Question

Explain discretionary access controls (DACs) and nondiscretionary access controls (NDACs)

Answer 1

Explain discretionary access controls (DACs) and nondiscretionary access controls (NDACs)

Discertionary Access Contorls (DACs)

It is a type of security acess control that grants or restricts object access via access policy detrmined by an object's owner and group subjects. DAC mechanism controls are defined by the user indentification with suppiled credentials during authentication, such as username and password. DACs are discertionary because the subject (owner) can transfer authenticated objects or information access to other users. In other words detrmines object access privileges.

In DAC, each system object (file or data object) has an owner, and each initial object owner is the subject that causes its creation. Thus, an object's access policy is determined by its owner. A typical example of DAC is Unix file mode, which defines the read, write and execute permissions in each of the three bits for each user, group and others.

DAC attributes include:

User may transfer object ownership to another user(s).

User may determine the access type of other users.

After several attempts, authorization failures restrict user access.

Unauthorized users are blind to object characteristics, such as file size, file name and directory path.

Object access is determined during access control list (ACL) authorization and based on user identification and/or group membership.

DAC is easy to implement and intuitive but has certain disadvantages, including:

Inherent vulnerabilities (Trojan horse)

ACL maintenance or capability

Grant and revoke permissions maintenance

Limited negative authorization power

Nondiscretionary Access Controls (NDACs) :

Non Discretionary Access Control include Role Based Access Control (RBAC) and Rule Based Access Control (RBAC or RuBAC). RABC being a subset of NDAC, it was easy to eliminate RBAC as it was covered under NDAC already. Some people think that RBAC is synonymous with NDAC but RuBAC would also fall into this category. Non-Discretionary Access Control, this is probably one of the most demanded and successful technologies utilized in access control systems. Not only is it popular among households, but has also created waves across the business world.

In this figure it is represent the RUBAC structure of NDACs.

Examples:

At Stor-Guard, we strive to make self-storage facilities secure. Therefore, offer a range of access control systems, door alarms, keypads, fingerprint readers and scanners, and other password-protected security solutions.