Different systems for data protection Flashcards

Question

What is dynamic separation of duty?

Answer 1

RBAC 2 restriction of permissions exercized by user in a session

Answer 2

designed for simple systems not context aware only permissions based on roles (can lead to role explosion) always needs attention from administration role design difficult and expensive

Answer 3

Access control where many attributes for users, objects, operations, and context are evaluated against policy to see permission

Answer 4

Usage control system to combine access control, trust management, and DRM attribute & context-based authorizations Control before & during usage life time

Answer 5

Data subject -> his data Data controller -> decide data purpose and methods Data processor -> processes data Person in charge of processing Data recipient -> entity whom data is disclosed to Third party -> gets data outside subject, controller, or processor Data protection authority

Answer 6

Fair & lawfull processing -> do not intrude privacy or interfere with autonomy Purpose specification -> collect and use data for specific purpose consent -> only if explicit consent minimality -> minimum collected, processed, and time for purpose minimal disclosure -> restrict third parties info quality -> accurate, relevant and complete data subject control -> subject can check and influence data sensitivity -> sensitive data stricter info security -> security equal to risk of data

Answer 7

Subject object action purpose condition obligation

Answer 8

Data bases that incorporate privacy protection by linking purpose and consent to data Focus on limited actions performed

Answer 9

Privacy policy table -> purpose, table, attribute, {external-recipients}, retention privacy authorization table -> purpose, table, attribute, {authorized-users}

Answer 10

Access control based on if the intended purpose of collected data matches the access purpose of request With the addition of conditions matching (certain time or location)

Answer 11

Privacy control model for organizations to: enforce privacy promises made to user Detect privacy violations safe transfers of policy protected data

Answer 12

Vocabulary containing: Hierarchy of users, purposes, data, actions model for obligations Set of rules made up from the vocabulary: a [user] should be [allow or deny] the ability to perform [action] on [data] For [purpose] under [condition] yielding an [obligation]

Answer 13

It adds details to existing policy but does not change any rulings except if it was a scope_error or don't care Obligations can be made additions to but should be stated explicitly

Answer 14

A language to express access control policies, access requests, and responses Uses ABAC Can use RBAC for permissions

Answer 15

Policy administration point _> makes policy Context handler -> constructs XACML request for decision point policy decision point -> evaluates applicable policy and makes authorization decision policy enforcement point -> perform access control by making decision requests and enforcing authorization decisions policy information point -> acts as source of attribute values

Answer 16

1. deny 2. I {DP} ◦ if one has I {DP} ◦ if one I {D} and one P or I { P } 3. I { D } 4. P 5. I {P}

Answer 17

1. p 2. I {P D} ◦ If one has I {P D} ◦ if one I {P} and one D or I {D} 3. I {P} 4. D 5. I {D}

Answer 18

If in the operator table you see that the combined sets have the same outcomes as columns

Different systems for data protection Flashcards

(43 cards)