Data Protection and Security

V

Access Control

V.I

Introduction

In the context of computer security, access control is the ability to limit and control the access to computer resources. [more]

V.II

Unix and Windows NT Access Control Overview

At an operating system, access control is generally modelled by a matrix of access operations, with columns for objects and rows for subject. [more]

V.III

Role Based Access Control (RBAC)

Many organizations base access control decisions on the roles that individual users take on as part of the organization. [more]

V.IV

Multilevel Security

Remember that in mandatory access control, restrictions to allowed information flows are not decided at the user's discretion (as with Unix chmod), but instead enforced by system policies. [more]

V.V

Formal Models for Access Control

Forming a lattice model and determining which subjects and objects belong to which level is the first step towards building a formal security policy. [more]

V.VI

Covert Channels

A covert channel is an information flow that is not controlled by a security mechanism. In BLP, you could use the access control mechanism itself to construct a covert channel. [more]

V.VII

Summary

Access control is traditionally one of the most important topics in computer security. [more]