Technology Type: Security

Technology Architecture

Security: 25 related definitions

Brick

Access Control Brick:

Logical access control within NIH is provided at the network, operating system, and application level. Network Access Control. Network access controls...

Confidentiality Brick:

The primary method of protecting confidentiality of information is via encryption. In addition to sensitive business data, there is also data about the...

Event Monitoring and Analysis Brick:

Vulnerability Analysis. Internet-based attack tools are becoming increasingly sophisticated and increasingly easy to use. NIH's network could contain vulnerabilities...

Identification and Authentication Brick:

This standard establishes NIH Login as the required method of implementing authentication in web-based applications at the NIH. Authenticated identities...

Integrity Brick:

Anti-Virus. An effective anti-virus architecture uses a multi-tier (that is, desktop, server, and gateway) approach and is not necessarily reliant on a...

Intrusion Detection Brick:

Vulnerability Analysis. Internet-based attack tools are becoming increasingly sophisticated and increasingly easy to use. NIH's network could contain vulnerabilities...

NIH Federated Identity - Authentication / Authorization Brick:

The goal of NIH’s Federated Identity service is to give a person the ability to use the same user name, password, or other personal identification to access...

NIH Federated Identity - Identity Provider Brick:

The goal of NIH’s Federated Identity service is to give a person the ability to use the same user name, password, or other personal identification to access...

NIH Federated Identity - Protocols Brick:

The goal of NIH’s Federated Identity service is to give a person the ability to use the same user name, password, or other personal identification to access...

Secure Email Brick:

Secure email is a method of establishing trust and securing email communications and attachments exchanged between NIH and external users. The technology...

Vulnerability Tools Brick:

Vulnerability Analysis. Internet-based attack tools are becoming increasingly sophisticated and increasingly easy to use. NIH's network could contain vulnerabilities...

Pattern

Business Partner Boundary Services Pattern:

This boundary is between NIHnet and a business partner. The business partner domain is assumed to be untrusted primarily because it is not under direct...

Federation Pattern:

The goal of NIH’s Federated Identity service is to give a person the ability to use the same user name, password, or other personal identification to access...

High-Level Security Pattern:

The following diagram presents the security architecture patterns in an overall context. Each pattern is a definition of the security services and mechanisms...

Internet Boundary Services Pattern:

This pattern defines the boundary architecture between NIHnet and the public Internet. This boundary is where the majority of external access to internal...

Level 1 System Boundary Services Pattern:

This boundary applies to Level 1 servers. These servers are generally used to provide information to external organizations and to the general public....

Level 2 System Boundary Services Pattern:

This boundary addresses Level 2 systems. These systems are generally available to NIH employees and business partners who are involved in day to day NIH...

Level 3 System Boundary Services Pattern:

This pattern addresses the requirements of the most sensitive systems within NIH. These systems contain information that is subject to HIPAA and privacy...

NIHnet/ICnet Boundary Services Pattern:

NIHnet/ICnet Boundary Services Pattern Printer-Friendly Version Description This boundary is between the NIHnet backbone and any IC sub network (ICnet)....

Remote Access/Wireless Boundary Services Pattern:

The remote access boundary applies to all forms of remote access including Internet or business partner VPN, dial in remote access, and wireless. By definition,...

Secure Email Middleman Pattern:

This pattern depicts an alternative method for NIH and external users to exchange secure emails that are received and read by external users when PKI-based...

Service-Oriented Architecture (SOA) Security Pattern:

The SOA Security Pattern addresses security along four dimensions: Authentication – It must be possible for the service provider to ascertain the identity...

Trusted User Boundary Services Pattern:

This boundary pattern addresses the controls required for a trusted client to locally (that is, physical connection to an NIH managed network within NIH...

Principles

Security Principles:

High level statements of NIH's fundamental values that guide decision-making for IT security.

Regulatory and Policy Drivers

Security Policies:

Links to Federal websites that describe laws, regulations, and policies that impact information system security at NIH.

Go to top