Security in the Enterprise Environment
The Microsoft approach to security is based on six fundamental principles:
- authentication
- Identifies the user, and the all-important single-logon automatically promulgates this identity to all local and remote services.
- access control
- Restricts access to data based on that identity.
- cryptography
- Protects the privacy and integrity of data, especially when in transit across a network.
- firewalls
- Restrict traffic between your LAN and an external network, such as the Internet.
- system integrity
- Ensures the underlying security software cannot be tampered with.
- auditing
- Records security events.