© fandijki/ShutterStock, Inc.

CHAPTER
5

Access Control in the Enterprise

ACCESS CONTROL AND AUTHENTICATION within an enterprise is a large-scale problem with multiple solutions. Each enterprise has its own way of handling it, depending on the risk associated with the information and activities on the network. The higher the risk of an attacker entering an organization and seeing or removing information, the more constraints the enterprise will put on users. An organization that maintains a large amount of credit card information or personally identifiable information (PII) on its customers will sustain a higher impact if that information is removed or accessed illicitly. Corporations are now required to let a third party know when certain information has been compromised within their systems. The reaction to this breach in information may stop people or other enterprises from doing business with them.

Chapter 5 Topics

This chapter covers the following topics and concepts:

  • Access control lists (ACLs) and access control entries (ACEs)
  • Which access control models are common in enterprise environments
  • Authentication factors and the risks associated with them
  • What Kerberos is and how it works
  • How Layer 2 and Layer 3 access controls protect the network
  • Which access controls are associated with wireless local area networks (WLANs)
  • What single sign-on is and how to use it
  • Which best practices help you implement access controls in an enterprise environment
  • Case studies and examples

Chapter 5 Goals

When you complete this chapter, you will be able to:

  • Understand how ACLs and ACEs are related and how to use them
  • Identify mandatory access control (MAC), discretionary access control (DAC), role-based access control (RBAC), and attribute-based access control (ABAC), and other models
  • Understand authentication factors and the strengths and weaknesses of something you know, something you have, and something you are
  • Understand Kerberos, the Kerberos-trusted Key Distribution Center (KDC), the Kerberos Ticket-Granting Service (TGS), and the Kerberos Authentication Service
  • Identify Layer 2 and Layer 3 techniques for controlling network access
  • Implement security for a WLAN infrastructure
  • Plan for single sign-on access control
  • Apply best practices to access control implementation in an enterprise environment
  • Apply lessons learned from case studies to real-world situations
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.225.55.198