[1] David Kim and Michael G. Solomon. Fundamentals of Information Systems Security - Jones & Bartlett Learning, LLC. 40 - Tall Pine Drive Sudbury, MA 01776 – Copyright 2012
Chapter 5 [1] Chapter 5 explains in detail what is involved with “Access Controls”. Access Controls are methods used to restrict and allow access to certain things such as: cars, homes, computers, and cell phones. In many of our everyday items that we access, there are security features that we sometimes need to program ourselves, or are already programmed from the factory. It is a sequence that we have become familiar with since some of these items are considered valuable. Thus, security measures are needed in order to help protect them from malicious thievery or harmful conduct. Growing up, I learned at a very young age that I should always lock up my bicycle when I would go to the store or at a friend’s house. I learned this the hard way as I had my bicycle stolen while I went to the store to get a loaf of bread and left the bicycle unchained and unlocked outside. When I left the store, I found my bicycle gone. So when I saved up enough allowance to get a lock and chain, I never had my bicycle stolen again. The book goes into much formal detail about Access Control and specifies formal models which relate to the computer world more directly. Discretionary Access Control (DAC), Mandatory Access Control (MAC), Non-discretionary access control, and Rule-based access control are basic rules or guidelines to follow when discussing the formal models of Access Control. Permission levels such as User-based, Job-based or Rule-based Access Control (RBAC), Project-based, and Task-based are explained to indicate a person’s right to a system, application, network, or other