Access Control

Access Control

1. Are you allowed to do that?

2. Policies

   • Role-Based
   • Discretionary
     • Access Matrix
       • Access Control List (Column)
       • Capabilities C-List (Row)
   • Mandatory

3. Requirements

   • Reliable Input
   • Fine and Coarse Specifications
   • Least Privilege
   • Separation of Duty
   • Open and Closed Policies
   • Conflict Resolution
   • Administrative Policies

4. Elements

   • Subject
     • Clearance
   • Object
     • Classification
   • Access Right

5. Multilevel Security Models

   • Top Secret
     • Extensive Background Check
   • Secret
     • Routine Background Check
   • Confidential
   • Unclassified
   • Examples
     • Bell-LaPadula
     • Covert Channel

6. CAPTCHA

   • Type
     • Visual
     • Audio

Bilder und Dateien der Mindmap