Anyone know of a good technical arch diagram or white paper article for SharePoint security?

Question

Anyone know of a good technical arch diagram or white paper article focused SharePoint security?

Mod's, I know this isn't a coding question so feel free to delete it if it violates the rules and I apologize if it does.

Answer 1

Spencer Harbar posts a lot of information on his blog regarding what he terms Platform Hygiene - suggests practices and techniques to keep your system from breaking. I assume some of this content will include security, so it's definitely worth a read.

http://www.harbar.net/category/5.aspx

Answer 2

I would start with Security and Authentication for SharePoint Foundation 2010.

SharePoint 2010 Security deserves a whole book in itself so I suggest you have a read through the documentation then come back if you have any specific queries.

Answer 3

It depends on what kind of information you need. If you want to know something about users, groups and permissions security, try this link

http://navdeep19.wordpress.com/2011/03/25/overview-of-the-sharepoint-2010-security-model/

Or you need something about authentication, Kerberos/NTLM or data security?

Answer 4

SharePoint 2010 is huge platform. Before learning SharePoint security, you need to know the following:

• SharePoint 2010 works on Windows Server 2008 Active Directory for production environment.
• SharePoint 2010 Web application is hosted by IIS Web Server 7.0 or 7.5
• SharePoint 2010 database is stored by SQL Server 2008

When it comes to SharePoint security, you should consider what you need to secure, such as Web application, Databases, User Information account...then you continue to consider authentications that SharePoint 2010 supports, such as Claim-based authentication or security solutions, which have been running on Active Directory.

I give you further resources:

• Secure SharePoint 2010 infrastructure fundamentally
• Claim-Based Identity for Windows white paper
• [Security and protection Microsoft SharePoint Server 2010][3]
• [Security planning for sites and content SharePoint Server 2010][4]
• [SharePoint 2010 Security Hardening][5]
• [Server 2008 and IIS7 Hardening for Secure SharePoint Extranet][6]

Because I haven't been SharePoint Developer, thus I can just give you resources concerning infrastructure and basics of SharePoint 2010 security.