Wrap-up

Let’s wrap up what you have learned.

• Any access to resources using an identity should be authenticated, and beyond that authentication, we need ongoing authorization. This is needed to enforce security and accounting with each attempt to use a privilege, whether the attempt is successful or not. The security kernel ensures ongoing authorization for all transactions within an operating system. This security kernel model is common to all modern operating systems.

• A number of access control models exist within discretionary access control, mandatory access control, and role-based access control. Role-based access control remains the most popular. DAC, MAC, and RBAC are the most commonly known models. Attribute-based access control is the next-generation access control model, and is gaining in popularity.