In the fields of physical security and information security, access control (AC) is the selective restriction of access to a place or other resource. The act of accessing may mean consuming, entering, or using. Permission to access a resource is called authorization.

1. ACCESS CONTROL
 BY : MOHIBULLAH SAAIL
 REG NO SU-15-01-002-123
 SECTION “A”
 CS-IT

2. AGENDA
 Access control
 Physical access
 Logical access
 Categories
 Control

3. OVERVIEW
 Protecting what needs to be protected with the
available technologies.
 Access control is the heart of information security.

4. Some Questions
 What is access?
 What is the access mechanism?
 What is access control?
 The right
 Flow of information between subject and object
 Mechanism to protect the assets

5. Physical Access
Physical access is a term in computer
security that refers to the ability of people
to physically gain access to a computer
system.

6. Logical Access
logical access controls are tools and
protocols used for identification,
authentication, authorization, and
accountability in computer information
systems.

7. Categories
 Identification
 Authentication
 Authorization

8. Identification
 Method of establishing the subject’s identity.
-User, Program, Process
 Use of username or other public information.
 Identification component requirements.
-Each value should be unique
-Follow a standard naming scheme
-Non descriptive of the user’s position or task
-Must not be shared between users.

9. Authentication
 Method of Proving the identity
 How to prove an identity?
-something you know
-something you have
-something you are
 Use of Passwords, tokens, or biometrics other
private information

10. Authorization
Authorization is the function of
specifying access
rights/privileges to resources
related to information security
and computer security in general
and to access control in
particular.
to authorize is to define an
access policy.

11. Controls
 controls are safeguards or countermeasures to
avoid, detect, counteract, or minimize security risks
to physical property, information, computer systems,
or other assets. They can be classified by several
criteria.

12. Types Of Controls
 Three types of control
-Administrative controls
Define Rules, responsibilities, policies and
administrative functions To manage the control
environment.
 Technical control
Use hardware and software technology to
implement access control.
 Physical Control
Ensure Safety and security of the physical
environment.

13. References
 “Information Security: Principles and Practices”
by Mark S Merkow and Jim Breithaupt
 Wikipedia
 Google Images

14. Thank you!
ANY QUERIES?