Front cover - IBM Redbooks

Chapter 3. Secure infrastructure
requirements
3
Doing business on the Internet exposes an organization the possibility of attack,
misuse, and errors that are well beyond those that exist in a non-Internet
computing environment. Even if an organization does not do business on the
Internet, there are ever increasing requirements for organizations to permit
access to their internal IT systems from external networks. Even most small
organizations today have a connection to the Internet to send and receive e-mail.
As organizations move to provide external access to Web-based services, the
security issues increase substantially as the nature of the services expand.
In this chapter we introduce principles of secure infrastructure design. By
“infrastructure,” we mean:
► Network topologies, network components, and server placement
► Data flows (inter-server connections and workstation-server connections)
In the context of the security methodology described in the previous chapter, the
infrastructure design affects all five security functional categories
(Identity/Credential management, Access control, Flow control, Audit, and
Solution Integrity). However, the primary focus of this chapter will be guidelines
for implementing adequate and appropriate flow control and solution integrity
between external networks (the Internet) and internal networks.
© Copyright IBM Corp. 2004. All rights reserved. 97