Enter text here

Enter text here

1. Discretionary Access Control (DAC)

2. Discretionary Access Control (DAC)

   • type of security access control that grants or restricts object access via an access policy determined by an object's owner group and/or subjects.
     • Example: When you create a file, you decide what access privileges you want to give to other users; when they access your file

3. Role Based Access Control (RBAC)

   • Role-based access control (RBAC) is a method of restricting network access based on the roles of individual users within an enterprise.
     • Example: align roles and access permissions with your employees’ positions in the organization

4. Mandatory Access Control (MAC)

   • security strategy that restricts the ability individual resource owners have to grant or deny access to resource objects in a file system.
     • Example: The law allows a court to access driving records without the owners’ permission.

5. Differences between MAC, DAC and RBAC

   • MAC
     • MAC supports a security requirement of confidentiality
       • MAC makes decisions based upon labeling and then permissions
         • tends toward a military systems or very narrowly defined, high security requirement implementations
   • DAC
     • DAC supports the security requirement of availability
       • DAC makes decisions based upon permissions only
         • everybody uses it
   • RBAC
     • RBAC supports the security requirement of integrity
       • RBAC makes decisions based upon function/roles
         • tends toward databases