7. Access Control

Question 1

What are authentication and authorization?

Answer 1

• Authentication: principal proofs that he is who he claims to be
• Authorization: determines who is authorized to access a particular
  object how

Question 2

What is Access Control?

Answer 2

Access control controls which subjects have which form of access rights to which objects in a system.
- Subjects are entities capable of accessing objects: e.g., users, processes,
machines,…
- Objects are resources to which access is controlled: e.g., files, programs, ports, processes,…
- Rights describe the way in which a subject may access an object: e.g., read, write, execute, append…