2. Say if the following statements are True or False.

1) Physical devices can’t be considered as a part of access control.

2) Subjects and objects in access control models are human users.

3) The choice of the access control mechanism depends on one of the three approaches.

4) The centralized administration is characteristic of the mandatory approach.

5) We can find different examples of access control in our everyday life.

Vocabulary

3. Find English equivalents of the following phrases in the text.

1) аутентификация

2) цифровая подпись

3) шифрование

4) по умолчанию

5) вредоносные программы

6) control mechanisms механизмы контроля доступа

7) быть оснащенным чем-либо

8) укреплять контроль

9) control избирательное управление доступом

10) мандатное (принудительное) управление доступом

4. Match the words 1-7 with the definitions a-g.

1) audit a) something that exists as a particular

and discrete unit

2) entity b) an often official examination of records

or financial accounts to check their accuracy

3) to equate c) relating to classified information

4) malware d) software that is written and

distributed for malicious purposes,

such as impairing computer systems

5) to grant e) to use (influence, authority)

forcefully or effectively

6) to exert (control) f) to make or regard as equivalent or

similar

7) sensitive g) to give permission or consent; allow

5. Find the words in the text which have the similar meaning to the words below.

1) secret or concealed

2) to execute, carry out

3) by means of

4) occurrence

5) resulting from

6) to decline or forbid

7) to have a connection

8) to include

9) basically

10) control or ownership

6. Read the text below and choose the best option for each gap. Access Control Models

Access control models are sometimes (1) ……………….. as either discretionary or non-discretionary. The three most widely recognized models are Discretionary Access Control (DAC), Mandatory Access Control (MAC), and Role Based Access Control (RBAC). MAC and RBAC are both non-discretionary.

Discretionary access control (DAC) is an access policy determined by the (2) …………… of an object. The owner decides who is allowed to access the object and what privileges they have. Two important concepts in DAC are file and data ownership: every object in the system has an owner. In most DAC systems, each object's (3) …………… owner is the subject that caused it to be created. The access policy for an object is determined by its owner.

Access rights and permissions are the controls that an owner can (4) …………….. to other subjects for specific resources. Access controls may be discretionary in ACL-based or capability-based access control systems. (In capability-based systems, there is usually no explicit concept of ‘owner’, but the creator of an object has a similar degree of control (5) …………. its access policy.)

Mandatory access control refers to allowing access to a resource if and only rules exist that allow a given user to access the resource. Management is often simplified (over what can be required) if the information can be protected using hierarchical access control, or by implementing sensitivity (6) ……………. What makes the method "mandatory" is the use of either rules or sensitivity labels. In such a system subjects and objects must have labels assigned to them. A subject's sensitivity label specifies its level of trust. An object's sensitivity label specifies the level of trust required for access. In order to access a given object, the subject must have a sensitivity level equal to or (7) ………….. than the requested object.

Role-based access control (RBAC) is an access policy determined by the system, not the owner. RBAC is used in commercial applications and also in military systems, where multi-level security requirements may also exist. RBAC (8) ……………….. DAC in that DAC allows users to control access to their resources, while in RBAC access is controlled at the system level, outside of the user's control. Three primary rules are defined for RBAC:

-Role assignment: a subject can execute a transaction only if the subject has been selected or assigned a role.

-Role authorization: a subject's active role (9) …………… be authorized for the subject. With rule one above, this rule ensures that users can take on only roles for which they are authorized.

-Transaction authorization: a subject (10) …………. execute a transaction only if the transaction is authorized for the subject's active role. With rules one and two, this rule ensures that users can execute only transactions for which they are authorized.

1. a) divided b) categorized c) described

2. a) holder b) proprietor c) owner

3. a) initial b) final c) primary

4. a) assign b) delegate c) designate

5. a) above b) over c) on

6. a) labels b) stickers c) brands

7. a) more high b) highest c) higher

8. a) is different of b) differs from c) varies

9. a) should b) must c) mustn’t

10. a) must b) might c) can

7. Look at the following examples from the text:

The owner decides who is allowed to access the object.

RBAC is used in commercial applications and also in military systems, where multi-level security requirements may also exist.

In most DAC systems, each object's initial owner is the subject that caused it to be created.

Complete the following sentences with who, that, which or where:

a) Digital TV is something ………… we can communicate with.

b) A TV studio is a place ……………. they make programs.

c) Digital TV systems send only the parts of the picture …………. change.

d) But they send a lot of pictures of people ………. are walking or cars ………. are moving.

8. Prepare a short presentation about different access control models and principles of their work.