04 Access Control - Mind Map

mindmap
  root((Access Control))
    Principles
      authentication first
      authorization database
      auditing
    Policies
      DAC
        identity + rules
        access matrix
      MAC
        labels vs clearances
      RBAC
        roles
    Requirements
      reliable input
      fine and coarse grain
      least privilege
      open vs closed policy
      administrative policy
    Elements
      subject: owner, group, world
      object
      access right
    Access matrix
      capability lists
      ACLs
      extended matrix
      copy flag
      transfer and delete rules
      access control function
    RBAC models
      RBAC0 base
      RBAC1 hierarchies
      RBAC2 constraints
        mutual exclusion
        cardinality
        prerequisite
      RBAC3 both

flowchart LR
  U[User] --> A[Authentication function]
  A --> C[Access control function]
  DB[(Authorization database)] --> C
  C --> R[System resources]
  Au[Auditing] -.-> U
  Au -.-> R

Index: 04 Access Control - Index · Cheat sheet: 04 Access Control - Cheat Sheet