Access Control Fundamentals

12. Access Control Models

Introduction

• An access control model is a framework that dictates how subjects access objects.
• It uses access control technologies and security mechanisms to enforce the rules and objectives of the model.
• There are three main types of access control models:
  • Discretionary,
  • Mandatory, and
  • Nondiscretionary (also called role-based).