4.2 Access Control Types

MAC (Mandatory Access Control)

A security system that limits user access based on predefined rules. It's often used in the government and military to protect sensitive information.

DAC (Discretionary Access Control)

The owner of the data controls who has access, and can modify it at anytime. Very flexible and weak security.

RBAC (Role Based Access Control)

Administrators provide access to data based on the role of the user.

RuBAC (Rule Based Access Control)

Access is determined through system enforced rules. Example: Lab network access is only available between 9am - 5pm.

ABAC (Attribute-Based Access Control)

Access is determined through certain criteria. Can combine and evaluate multiple parameters and determine access from that. Examples: IP address, time of day, relationship to the data, etc.