Matches in DBpedia 2014 for { <http://dbpedia.org/resource/Mandatory_access_control> ?p ?o. }
Showing items 1 to 50 of
50
with 100 items per page.
- Mandatory_access_control abstract "In computer security, mandatory access control (MAC) refers to a type of access control by which the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target. In practice, a subject is usually a process or thread; objects are constructs such as files, directories, TCP/UDP ports, shared memory segments, IO devices etc. Subjects and objects each have a set of security attributes. Whenever a subject attempts to access an object, an authorization rule enforced by the operating system kernel examines these security attributes and decides whether the access can take place. Any operation by any subject on any object will be tested against the set of authorization rules (aka policy) to determine if the operation is allowed. A database management system, in its access control mechanism, can also apply mandatory access control; in this case, the objects are tables, views, procedures, etc.With mandatory access control, this security policy is centrally controlled by a security policy administrator; users do not have the ability to override the policy and, for example, grant access to files that would otherwise be restricted. By contrast, discretionary access control (DAC), which also governs the ability of subjects to access objects, allows users the ability to make policy decisions and/or assign security attributes. (The traditional Unix system of users, groups, and read-write-execute permissions is an example of DAC.) MAC-enabled systems allow policy administrators to implement organization-wide security policies. Unlike with DAC, users cannot override or modify this policy, either accidentally or intentionally. This allows security administrators to define a central policy that is guaranteed (in principle) to be enforced for all users.Historically and traditionally, MAC has been closely associated with multi-level secure (MLS) systems. The Trusted Computer System Evaluation Criteria (TCSEC), the seminal work on the subject which is often referred to as the "Orange Book", defines MAC as "a means of restricting access to objects based on the sensitivity (as represented by a label) of the information contained in the objects and the formal authorization (i.e., clearance) of subjects to access information of such sensitivity". Early implementations of MAC such as Honeywell's SCOMP, USAF SACDIN, NSA Blacker, and Boeing's MLS LAN focused on MLS to protect military-oriented security classification levels with robust enforcement. Originally, the term MAC denoted that the access controls were not only guaranteed in principle, but in fact. Early security strategies enabled enforcement guarantees that were dependable in the face of national lab level attacks.More recently, with the advent of implementations such as SELinux (incorporated into Linux kernels from 2.6), Mandatory Integrity Control (incorporated into Windows Vista and newer), and mandatory schemes derived from the FreeBSD MAC Framework in OS X, iOS, and Junos, MAC has started to become more mainstream and is evolving out of the MLS niche. These more recent MAC implementations have recognized that the narrow TCSEC definition, focused as it was on MLS, is too specific for general use. These implementations provide more depth and flexibility than earlier MLS-focused implementations, allowing (for example) administrators to focus on issues such as network attacks and malware without the rigor or constraints of MLS systems.".
- Mandatory_access_control wikiPageExternalLink 442870.aspx.
- Mandatory_access_control wikiPageExternalLink citation.cfm?id=2428616.2430732.
- Mandatory_access_control wikiPageExternalLink security-policy.pdf.
- Mandatory_access_control wikiPageExternalLink virtualizationAsAnAntivirus.
- Mandatory_access_control wikiPageExternalLink paperF1.htm.
- Mandatory_access_control wikiPageExternalLink ottawa01-abs.cfm.
- Mandatory_access_control wikiPageID "879900".
- Mandatory_access_control wikiPageRevisionID "592352097".
- Mandatory_access_control hasPhotoCollection Mandatory_access_control.
- Mandatory_access_control subject Category:Computer_access_control.
- Mandatory_access_control subject Category:Computer_security_models.
- Mandatory_access_control subject Category:Operating_system_security.
- Mandatory_access_control type Assistant109815790.
- Mandatory_access_control type CausalAgent100007347.
- Mandatory_access_control type ComputerSecurityModels.
- Mandatory_access_control type LivingThing100004258.
- Mandatory_access_control type Model110324560.
- Mandatory_access_control type Object100002684.
- Mandatory_access_control type Organism100004475.
- Mandatory_access_control type Person100007846.
- Mandatory_access_control type PhysicalEntity100001930.
- Mandatory_access_control type Whole100003553.
- Mandatory_access_control type Worker109632518.
- Mandatory_access_control type YagoLegalActor.
- Mandatory_access_control type YagoLegalActorGeo.
- Mandatory_access_control type Genre.
- Mandatory_access_control type MusicGenre.
- Mandatory_access_control type TopicalConcept.
- Mandatory_access_control type Concept.
- Mandatory_access_control comment "In computer security, mandatory access control (MAC) refers to a type of access control by which the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target. In practice, a subject is usually a process or thread; objects are constructs such as files, directories, TCP/UDP ports, shared memory segments, IO devices etc. Subjects and objects each have a set of security attributes.".
- Mandatory_access_control label "Contrôle d'accès obligatoire".
- Mandatory_access_control label "Mandatory Access Control".
- Mandatory_access_control label "Mandatory Access Control".
- Mandatory_access_control label "Mandatory Access Control".
- Mandatory_access_control label "Mandatory access control".
- Mandatory_access_control label "Мандатное управление доступом".
- Mandatory_access_control label "強制アクセス制御".
- Mandatory_access_control sameAs Mandatory_access_control.
- Mandatory_access_control sameAs Mandatory_Access_Control.
- Mandatory_access_control sameAs Contrôle_d'accès_obligatoire.
- Mandatory_access_control sameAs Mandatory_Access_Control.
- Mandatory_access_control sameAs 強制アクセス制御.
- Mandatory_access_control sameAs Mandatory_Access_Control.
- Mandatory_access_control sameAs m.03l604.
- Mandatory_access_control sameAs Q1888932.
- Mandatory_access_control sameAs Q1888932.
- Mandatory_access_control sameAs Mandatory_access_control.
- Mandatory_access_control wasDerivedFrom Mandatory_access_control?oldid=592352097.
- Mandatory_access_control isPrimaryTopicOf Mandatory_access_control.