Bài giảng "Bảo mật cơ sở dữ liệu - Chương 3: Access Control Discretionary Access Control" trình bày 2 nội dung chính là Access Control và Discretionary Access Control. Đây là một tài liệu hữu ích dành cho các bạn sinh viên ngành Công nghệ thông tin dùng làm tài liệu học tập và nghiên cứu. | Access Control Discretionary Access Control Chapter 3 Agenda Access Control Discretionary Access Control 2 Access Control “Access control” is where security engineering meets computer science. Its function is to control which (active) subject have access to a which (passive) object with some specific access operation. subject Access request Reference monitor object Access Control Determine whether a principal can perform a requested operation on a target object Principal: user, process, etc. Operation: read, write, etc. Object: file, tuple, etc. Lampson defined the familiar access matrix and its two interpretations ACLs and capabilities [Lampson70] Why are we still talking about access control? An access control policy is a specification for an access decision function The policy aims to achieve Permit the principal’s intended function (availability) Ensure security properties are met (integrity, confidentiality) Limit to “Least Privilege,” Protect system integrity, Prevent unauthorized leakage, etc. Also known as ‘constraints’ Enable administration of a changeable system (simplicity) Example: Access Control Prof Alice manages access to course objects ‣ Assign access to individual (principal: Bob) ‣ Assign access to aggregate (course-students) ‣ Associate access to relation (students(course)) ‣ Assign students to project groups (student(course, project, group)) Prof Alice wants certain guarantees ‣ Students cannot modify objects written by Prof Alice ‣ Students cannot read/modify objects of other groups Prof Alice must be able to maintain access policy ‣ Ensure that individual rights do not violate guarantees ‣ However, exceptions are possible – students may distribute their results from previous assignments for an exam Access Control is Hard Because Access control requirements are domain-specific Generic approaches over-generalize Access control requirements can change Anyone could be an administrator The Safety Problem [HRU76] Can only know what is leaked right . | Access Control Discretionary Access Control Chapter 3 Agenda Access Control Discretionary Access Control 2 Access Control “Access control” is where security engineering meets computer science. Its function is to control which (active) subject have access to a which (passive) object with some specific access operation. subject Access request Reference monitor object Access Control Determine whether a principal can perform a requested operation on a target object Principal: user, process, etc. Operation: read, write, etc. Object: file, tuple, etc. Lampson defined the familiar access matrix and its two interpretations ACLs and capabilities [Lampson70] Why are we still talking about access control? An access control policy is a specification for an access decision function The policy aims to achieve Permit the principal’s intended function (availability) Ensure security properties are met (integrity, confidentiality) Limit to “Least Privilege,” Protect system integrity, Prevent .
