Designing a Logical Authentication Strategy in C#

Maker QR-Code in C# Designing a Logical Authentication Strategy

Exam Objectives in this :

Design forest and domain trust models. Design security that meets interoperability requirements. Establish account and password requirements for security.

Poorly designed authentication strategies are a major source of successful, unde tected attacks on the network. If an attacker can gain authenticated access to your network, he can operate with impunity and his activities will go unnoticed. Better authentication protocols, limited trust relationships, and strong password policies work to prevent attacks that result from compromised accounts. But to make your network even more secure, you must design and enforce a strong authentication strategy. This chapter teaches the best practices and guidelines that you ll need to create a strong authentication strategy. Lessons in this :

Lesson 1: Designing Forest and Domain Trust Models. . . . . . . . . . . . . . . . . . .6-5 Lesson 2: Designing Authentication in a Heterogeneous Network . . . . . . . . . 6-26 Lesson 3: Establishing Account and Password Requirements for Information Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-37

This chapter presents the skills and concepts related to creating a security design framework. This training kit assumes that you have a minimum of 1 year of experience implementing and administering desktop operating systems and network operating system in environments that have the following characteristics:

At least 250 supported users Three or more physical locations Typical network services such as messaging, database, file and print, proxy server or firewall, Internet and intranet, remote access, and client computer management

6

Three or more domain controllers Connectivity needs that include connecting branch offices and individual users in remote locations to the corporate network, and connecting corporate networks to the Internet

In addition, you should have experience designing a network infrastructure. Many design exercises are paper based; however, to understand the technical capabil ities that a design can incorporate, you should have some hands-on experience with products. Where specific hands-on instruction is given, you must have at least two computers configured as specified in the Getting Started section at the beginning of this book.

It is often necessary to provide access to resources across domain and forest bound aries. To accomplish this, the first thing you must do is create trust relationships. Trust relationships allow accounts to authenticate across domain and forest boundaries and therefore provide the foundation on which authorized access to resources can be built. Trust models define the types of trust relationships appropriate for the organization.

Describe the process for designing forest and domain trust models. Determine cross-boundary access requirements. Explain the purpose of different types of trusts. Explain the purpose of functional levels. Describe the guidelines for restricting trust relationships. Describe issues that can prevent networks from supporting trusts. Describe possible access requirements and the associated recommended trust types. Design appropriate trust models.

A trust model is the number and arrangement of trusts within as well as between for ests, as well as the way in which these trusts are restricted. To design forest and domain trust models, follow this process: 1. Document the current forest and domain architecture. Before considering the creation of new trusts, determine the forest and domains that exist within your organization. 2. Determine where access is needed. If partner projects require access, determine the forest or domain structure within the partner s network that might become the partner in a trust. 3. Match access requirements to appropriate trust types. You must be prepared to select trust direction, meet trust requirements, and know how the trusts can be restricted. 4. Restrict trust relationships. 5. Design appropriate trust models.