The most common system access control type of access control determines the authorized activities of legitimate users, mediates each attempt to access resources in the system, and unauthorized users access the system It prevents it from doing. It requires unique user identification, emergency access procedures, automatic logout, and data encryption and decryption. Common types of access control include user-based, role-based, and context-based access control with the most powerful security of context-based access control.
In traditional hop-by-hop systems, access control is based on a set of rules. Different parts of the system hold the data and they provide access based on a given set of rules. This rule set may be avoided by configuration errors or by misbehavior by external attackers or internal personnel. In such a system, it is necessary for you to trust because the data holder has full power. All security is based on conditionally selecting a trusted part of the system to process the data. We use tools, rules, and encryption techniques to enhance security, that is to exclude untrusted entities. Rules tend to be human error or malice. On the other hand, encryption is very resistant to these defects.
The purpose of a trusted computer system is to control access of subjects to objects. A security policy is an intentional description of the control required for data access. In order to effectively implement a reliable system, the security policy that it must implement must be static and accurately known. Security policies must accurately represent relevant laws, regulations, standards, and general policies. For example, the US Department of Defense (DoD) directive 5200.28 requires the protection of confidential documents contained in the ADP 10 system through continuous use of protection functions in hardware and software design and system composition. Process, save or use confidential data, generate confidential information with reasonable reliability, to prevent the following.
1) System access control Inventory management warehouse tracks inventory of automobile parts using M5 system. The system is managed by the fleet management department. During M5 implementation, user access control is not restricted and fleet management staff can access M5 inventory warehouse auto parts stock. During the testing process, we found cases where projects not managed by inventory were incorrectly adjusted by system management staff in the system.