Essay on The Most Common Types of Systems Access Controls

3.p16 The purpose of access control is to regulate interactions between a subject and an object, such as data, a network or device

Role based access control is an ideology through which access to systems is restricted based on authority given. It is used by organizations with a relatively large number of employees ranging from five hundred to one thousand and above (Sieunarine & University of Oxford, 2011). This is implemented through the mandatory access control or through the discretionary access control. These are the only two ways through which role based access control can be implemented.

Access controls must be rooted in good policies and procedures with strong tools to implement them. To ensure complete protection of resources access controls are split up into two different phases. The first phase is about forming a strong access control policy to layout the ground work for the rest of the organizations policies .This phase of access controls should at least address which subjects have access to varying degrees of sensitive systems and data, for what reason, and for how long. Authorization is the process that drives the operation of this phase. Policy enforcement is the next phase granting or rejecting access based on authorization of the policy definition phase. To guarantee enforcement of policies this phase is split up into three distinct operations: identification, authentication, and accountability.

In computer security, discretionary access control (DAC) is a type of access control defined by the Trusted Computer System Evaluation Criteria[1] "as a means of restricting access to objects based on the identity of subjects and/or groups to which they belong. The controls are discretionary in the sense that a subject with a certain access permission

Controlling access is an important component of physical security to protect assets and material resources. Making sure that only authorized vehicles, items, and people enter and exit defined areas minimizes the risk of harm or loss to all assets (Fennelly, 2012).

Access Controls provide a mechanism, which allows an administrator to ensure that appropriate techniques are in place to control how users interact with an IT system. It provides an avenue where restrictions can be developed, specifying what a user can do, the resources they can access, and the functions they can execute on a system. It is aligned with the three main security principles; confidentiality, integrity and availability. This alignment ensures that data and resources within an IT system will remain confidential as required, the structure will remain intact and these objects will remain available, so as not to diminish the functionality of the system. Access controls that are incorporated into a security plan are

Wireless computer networks have become very common in the past several years. The convenience with which computer users can utilize internet connections, without having a network cable attached to their computers, makes wireless networks extraordinarily popular in today’s on-the-go society. Homes, offices, and public businesses (e.g., hotels, coffee shops, restaurants, etc.) all frequently have active wireless computer networks. As is the case with hard-wired computer networks, security is very important in wireless networking environments, even more so because one is not physically connected to the network. This paper will examine many of the security issues revolving around wireless networks, as well as ways to protect such networks from vulnerabilities and attacks.

This chapter is basically based on access control in regards to computer information security. Access control is seen as the fundamental mechanism put in place to help make information security successful. Access control feature, in a particular system, will control how users can communicate, access and modify system resources and programs. Access control was described in this chapter as a very useful tool for the computer information security because it helps with ensuring that unauthorized person or program have no access to what they are not supposed to. Access control is regarded as the first line of defense to control, protect and monitor organization’s resource’s availability, confidentiality and integrity.

The access control system is a fundamental way of reducing security problems and control the access of people to a place. The purpose of the access control is to make sure that the right people are only granted the access to the place. The control system will ensure the privilege for people to access the building according to their rights and level. The control system monitor and record all the activities regarding the access control to lock and unlock the building, detect when a pass card is used and used when it has been declared lost. (Benantar, 2006)

· Authorization, Access Controls Authorization is the specification of a set of rules that specify who has which type of access to what information. Authorization policies therefore govern the disclosure and modification of information. Access controls are - 3 - procedures that are designed to control authorizations. They are responsible to limit access to stored data to authorized users only.

The WLAN is the next area that needs to be redesigned to offer better security protection from outside threats. There are two main areas that need to be addressed with the current WLAN layout. The first is that there is no user authentication or encryption enabled to access the WLAN. Second, the WLAN is on the same network as all other network stations and servers. With the introduction of a directory server, it will be possible to enable user authentication in order to connect to wireless access points (AP). Before user authentication can be enabled, encryption will need to be enforced on all wireless APs. There are several options for wireless encryption that can be implemented each having their benefits and weaknesses.

Wireless networks serve as the transport mechanism between devices and among devices and the traditional wired networks (enterprise networks and the Internet). Wireless networks are many and diverse but are frequently categorized into three groups based on their coverage range: Wireless Wide Area Networks (WWAN), Wireless Local Area Network (WLANs), Wireless Personal Area Network (WPAN )and etc.

The implementation of privilege access control, role-based access control and logical access control which all leverage on tackling insider threats, closely monitoring and managing all administrative activities performed on information systems. Their functionality is based on provision and denying of access to commands and items on the basis of authentication, identification and appropriateness.

K.6.5 [Management of Computing and Information Systems]: Security and Protection – Access Controls, Authentication, information flow controls, invasive software.

Access control to the main function and that is to control the members of the network LAN to use the data from the area. LAN users do what they can access resources on a system; they specify what activities it offers management. For example, there are several sections of a company; Marketing, IT marketing and accounts of the users do not need access to the data by the IT department and so on.