The purpose of authentication is to enable principals to communicate in confidence, knowing that the communication originates with one principal and is destined for the other. Principals can be people, machines, organizations, and network resources such as printers, databases, and file systems. All authentication schemes ultimately reduce to enabling each principal to obtain or possess some information that uniquely identifies the other. Integrity Data integrity addresses the unauthorized alteration or destruction of data. To assure data integrity, one must have the ability to detect data manipulation by unauthorized parties.
Data manipulation includes such things as insertion, deletion, and substitution.
This is achieved through maintaining detailed records and audit trail information. Audit also helps in subsequent reviews of security related events. Security Policy A underlying premise of Sun's network security architecture is the existence of a corporate security policy. Any implementation of a network security architecture must be consistent with an established security policy. The first step in defining a corporate security policy is to draft a high-level management policy statement to establish a framework and context for security within the organization.