Examples of access control methods, please help?
Tuesday, March 9th, 2010i will give full points for a detiled answer
hi ya
See Your answer Below
—————————————————————
Using Access Control Methods
In order to protect assets in a company or corporation, security analysts and programmers can set access control to individual components on a computer. These components can be the operating system, programs or even hardware settings. It is a necessary function that many end users often see as a burden.
Access control can be used with the following items when implementing security:
* Objects – Files or hardware settings (restriction of network settings, usb ports or individual files and folders)
* Subject – a process function (such as opening a file or folder or program) a subject can be an end user
* Operation – is the process of an end user trying to modify or delete an object
Access Control Models
There are four major access control models that should be embedded within applications for access control to prevent malicious users from accessing key functions within an application. These access control models are:
* Manadatory Access Control known as (MAC)
* Discretionary Access Control (DAC)
* Role Based Access Control (RBAC)
* Rule Based Access Control (RBAC)
Because individuals are assigned roles in a relationship with access control objects and / or resources, these users are defined as Owners, custodians, and end users.
The owners are ultimately assigned the responsibility for a file (data integrity) and may delegate how other users use a file. The custodian reports to the owner and can review the security of the individual object. The end user uses and opens the file(s) or objects and ‘uses’ it.
Mandatory Access Control
The process is when the owner (above) defines a policy or policies that can strictly define the end user and their use of programs or files. Because MAC is typically used in the defense industry, this ensures that documents or files are secured.
Note: CompTIA along with other vendors teach these levels of access controls methods. Certifications offered by these vendors are 8570.1 complient to meet DoD (Department of Defense requirements).
Discretionary Access Control
This access control is the least restrictive and allows total control of objects. This allows users to change permissions and have control over objects as defined above. This can pose security risks and threats if used improperly. This control allows the end user to set the proper protection and settings. Programs such as Microsoft’s Windows Vista and other operating systems now prompt users before actions are taken on programs. Most individuals overlook the fact that the UAC (user account control) is color coded and can give prompts with a color indicating the risk level involved.
Role Based Access Control
Role Based Access Control is an approach that is more realistic and aligned with most business models. Analyst and administrators look at the actual role that the end user will be taking. This approach to security ‘looks’ at the end user and defines what they can or cannot do.
Rule Based Access Control
Rule Based Access Control allows for the dynamic assignment of an end user’s processes. If an end user tries to access a program or object, the system checks the individual’s role and the rules assigned for that individual and object.
So what does all of this mean?
Administrators, programmers and analysts must look at a set of best practices in security for their organization. These ‘leaders’ in information technology must look at the separation of individual job duties, a minimum set of priviledges and make sure that end users are trained and educated in security. With assets going online with e-commerce, small businesses as well as enterprise level businesses must implement extreme means of security to ensure their information and data are protected.
Think u got all the answer
n i get fuullllll point
hehee
all right
cheers
The Best Version of Windows! Pogoplug… can you build a personal DropBox and access your files on the road? Boot Any Linux Distro Live, Is SCSI Dead? How good is a $10 hands free device? We review the Jupiter Jack. Help putting your microphone in the right place for better sound! Should you avoid Swoopo and BidRival?
Access full lesson containing this video at: http://www.yourteacher.com/algebra2/factoringbygrouping.php Students learn to factor a polynomial that has four terms by grouping the first two terms together and the last two terms together, then factoring out the Greatest Common Factor from each group. For example, to factor ax — ay + cx — cy, the first step is to factor out an “a” from the first two terms, and factor out a “c” from the last two terms, to get a(x — y) + c(x — y). The problem can now be thought of as two terms, each with a Greatest Common Factor of (x — y), so an (x — y) can be factored out, to get (x — y)(a + c).
Access full lesson containing this video at: http://www.yourteacher.com/algebra1/coinproblems.php Students learn to solve “value” word problems, such as the following. Martin has a total of 19 nickels and dimes worth $1.65. How many of each type of coin does he have? Note that this problem requires a chart to organize the information. The chart is based on the total value formula, which states that the number of coins times the value of each coin = the total value. The chart is then used to set up the equation.
Access full lesson containing this video at: http://www.yourteacher.com/algebra1/slopeinterceptform.php Students learn to use slope-intercept form to graph a line. Slope-intercept form is y = mx + b form, where m represents the slope, and b represents the y-intercept. So if the equation of a line is y = 3/4 x — 2, then the line is written in y = mx + b form, with m = 3/4 and b = -2. To graph the line, start with the y-intercept, or b, of –2. From there, take the slope, or m, of 3/4, plot a second point, and graph the line.