Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
Chapter 11
| Term | Definition |
|---|---|
| access control | mechanism used in an information system for granting or denying approval to use specific resources |
| ACL | a set of permissions that is attached to an object |
| access control model | predefined framework found in hardware and software that a custodian can use for controlling access |
| account expiration | the process of setting a user's account to expire |
| DAC | least restrictive access control model in which the owner of the object has total control over it |
| XTACACS | 2nd version of the TACACS authentication service |
| group policy | a microsoft wondows feature that provides centralized management and configuration of computers and remote users |
| implicit deny | rejecting access unles a condition is met |
| job rotation | the act of moving individuals from one job responsibility to another |
| Kerberos | authentication system developed by the MIT and used to verify the identity of networked users |
| LDAP injection attack | attack that constructs LDAP statements based on user input statements, allowing the attacker to retrieve info from the LDAP database or modify its content |
| least privilege | providing only the minimum amount of privileges necessary to perform a job or function |
| LDAP | protocol for a client application to access an X.500 directory |
| MAC | the most restrictive access control model, typically found in military settings in which security is of supreme importance |
| Mandatory vacations | requiring that all employees take vacations |
| RADIUS | an industry standard authentication service with widespread support across nearly all vendors of networking equipment |
| RBAC | a real world access control model in which access is based on a user's job function within the organization |
| RBAC | an access control model that can dynamically assign roles to subjects based on a set of rules defined by a custodian |
| Secure LDAP | transporting LDAP traffic over SSL or TLS |
| SAML | an XML standard that allows secure web domains to exchange user authentication and authorization data |
| separation of duties | the practice of requiring that processes should be divided between 2 or more individuals |
| TACACS+ | current version of the TACACS authentication service |
| TACACS | an authentication service commonly used on UNIX devices that communicates by forwarding user authentication infomation to a centralized server |
| time-of-day restriction | Limitation imposed as to when a user can log in to a system or access resources |
Created by:
JacobAntholz
Popular Math sets