Types of Access Control - created from Mind Map

Page 1

Discretionary Access Control (DAC)

Discretionary Access Control (DAC)

Role Based Access Control (RBAC)

Mandatory Access Control (MAC)

Differences between MAC, DAC and RBAC

type of security access control that grants or restricts object access via an access policy determined by an object's owner group and/or subjects.

Example: When you create a file, you decide what access privileges you want to give to other users; when they access your file

Role-based access control (RBAC) is a method of restricting network access based on the roles of individual users within an enterprise.

Example: align roles and access permissions with your employees’ positions in the organization

security strategy that restricts the ability individual resource owners have to grant or deny access to resource objects in a file system.

Example: The law allows a court to access driving records without the owners’ permission.

MAC

DAC

RBAC

MAC supports a security requirement of confidentiality

MAC makes decisions based upon labeling and then permissions

tends toward a military systems or very narrowly defined, high security requirement implementations

DAC supports the security requirement of availability

DAC makes decisions based upon permissions only

everybody uses it

RBAC supports the security requirement of integrity

RBAC makes decisions based upon function/roles

tends toward databases