Development of an integrated security framework to enable the control and security of a heterogeneous enterprise

摘要

This paper presents an analytical investigation of the security characteristics that enable the enterprise to protect and defend itself from internal and external threats. The goal here is to develop an overarching framework that is geared towards incrementally building capabilities into the existing infrastructure through the development of security related services. The protection of data, infrastructure and user identities is at the heart of the framework where broader protection categories are further broken down into services that can be deployed individually and interact with each other to provide better services to the enterprise.