Title: Class Outline 3
Course: KVCC BUS214 > Section: Class Outlines

1.      General Attack Strategies

a.      Reconnaissance

b.      Breach

c.      Escalate Privileges

d.      Stage

e.      Exploit

2.      General Defense Strategies

a.      Layering

b.      Principle of least privilege

c.      Variety

d.      Randomness

e.      Simplicity

Module 2

1.      Access Control

a.      Three entities

a.      Objects

b.      Subjects

c.      System

b.      Processes

a.      Identification

b.      Authentication

c.      Authorization

d.      Auditing

c.      Controls

a.      Preventive Access Controls

b.      Detective Access Controls

c.      Corrective Access Controls

d.      Deterrent Access Controls

e.      Recovery Access Controls

f.       Compensative Access Controls

d.      Classification based on restrictions

a.      Administrative

b.      Technical

c.      Physical

e.      Access Control Models

a.      Mandatory Access Control (MAC)

i.           Labels

1.      Classification Labels

2.      Clearance Labels

3.      Alignment

4.      Access control is mandatory

b.      Discretionary Access Control (DAC)

i.           Discretionary Access Control List

ii.           Can pass permissions on to others

c.      Role Based Access Control (RBAC)

i.           Roles defined by job description

d.      Rule Set-Based Access Control (RSBAC)

i.           Examining characteristics

e.      Federated Access Control

i.           Federated Identity Management

Attached Files: | - KVCC BUS214_InfoSystemsSecurity_Outline 3.pdf