sign™.
4. Access to URLs exposed by AlphaTrust e-Sign™ / intrusion detection.
5. Database access and table access.
6. Cryptographic components used by AlphaTrust e-Sign™.
7. Data at rest encryption.

AlphaTrust e-Sign™ includes its own application-level intrusion detection system (IDS). This system is designed to block the IP addresses originating bad URL requests to AlphaTrust e-Sign™.

AlphaTrust e-Sign™ does not act as its own firewall or network-level intrusion detection system. It will service requests that it is programmed to service. You should secure the elements discussed in this paper using OS security tools, database security tools, firewalls and network-level intrusion detection tools as appropriate.