[ad_1]
A security domain is a group of computers, networks, or information infrastructure that falls under a specific security protocol. It can be applied to a wide range of IT elements, such as websites, communications networks, and computers. Examples of security domains include web access management architecture, enterprise directory services, and highly classified information. They all have a single authentication method for accessing elements within the security domain.
A security domain is a term used to conceptualize any grouping of computers, networks, or information infrastructure elements that fall under a specific security protocol. The domain is established as a restricted unit of those elements which then have a single authentication method for accessing elements within the security domain. Because the term is so conceptual in nature, it can be applied to a wide range of information technology (IT) elements such as a collection of websites, a communications network, a group of computers in a room, and even a combination of any or all of these.
An example of a security domain is the use of a web access management architecture to manage authorization for a number of websites or web pages. This can be handled in a couple of different ways, like an agent software on the web server or a separate proxy server. With a software agent, each web server has a small software program installed that receives authentication information from another server. The software on the web server intercepts a web request and then checks authorization with the access management server before allowing or denying access to the website or a specific web page. With a proxy server configuration, on the other hand, the proxy server holds access permissions for the web servers it secures, intercepts requests to those servers, and allows only requests that meet the appropriate security criteria.
In another case, the term secure domain is often used with enterprise directory services. A common example is the Microsoft® Active Directory® service, which uses Lightweight Directory Access Protocol (LDAP) and the Kerberos authentication system to establish a single point of authorization. In this case, the domain is a real computer network made up of any number of computers, servers, and software programs. Access authorization to these elements is then managed by the Active Directory® system, which even allows you to establish separate security domains in one larger administrative domain.
Even highly classified information is often kept sequestered in a specified security domain. In this case, the security domain consists of any or all of the above elements, but the single source of authentication can be of a different nature. One example is known as the Secret Internet Protocol Router Network (SIPRNet) used by the United States government. SIPRNet is a highly secure set of interconnected networks essentially mirroring the Internet. This type of security domain, part of the defense information systems network, still uses all the same technology protocols as the Internet, but without connection to the Internet itself.
[ad_2]