Access Control
- It is the security term used to refer to a set of policies for restricting access to information and resources in computing environments.
- It is a fundamental concept in security that minimizes risk of unauthorized access to physical and logical systems.
- Access control systems perform identification authentication and authorization of users& entities by evaluating required credentials.
Access Control Elements
- Subject- Here A is the subject, i.e source (e.g. users, processes)
- Object- Here B is the Object, i.e resource (e.g. files, printers)
The subject issues request to access the object, and protection is enforced by a reference monitor that knows which subjects are allowed to issue which requests.
Types of Access Control
- Mandatory access control (MAC)
- Discretionary access control (DAC)
- Role-based access control (RBAC)
 |
| Picture from cloud audit controls |
No comments:
Post a Comment