1-Access Controls

Security technology

refers to the tools, mechanisms, architectures, and techniques used to protect information systems, networks, devices, applications, and data from unauthorized access, misuse, modification, disruption, and destruction.

Two fundamental areas of security technology

Access Control and Firewalls.

Access Control

determines who or what can access a resource and what they are allowed to do.

Firewalls

control and monitor network traffic entering, leaving, or moving between security zones.

Access control

A method by which systems determine whether and how to admit a user into a trusted area of the organization. It allows organizations to grant user permissions and enforce access policies.

Access control

The process of restricting access to resources based on predefined rules, policies, identities, and security requirements.

A method is chosen based on

the level of access needed by each user, security requirement, infrastructure, etc.

Access Control

grants an individual permission to get onto a

network via a username and password, allows them access to files, computers, or other hardware or software they need, ensures they have the right level of permission to do their job

Identification

is the process by which a user, device, application, or other entity claims an identity.

Authentication

is the process of verifying that an entity is actually who or what it claims to be

Authorization

determines what an authenticated user is allowed to access or perform.

Accountability

ensures that actions can be associated with a specific user, device, or process.

Authentication

Verifies identity. Question: "Who are you?" Happens first. Uses Password/MFA.

Authorization

Determines permissions. Question: "What can you do?" Happens after authentication. Uses Roles/permissions/policies.

Mandatory access control

A system of access control that assigns security labels or classifications to system resources and allows access only to entities (people, processes, devices) with distinct levels of authorization or clearance. These controls are enforced by the operating system or security kernel.

Role Based Access Control

provides access control based on the position an individual fills in an organization.

Discretionary Access Control (DAC)

the least restrictive model compared to the most restrictive MAC model. It allows an individual complete control over any objects they own along with the programs associated with those objects.

Rule-Based Access Control (RBAC)

will dynamically assign roles to users based on criteria defined by the custodian or system administrator.

Components of an information system

People, Hardware, Networks, Software, Data, Procedures

Software

The software component of the IS comprises applications, operating systems, and assorted command utilities. Software is perhaps the most difficult IS component to secure.

Hardware

Hardware is the physical technology that houses and executes the software, stores and transports the data, and provides interfaces for the entry and removal of information from the system.

Data

Data stored, processed, and transmitted by a computer system must be protected. Data is often the most valuable asset possessed by an organization and it is the main target of intentional attacks.