Official (ISC)2 Guide to the SSCP CBK, 2nd Edition

Chapter 1

Access Controls

Paul Henry

Contents

Access Control Concepts

What Is a Subject?

Subject Group Considerations

What Is an Object?

Object Group Considerations

Discretionary Access Control

Rule Set–Based Access Controls

Role-Based Access Controls

Constrained User Interface

Content-Dependent Access Control

Context-Based Access Control

Temporal Isolation (Time-Based) Access Control

Nondiscretionary Access Control

Mandatory Access Control

Separation of Duties

Architecture Models

Bell–LaPadula

Biba

Clark–Wilson

Other Considerations of Clark–Wilson

Brewer–Nash: Chinese Wall

Identification, Authentication, Authorization, and Accountability

Identity (Who Is the Subject?)

Methods (User ID, PIN, Account Number)

Registration of New Users

Periodic ...