Thursday, April 10, 2008

Understanding Access Control Systems

Access control systems provide Identification, Authentication and Authorization for systems. Three of the most popular types are

Discretionary Access Control(DAC) - Think of NTFS permissions and ACL Lists.
Mandatory Access Control(MAC) - Think SELINUX. Subjects and objects are given security attributes that determine authorization.
Role Based Access Control(RBAC) - Think NT/2K/2K3 built-in groups. Built-in groups

0 Comments:

Post a Comment

<< Home