1
Q
Lampson’s Access Control Model
A
Subject -> Access Request ->
Reference Monitor -> Object
2
Q
‘nix permissions are divided in 3 categories, name them.
A
Owner Permissions Group Permissions Other (World) Permissions
3
Q
State the Principle of Least
Privilege:
A
“Every program and every user of the system should operate using the least set of privileges necessary to complete the job.”
4
Q
3 stages of access control
A
Identification
Authentication
Authorization
5
Q
3 ways of Authentication
A
What you know
What you are
What you hold
6
Q
What must Access Control be questioned on?
A
Acceptability
Accuracy
Cost
