What is information security, its preserving the CIA
This chapter takes the third A in CIA which is authorization
To deal with unauthorized access you need to use access control models
Access control models are related to users and groups
Who would you know what the user is authorized to do and group is authorized to do
You need a Policy
First model of the access control models is
- Discretionary access control (DAC)
- Mandatory Access control (MAC)
- Role-based Access control (RBAC)
- Rule-based Access control (RBAC, Optional)
Definition of an Object; file and folders is an object
Access right, is applied on an object
- Read
- Write
- Execute
- Delete
- Create
- Search
Active directory, windows server software that helps you manage access rights