Chapter 10 Flashcards
1
Q
access control model
A
Specifies methodologies by which admission to physical
areas and, more importantly, computer systems, is managed and organized.
2
Q
discretionary access control (DAC)
A
access control policy generally determined by
the owner.
3
Q
Trusted Computer System Evaluation Criteria (TCSEC)
A
A DoD standard that sets basic
requirements for assessing the effectiveness of computer security access policies.
4
Q
role-based access control (RBAC)
A
An access model that works with sets of permissions,
instead of individual permissions that are label-based.
5
Q
least privilege
A
When a user is given only the amount of privileges needed to do his job.
6
Q
CAPTCHA
A
A type of challenge-response mechanism used primarily in websites to tell
whether or not the user is human.
