Strategy of Security Services for Enterprise Applications

摘要

As the globalization of business becomes common practice, the need for secure enterprise computing increases. Even though many security solutions are available for enterprise computing today, they are. in general, designed to be applications independent. There- fore, each enterprise application has to adapt these solutions and tailor them for its specific USC. In this paper, we investigate the security requirements for enterprise computing. We then present a strategy for providing solutions that can meet those requirements. Many of the requirements and solutions in this paper address the scalability of existing security solutions, the separation of enterprise application security from concrete organization level security enforcement, and the enforcement of fine- grained access control.