Answer to Question #317926 in Computer Networks for Aman

Question

Explain the different methods for control access control? (5 marks )

Answer 1

The work of access control involves identifying a subject for instance user and authorizing the subject to access data based on the requirement. As this control helps in protecting unauthorized access of resources, there are three main types of access control including: Discretionary Access Control (DAC), Role Based Access Control (RBAC), and Mandatory Access Control (MAC).

Discretionary Access Control (DAC)

This is an access control system that uses specific rules to assign access rights to users. It works under the principle that a certain subject determines who is eligible to access their objects through the use of access control lists (ACLs). As such, the security kernel assists in checking the tables to control access.

Role Based Access Control (RBAC)

This access control method is useful when there is need for system administrators assigning rights centered on organizational roles rather than individual user accounts. By presenting an opportunity of an organization addressing the ‘least privilege’ principle, this advantage ensures that individuals only allowed access because they need to do their job.

Mandatory Access Control (MAC)

MAC is considered the stringent level of all systems of access control because it utilizes a hierarchical approach to control file access. Under this environment, a system administrator defines settings that control access to resource objects meaning that the operating system controls access based on setting configurations. While it is impossible for users to change files access control, MAC assigns resource objects through the use of ‘security labels’. This labeling ensures that each individual account has an assigned category and classification properties and access to object is provided if there is a match in properties.