Authentication and security aspects in an international multi-user network

Abstract

Access control and authentication are elementary principles to ensure security in information systems. To achieve these mechanisms, the functional principles and use of directory services and AAA are investigated and analyzed. By means of the Lightweight Directory Access Protocol (LDAP), a centralized user management and access management is going to be evaluated and designed. In a further practical part, the deployment of a LDAP directory service in an international organization is outlined to implement and improve organization’s security requirements. Furthermore, the fundamentals of information security with facilitating best practices and techniques for successful security engineering are explained, including common basic goals in computer and network security like confidentiality, integrity availability and authenticity. Subsequently, access control models and techniques, as well as cryptographic principles and standards are also discussed. To top the subject off a brief plan of risk management and security policies is presented to achieve the best possible accurate protection and security of assets, infrastructure and information in a technology environment.