DS Exam

DS Exam

1. Access Control

   • Authentication VS Authorication
     • Authentication is a mechanism that to determine if a user is who he/she claims to be
     • Authorization granting of a privilege that enable a user to have a legitimate access to a resource
   • Control Types
     • Access Matrix model
     • Access control list ACLs
     • Capability lists
     • Access control triples
     • Bell-LaPadula
       • No Write Down
       • No Read Up
     • Role-Based Access Control(RABC)

2. Authentication

   • Kerberos
     • Authenticate 2 or more secure hosts to each other on an insecure network
       • C wants to communicate with S
         • C send C,S to Kerberos
           • 1. C --> K   C, S 2. K --> C  {Tc,s, Kc,s} Kc 3. C --> S  Tc,s, Ac,s 
     • Ticket granting service
       • Transparency user should provide password once upon initial login, and should not be asked for it on every service request. Workstation should not store the password, except for the brief initial login.
       • Steps

Bilder und Dateien der Mindmap