Security , Authorization , and Authentication for Enterprise Computing

Enterprise computing (EC) is the recognition that to effectively utilize and disseminate information within an entity (university, corporation, government agency, etc.) it will be necessary to design and develop integrated distributed computing environments that allow all types of existing and future systems to interoperate. In EC, there are legacy, COTS, database, and new client/server applications that all must interact to facilitate both peace and war time communications among personnel at varying locations (e.g., divisions, battalions, brigades, companies, platoons, Pentagon, etc.). When all of the diverse components that comprise EC applications (ECA) are linked, then security becomes an important issue, to insure that individuals only have access to the right information at the appropriate time. This paper details security, authorization, and authentication for enterprise computing. The paper’s intent is to begin to answer the important questions: What are major and underlying security concepts for enterprise computing? What are the security requirements for ECA? What are available approaches to security for enterprise computing and its applications?