Data Protection and Security

V

Access Control

V.VII

Summary

Access control is traditionally one of the most important topics in computer security. In this chapter, we first give basic definitions and set the stage for more advanced topics in section 5.1. Access control is divided into two groups. First group is discretionary access control where the owner of the objects have the full control over who will have access to them. We have seen how Unix and Windows NT implemented discretionary access control in section 5.2. Role based access control which is highly popular due to its great power to deal with complexity is the topic of section 5.3. Next three sections are reserved for discussing the issues about second type, mandatory access control. Multilevel security in section 5.4, formal techniques in section 5.5 and covert channels in section 5.6 are only described in brief and details are left to your reference books. Especially Gollmann's book on computer security provides a more formal and rigorous treatment of these issues.

QUIZ

Access Control