Security
Protection of your information assets is critical in today’s business world. Our architecture was designed to provide robust security against a full range of technologies and security models, and provides appropriate mechanisms to support and augment your security infrastructure at every level. Businesses and institutions with the most sensitive data rely on MicroStrategy to keep their information secure.
Requirements
The Internet revolution enables:
- Millions of users to access information, inside and outside the enterprise.
- Companies to provide access to information quickly and inexpensively.
- The collection of much more customer information than was previously possible.
- As a result, businesses are more sensitive to security and privacy requirements. In fact, the security requirements for an Internet-oriented application are much more rigorous than a simple client-server application.
The MicroStrategy Solution
Security was a key factor in every aspect
of the MicroStrategy platform’s design. As such, the security
architecture is broad, robust and flexible.
Breadth of Security Features: Ensuring that every part of the platform and delivery architecture is secure is critical.
There are four main architectural layers
that must be completely secure: user
layer, transmission layer, application layer and data layer.
- User layer: Users must be authenticated and authorized to access data.
- Transmission layer: Data transmission must be secured and hacker-proof.
- Application layer: Only appropriate application functionality should be provided to users with associated privileges.
- Data layer: Users must have access only to data for which they have appropriate privileges.
MicroStrategy's security architecture implements tight security at every layer.
Robust Security Functionality: To ensure robust security, MicroStrategy implements industry-leading security measures at every layer of the architecture.
Some examples for each layer include:
- User layer: integration with NT and LDAP security.
- Transmission layer: 128-bit SSL transmission, 128-bit encryption of data, multiple firewall (DMZ) configuration with no database connection on web server.
- Application layer: 3-tier security system encompassing privileges, access control and security profiles.
- Data layer: security filters and database views, revolutionary connection mapping.