Security in a Client-Server Environment

Abstract

This paper describes the strategy adopted by Indiana University in the design and implementation of a security model for the client/server environment. The strategic initiatives which were the catalyst for this effort are presented: deployment of a high speed network, an orientation to workstation-centered computing, and a growing commitment to open-systems solutions. Details of the IU security architecture are discussed, focusing on the three components of security -- identification, authentication and authorization -- and why they are critical success factors to implementing a client/server information system. The paper identifies security problems of an open-systems and client-server environment, the technology components of a security solution, and the work done by Indiana University to supplement the immature technology in this area. The paper also makes a case for clear analysis of security exposures, and the importance evaluation security solutions in light of evolving industry standards.