1 of 5

Access Control

Introduction to Access Control

​

Adam Doupé

Arizona State University

​

https://pwn.college

2 of 5

Example

  • A university’s academic integrity policy disallows cheating
    • Includes copying homework, with or without permission
  • CSE class has students do homework on a shared server (similar to general.asu.edu)
  • Student A forgets to read-protect homework file
  • Student B copies the file
  • Who did something wrong?

2

3 of 5

Authorization

  • What can you do on the system?
  • Vs. Authentication (we will cover later)
    • Who are you?

3

4 of 5

Authorization, Trust, and Risk

  • Need to manage
    • Authorization
    • Trust
  • To manage risk
    • Can you eliminate risk?

4

5 of 5

Authorization vs. Access Control

  • Authorization is the policy
  • Access Control is the mechanism

5