151-200 Security and Access Control Concepts

Front

Attestation

Back

Capability of an authenticator or other cryptographic module to prove that it is a root of trust and can provide reliable reporting to prove that a device or computer is a trustworthy platform.

Front

Permissions

Back

Security settings that control access to objects including file system items and network resources.

Front

Discretionary access control (DAC)

Back

An access control model where each resource is protected by an access control list (ACL) managed by the resource's owner (or owners).

Front

Mandatory access control (MAC)

Back

An access control model where resources are protected by inflexible, system-defined rules. Resources (objects) and users (subjects) are allocated a clearance level (or label).

Front

Role-based access control (RBAC)

Back

An access control model where resources are protected by ACLs that are managed by administrators and that provide user permissions based on job functions.

Front

Group account

Back

A collection of user accounts that is useful when establishing file permissions and user rights because when many individuals need the same level of access, a group could be established containing all the relevant users.

Front

Attribute-based access control (ABAC)

Back

An access control technique that evaluates a set of attributes that each subject possesses to determine if access should be granted.

Front

Rule-based access control

Back

A nondiscretionary access control technique that is based on a set of operational rules or restrictions to enforce a least privileges permissions policy.

Front

Least privilege

Back

A basic principle of security stating that something should be allocated the minimum necessary rights, privileges, or information to perform its role.

Front

Provisioning

Back

The process of deploying an account, host, or application to a target production environment. This involves proving the identity or integrity of the resource, and issuing it with credentials and access permissions.