Term
|
Definition
| Methodologies in which admission to physical areas, and more important computer systems, is managed and organized. |
|
|
Term
|
Definition
Discretionary Access Control
An access control policy generally determined by the owner. |
|
|
Term
|
Definition
Trusted Computer System Evaluation Criteria
A DoD standard that sets basic requirements for assessing the effectiveness of computer security access policies. Also known as The Orange Book. |
|
|
Term
|
Definition
Mandatory Access Control
An access control policy determined by a computer system, not by a user or owner, as it is in DAC. |
|
|
Term
|
Definition
Role Based Access Control
An access model that works with sets of permissions, instead of individual permissions that are label-based. So roles are created for various job functions in an organization. |
|
|
Term
|
Definition
| Denies all traffic to a resource unless the users generating that traffic are specifically granted access to the resource. For example, when a device denies all traffic unless a rule is made to open the port associated with the type of traffic desired to be let through. |
|
|
Term
|
Definition
| When users are cycled through various assignments. |
|
|
Term
|
Definition
Separation of Duties
This is when more than one person is required to complete a particular task or operation. |
|
|
Term
|
Definition
| When a user is given only the amount of privileges needed to do his job. |
|
|
Term
|
Definition
| The date when users’ accounts they use to log on to the network expires. |
|
|
Term
|
Definition
| File system permissions control what resources a person can access on the network. |
|
|
Term
|
Definition
| When a user’s logon hours are configured to restrict access to the network during certain times of the day and week. |
|
|
Term
|
Definition
Access Control List
A list of permissions attached to an object. They specify what level of access a user, users, or groups have to an object. When dealing with firewalls, an ACL is a set of rules that apply to a list of network names, IP addresses. and port numbers. |
|
|
Term
|
Definition
| Rules or guidelines used to guide decisions and achieve outcomes. They can be written or configured on a computer. |
|
|
