Real Time Enterprise

Transcription

1 Association for Enterprise Integration Enterprise Integration Expo 2003 eptember 24, 2003 Collaborative Identity Management Real Time Enterprise aundra Throneberry, CIO trategy, Technology & tandards EAB 8/6/03 1

2 Topics Business Drivers and Information ecurity tandards Applied Information ecurity trategy and the Real Time Enterprise EAB 8/6/03 2

3 Information ecurity Business Drivers Business Lockheed Martin s name signifies competence, trust, and excellence. Protect information (internal and external) from abuse or loss providing a confidence to customers and partners. Re-use of previous investments and to ensure new investments prepare for the competitive future. ecurity levels applied according to business needs. Legal/Regulatory Compliance with all applicable regulations, laws, contracts, policies, and mandatory standards Insurance premiums minimized, limited liability to errors, fraud, and malfunction User Information entitled to by the user should be easily found Information should be accurate to a pre-determined range Educated and trained on security issues Easy to use interfaces with neutral interaction LM Intranet Internal Focus Access to Employees and ponsored Users Only Centralized Applications and Data in Fortified IT Bunkers Prevent Losses Minimal Confidentiality Breaches IT Control Administrators decide on access Real Time Enterprise External Focus Access to Customers, Partners, uppliers, Other Prospects Distributed Applications and Data across business units and networks Generate Revenue ecurity is to be an enabler for business Business Control Business units determine levels to grant access EAB 8/6/03 3

4 Business Risk & ecurity Business Attributes User Management Operational Risk Management Legal/ Regulatory Technical trategy Business trategy Accessible Automated Available Access Control Admissible Architecture Name Accurate Change Managed Detectable Accountable Compliant COT Business Enabled Consistent Controlled Error Free Assurable Enforceable Extendible Competent Current Cost Effective Inter Operable Auditable Insurable Flexible Confident Duty egregated Efficient Productive Authenticated Liability trategic Credible Educate & Aware Maintainable Recoverable Authorized Resolvable Legacy Governable Informed Measured Flexibly ecure Time Bound Migratable Custody Motivated upportable Identified Multi ourced Investment ReUse Protected Possession calable Reputable Reliable Integrity tandard upported Non Repudiation Upgradeable Timely Trustworthy Traceable Usable Developing Model to be applied for Risk Assessment and Analysis, Reporting, and Management Framework EAB 8/6/03 4

5 Defense in Depth - IO tandard Policy Training Awareness Audit Compliance Business Continuity Classification And Control Physical Protection Hardware ecurity Operating ystem Layer Application Layer Operations And upport Assets Fortified Layered Protection of Assets Common tandard Framework for Effective ecurity Management, Measurement, and Practice for Industry, Government, and Commerce Gaps Identity and Access Management: Implementation plans for identification into applications and automated provisioning of privileges to allow for role(s) based access Versioning: Client and server versioning to deliver foundation security elements at the infrastructure level. Maintain a similar user experience enhanced with feature upgrades Data Classification: tandardization of data classification elements externally to include application logic processing standards for access and protection EAB 8/6/03 5

6 Integrated Model Applied to the Real Time Enterprise, focusing on external identity and access requirements Public/ Private Key Identity and Access Management extensible Markup Language (XML) Users Roles Permissions Real Time Enterprises EAB 8/6/03 6

7 Public Key Infrastructure Enables a business to ensure that levels and forms of trust that exist in the physical world are implemented in the digital world Authentication Data Confidentiality Fabrication Who am I dealing with? Message Authentication & Integrity Modification Has my communication been altered? Interception Are my communications private? Non-Repudiation? Claims Not ent/not Received Who sent/received it and when? EAB 8/6/03 7

8 Public Key Infrastructure Roadmap Authentication (Who am I dealing with?) Web erver L Certificates Router Certificates Client Certificates VPN Certificates Certificates on Tokens Certificates on martcards Data Confidentiality (Are my communications private?) L Encryption IPec Protocol Encryption Message Authentication/Integrity (Has my communication been altered) PGP Certificates M Exchange Certificates ecure/mime Non-Repudiation (Who sent/received it, and when) PGP Certificates M Exchange Certificates Transaction Phased approach to implementation Implemented Planned Planned w/dependencies Major Milestones Certificate erver in UK, CA & Intl domains External CA for collaboration auth session cert Integrated with Enterprise Active Directory Key archival encryption certificates Certification with the Federal Bridge CA Certificate Authentication for LM Apps Enterprise wide use of Encrypting Files EAB 8/6/03 8

9 Identity Access Management External User (non-employee) Lockheed Martin Provi sion- ing ystem (ITODv1) Microsoft Meta- directory ervices (ITODv1) ITOD - Information Technology Operational Directive Firewall External Directory ervices External Authentication ervices ( iteminder, PKI) Data Application ervices ervices ii ii Data Application ervices ervices i i High Levels of Lockheed Martin External Web erver Complexity EAB 8/6/03 9

10 Real Time Enterprise (RTE) Vision The IT environment will integrate the business processes of the organization in real time (Real Time Enterprise RTE) versus periodic access to functional stovepipe information Aeronautics Value Chain RTE Example Product upport ell-ide Capabilities F-16 pares E-catalog ales C-5 Portal / Decision upport ystem Collaborative Design - Follow the un (or moon?) E-business On Demand Enabled by Common Infrastructure LM Aero Programs ecurity Portal Integration ervice Provisioning Virtual Manufacturing Worldwide teaming Customer Relationship Management FM Customers Depots / Bases Logistics/upport Arms-around support Autonomic Logistics imulation-based Acquisition / Virtual Test and Evaluation Network-based imulations Tests Integrated With Multiple Customers EAB 8/6/03 10

11 3 Dimensions of Real Time Enterprise RTE Capability Envelope ecure Infrastructure Information Access Real Time Enterprise Portal Characteristics Adaptable Real time information Federated Event based Iterative Loosely coupled Knowledge Management Collaboration Content Management earch & Retrieval Configurable (and 24 x 7 re-configurable) ecure hort duration (90 to 180 day projects) EAI J2EE J2EE.NET.NET Directory ervices Evolutionary not revolutionary Identity & Node-enabled legacy systems Access Mgm t Not 1 Dimensional, but 3 Distinct Dimensions That Contribute to Enable the Real Time Enterprise Web Web ervices ervices ervice ervice Oriented Oriented Architecture Architecture Application Integration Many Capabilities Available Today with Combinations of Current Technologies & olutions EAB 8/6/03 11

12 Enabling the Extranet Architecture (RTE Interface) Intrusion Detection Firewall Upgrade Vulnerability cans Public Key EAB 8/6/03 12

13 trategic Model for the Future Integrated Defense... emphasis on attributes/objects controls integrated into data and services Web Web New/Derived Technologies Web ervers Applications Tech Apps Assets Web Cost And Inefficiency ecure Accelerators Load Balancers Proxy Routers/Appliances Application Firewalls XML Extensible Markup Language Digital Rights Directory Integration Time and Performance Integrated Defense is the evolution of Defense In Depth to ervice Orientation/Real Time Enterprise, with Diverse and Adaptable Controls EAB 8/6/03 13

14 ummary Key elements to realize Real Time Enterprise externally accessed Authentication Public Key Infrastructure Identity and Access Management to Resources and ervices Brokering extensible Markup Language (XML) ecurity Risk Management, Business Value, and Return on Investment aligned to secure collaborative objectives and strategies EAB 8/6/03 14