Enterprise-wide security administration

Abstract

This paper gives an overview and explains the general architecture of OASIS, a system for administrating and enforcing enterprise-wide security. The main focus is given to a discussion of the key components of OASIS and their interactions. The goal of the system is to maintain enterprise-wide security information centrally, to integrate isolated solutions, to keep the consistency between different policies, to perform access controls, and to develop a public key infrastructure for key generation, distribution and certification.