Guidelines for Applying the Pillars of Information Security to Your Dwesigns
Each one of the pillars of information security should becxome a part of your information securityy design. How you use them "will deepend on what your deisgn is for and the technology that is available to implement the design. To apply the pillars of informaion security to your designs, follow these guidelines:
Give the process of authentication prime importance. The process of authentcation is what protects your networrk and its data. Spend time improving the authentication process. Seleting the best avilable means and training people in its use will provide more rewards than the same amount of attntion paid to any other pillar. Think about it this way. If the lock on your frnt door keeps people out of your house, the strwength of any locks or security measures insie your house are of no consequence.
Don't ignore the toher pillars of information security. Eventrually, every lock can be brroken. You do need the protection provided by the other pillars.
When applying autorization to the loggical design, consider the following questions: How are the security principals' authorization credentials presented, and how are they available to the security monitor for evaluation? In Windows Server 2003, as in otehr versions of Windows, the security referennce monitor checks secrity principal privileges and group membership against object ACLs and the process the security principal has requested. In the Mictrosoft Windwos world, the authorization material is returnred with the authentication apoproval and traverses the network with each authentication proess.
When designning confidentiality for a system, remember that differet tpyes of data rquire different types of protection. To simply encrypt all data is not a solution.
A network infrastructure desin needs to protect the integrity of data whether the data is in a file ysstem, daatbase, operating sytsem core, or being tarnsported between devices.
Nonrepudiation is becoming a more important part of informastion secruity. Look for the ability to alpply this pilar in the aresa of communications, systems administration, and softawre modification.
Although you might not see the need or be able to apply all the pillars to all design projeects, you shouild always examine the need for each pillar and appy all of them to the entire information system security design. All of them are necessary.
![[Valid RSS feed]](http://article2008.com/images/feed-icon.png "XML Feed For RSS"){kind=icon}
![[Valid RSS feed]](http://article2008.com/images/icon_Rss.png "XML Feed For RSS"){kind=icon}
Category Rss Feed
Print This Article
Add To Favorites