expand for answer

Separation Of Privilege

The principle that builds on the principle of least privilege. It requires the use of granular access permissions—that is, different permissions for each type of privileged operation. This allows designers to assign some processes rights to perform certain supervisory functions without granting them unrestricted access to the system.


Similar items:
Focuses on security and encryption to prevent unauthorized copying limit distribution to only those who pay. This is considered firstgeneration DRM. Secondgeneration DRM covers description, identification, trading, protection, monitoring and tracking of all forms of rights usages over both tangible and intangible assets including management of rights holders’ relationships. It is important to note that DRM manages all rights, not just those involving digital content. Additionally, it is important to note that DRM is the “digital management of rights” and not the “management of digital rights. ” That is, DRM manages all rights, not only the rights applicable to permissions over digital content.
[view]
A combination of rights and permissions. Rights refer to actions a user can perform on a system such as changing the system time. Permissions refer to the level of access a user is granted to data such as read, write, modify, and delete.
[view]
Also called permissions or privileges, these are the rights granted to users by the administrator or supervisor. These permissions can be read, write, execute, create, delete, etc.
[view]
A protocol used to assign TCP/IP configuration settings to systems upon bootup. DHCP uses UDP port 67 for server point- to-point response and port 68 for client request broadcast. DHCP supports centralized control and management of network addressing. DHCP is an industry standard protocol used to dynamically assign IP addresses to network devices.
[view]
A security technique in which two or more entities separately hold data items that individually convey no knowledge of the information that results from combining the items. A condition under which two or more entities separately have key components that individually convey no knowledge of the plaintext key that will be produced when the key components are combined in the cryptographic module. Separation of data or information into two or more parts, each part constantly kept under control of separate authorized individuals or teams so that no one individual or team will know the whole data. The specific application of the ideas of separation of duties and two-man control into a single solution. The basic idea is that the information or privilege required to perform an operation is divided among multiple users. This ensures that no single person has sufficient privileges to compromise the security of the environment.
[view]


There are no comments yet.

Authentication required

You must log in to post a comment.

Log in