Share Asset Control
Save to Folder
What are objects?
assets
What is access control?
Access control is the sum total of security. It is who can gain access and what they can do when they get there.
What are subjects?
people
What are the three key components to access control?
tamper proof, always invoked, verifiable
What is the purpose of layered defense?
to avoid a single point of failure
Access control must have these 2 items.
rules and logs
A lock on a door is an example of this.
a reference monitor
Assets can fall into these two categories.
tangible and intangible
Reputation is an example of this.
intangible asset
Money is an example of this.
tangible asset
Who determines access rules?
The owner of the asset.
These are 3 components tied to Privilege Levels.
identify, authenticate, authorize subjects
These are passive. They respond to a request and have a classification level.
Objects
These are active. They request service and initiate activity. They have clearance levels.
Subjects
Printer, file, application, process, server, memory, building and network are all examples of these.
objects
Physical access and logical access are examples of this.
layered defense
