Flashcards
Untitled
Cards in this deck (2)
- 1XXXXX—An active entity on an information system XXXXX—A passive data file. XXXXX —Gives subjects full control of objects they have been given access to, including sharing the objects with other subjects. XXXXX—System-enforced access control based on subject’s clearances and object’s labels. XXXXX—Subjects are grouped into roles, and each defined role has access permissions based upon the role, not the individual. IntroductionSubject—An active entity on an information system.
Object—A passive data file.
Discretionary Access Control (DAC)—Gives subjects full control of objects they have been given access to, including sharing the objects with other subjects.
Mandatory Access Control (MAC)—System-enforced access control based on subject’s clearances and object’s labels.
Role-Based Access Control (RBAC)—Subjects are grouped into roles, and each defined role has access permissions based upon the role, not the individual. - 2How should usernames be made?Ideally, usernames should be non-descriptive. The example username “jsmith” is a descriptive username, and an attacker could guess the username simply by knowing the user’s actual name. This would provide one half (a valid identity) of the information required to launch a successful password guessing attack (the second half is jsmith’s password, which is required to authenticate). A non-descriptive identity of “bcon1203” would make password-guessing attacks (and many other types of attacks) difficult or impossible.
Information
- Description
- Flashcards on Untitled, created by smcjunk on 28/02/2015.
- Created by
- smcjunk
- Views
- 0
- Rating