Access Control Lecture 3 Concepts

In MAC, administrators of the system have the authority to change the object level.

RBAC model makes access decisions based on user roles within an organization.

Operating systems prevent one user from accessing another user's files.

Top Secret (TS) is the lowest classification level in MAC.

In RBAC, access decisions are made based on user identities rather than roles.

Web browsers have no capability to control the kinds of content users can view.

Access control specifies what users on a system can or cannot do.

In Access Control, subjects are passive entities requesting accesses to resources.

Role Based Access Control (RBAC) is one of the Access Control Models mentioned in the text.

In Discretionary Access Control (DAC), the owner of the resource does not have the ability to specify what subjects can access specific resources.

The DAC model allows users to protect what they own and define the type of access given to others.

Access Control Lists (ACLs) are the least common implementation of DAC.