Posts Tagged Access Control

Types Of Data Security

Data security refers to a set of standards, protocols, and techniques that are focused on protecting personal or organizational data from intentional or accidental destruction, modification, and disclosure. Different technologies and techniques can be applied to ensure data security. These techniques include administrative controls, physical security, logical controls, organizational standards, etc.

In order to choose the right data security protocols, it is important to understand different types of data security.

Authentication: It is the process of validating a registered user’s identity before allowing access to protected data. It is used in conjunction with authorization; the process of validating that the authenticated user has been granted permission to access the requested resources. Authentication involves a combination of ways to identify a user, such as passwords, PINS, security tokens, a swipe card, or biometrics.

Access Control: Authentication and authorization happen through access control. It is a method of guaranteeing that users are whom they say they are and that they have the appropriate access. Access control systems can include-

  • Discretionary Access Control (DAC) assigns access rights based on user-specified rules.
  • Mandatory Access Control (MAC) assigns user access based on information clearance.
  • Role Based Access Control (RBAC) grants user access based on the user’s role and implements key security principles such as ‘least privilege’ and ‘separation of privilege’.
  • Attribute Based Access Control (ABAC) assigns a series of attributes to each resource and user. The user’s attributes such as time of day, position, location, etc. are assessed to make a decision on access to the resource.

Backups & Recovery: An efficient data security strategy requires a plan for how to access the organization’s data in the event of system failure, disaster, data corruption, or data breach. This puts an emphasis on regular data backups. It involves making a copy of the data and storing it off-site or in the cloud. Also, it is important to formulate proper recovery protocols.

Encryption: Data encryption involves the translation of data into another form, or code so that it is accessible only by the authorized personnel who have the decryption key. However, it is highly important to ensure the security of decryption keys, critical management systems, and off-site encryption backup.

Data Masking: This type of data security involves the masking of original data by obscuring letters or numbers with proxy characters. The data is changed back to its original form by software only when it is received by an authorized user.

Tokenization: In this case, sensitive data is substituted with random characters that cannot be reversed. The relationship between data and its token values is stored in a protected database lookup table.

For more information on types of data security, contact Centex Technologies at (254) 213 – 4740.

, , , , ,

No Comments

Types And Advantages Of Access Control

16 July, 2016

Access control can be defined as a security technique utilized to restrict access to the physical and logical assets within an organization. The physical assets include the computer system or server room whereas the logical assets comprise networks, data, files etc. Having complete control over who can view, use or manipulate the resources in a computing environment, the companies can mitigate the likelihood of a potential security breach.

Types Of Access Control Systems

  • Mandatory Access Control (MAC): This is the most stringent form of access control mechanism. In this, the access restrictions are monitored by the operating system according to the specifications provided by the system administrator. Each user or device on a network is assigned a classification label. When a user tries to view or edit any file on the server, the computer system verifies his credentials to determine if access should be granted.
  • Discretionary Access Control (DAC): It allows each user to control access rights for their own file or program. Unlike Mandatory Access Control, the DAC is much more flexible when it comes to data security. It allows you to create customized access policies for each user. For instance, you can allow read and write access to one user as well as read-only access to another one for the same file.
  • Role Based Access Control (RBAC): Also known as Non-Discretionary Access Control, it allows access depending upon the role of a user. Role is defined according to the job profile, responsibilities and authority of an employee within the organization. For instance, an accountant would be provided access to all the files that contain financial data.
  • Rule Based Access Control (RB-RBAC): Under this type, access is allowed on the basis of a set of criteria defined by the system administrator. It is a good option if you need to stipulate access rights for a specific account during certain hours of the day. The rules set by the administrator are stored in Access Control Lists (ACLs).

Advantages Of Access Control

  • It helps to increase data security and confidentiality in an organization
  • It reduces administrative work needed to monitor unauthorized access to important files
  • Access rights and protocols are easy to implement by the system administrator
  • Access control systems decrease the possibility of security errors as the permissions are automatically monitored and regulated according to the specified criterion

We at Centex Technologies provide complete IT security & networking solutions to our clients. For consultation regarding implementation of access control in your organization, feel free to contact us at (855) 375 – 9654.

,

No Comments