355851
Description
U3.2 Access Control
Structures
- Access Control Matrix
- Based on a grid. Subjects on the side, objects accross
- Not practical for large organisations with
100's of subjects and 10000's of objects, to
many empty spaces and wasted memory
- Not practical for large organisations with
100's of subjects and 10000's of objects, to
many empty spaces and wasted memory
- Based on a grid. Subjects on the side, objects accross
- Access Control List
- Concentrate on objects
- ACL for object is stored within the object
- Checked before access is granted
- Checked before access is granted
- More widely used than Matrix
- ACL for object is stored within the object
- Used by UNIX
- Main disadvantage is checking the list is time
consuming, if access is revoked for a user then
every object has to be checked for that user
- Concentrate on objects
- Capability list
- Focus on access rights of Subjects
- Concentrate on the rows of a matrix
- Concentrate on the rows of a matrix
- Used in databases
- Disadvantages
- difficult to ascertain the rights to an object
- difficult to revoke permissions if owner
has granted certain rights to subjects
- difficult to ascertain the rights to an object
- Focus on access rights of Subjects
- How does the Reference Monitor ascertain
which subjects have access to which objects?
Media attachments
0 comments
Want to create your own Mind Maps for free with GoConqr? Learn more.