cisco certification list

cisco certification list.DAC simpler than other models Attackers can circumvent security policies; does not support centralized controlMAC allows tight control over information flow Complex to manageRBAC is scalable and easy to manage Increased role definitionABAC is more flexible and complex than DAC or RBAC4.8 Access Control Models 1934.8.1 The DAC ModelWhen the DAC model is used, each resource has a clearly identified owner. For example, the user who creates a file will be the owner of that file. It is up to the owner of the resource to decide whether to allow other users or subjects to access the resource. Owner "owning" is a key feature of DAC. In fact, when assigning permissions, the owner should comply with the security system of the unit, but the operating system does not automatically satisfy the provisions of the security system. When the owner allows different users to access the resource, different access rights (e.g., read, write, or execute rights) are set for different users.Multiple users can also be grouped when the DAC model is used. Owners can grant access to resources to entire groups of users rather than to individual users. In addition, permission attributes can be assigned to resources for specific groups. Enabling access control lists tied to each guest is a simple way to implement the DAC model. The DAC model is used by most commercial operating systems in use today.One of the major disadvantages of using the DAC model is that the security policy is determined by the owner of the data and is "out of reach" of the security administrator. In addition, as the number of subjects (users, processes, programs, etc.) accessing objects increases, it becomes very difficult to continue to maintain object privileges on a need-to-know and least privilege basis. Authorization creep or privilegecreep describes a phenomenon that is very common in some large enterprises, where privileges are assigned to users and then never recalled, even when they are no longer needed, in violation of the principles of need-to-know and least privilege assignment.Tip: Permission creep occurs regardless of the access control model used, and can occur frequently in enterprises with a non-autonomous access control model, and even more often in enterprises with an autonomous access control model. The best way to avoid privilege creep is to act in accordance with account lifecycle and management best practices, which are explored in depth in Chapter 5.