PAGE 01
Access control is a security
mechanism that regulates who can
access resources and how.
It involves managing permissions
for subjects (such as users or
processes) to interact with objects
(such as files or systems) within an
organization's infrastructure.
This ensures that sensitive information
and critical systems are protected
from unauthorized access.
PAGE 02
1. 2.
CAPABILITY-BASED ACCESS CONTROL LISTS
ACCESS CONTROL (ACLS)
Capability-Based Access ACLs utilize a list
Control assigns tokens associated with each
(called capabilities) to object, specifying which
users that define their users or groups have
access rights permission to access that
object and what actions
E.g: Specific tokens for a they can perform.
Company shared drive to
open or edit the file E.g: Company Shared
Drive; Only certain users
can edit the file.
PAGE 03
3 4
ROLE-BASED ACCESS MANDATORY ACCESS
CONTROL (RBAC): CONTROL (MAC):
assigns roles to users, and enforces strict policies set
each role has predefined by a central authority, where
access permissions to specific access decisions are based
resources or actions. on classifications (e.g., Top
Secret, Confidential).
E.g: A user assigned the
"Manager" role can view and E.g: A file labeled "Top
approve employee reports, Secret" can only be
while a user with the accessed by users with "Top
"Employee" role can only Secret" clearance—users
submit reports. cannot change their own
access rights.
PAGE 03
The four core pillars of authentication are:
Identification
Authentication
Authorization
Accountability
PAGE 04
Identification is the first step in access control, where a
user claims an identity, often through usernames or
IDs. It's essential that this claim is credible, as the entire
authentication process depends on accurately
asserting a user's identity. Proper identification lays the
groundwork for subsequent authentication actions.
Example: Entering a unique username specifically
given to you.
PAGE 05
Authentication involves verifying the identity claimed by a user through various methods. Common
techniques include passwords, which must be complex and kept secret; biometrics, using unique
physical attributes (like fingerprints or facial recognition); and two-factor authentication, which adds
an extra layer by requiring a second form of verification.
Authentication Factors:
Something you know (E.g: Password)
Something you have (E.g: Smart card or Security token)
Something you are (E.g: Fngerprint or unique human characteristics)
Where you are (E.g: Isnide or outside a comapny’s firewall)
PAGE 06
Authorization is the process of determining whether an
authenticated user or system has the right permissions
or privileges to access specific resources or perform
certain actions. It governs what a user is allowed to do
after their identity has been verified through
authentication.
Example:
A user logs into a system (authentication), but
whether they can read, write, or delete a file
depends on their authorization level.
PAGE 07
Accountability in access control refers to the
tracking of user actions within a system.
Through logging and monitoring of user
activities, organizations can ensure
compliance with security policies, detect
unauthorized actions, and have the ability to
audit access and usage patterns. This is vital
for maintaining a secure environment and
can be crucial for forensic analysis.
Example: When a user logs into a corporate
network, the system records the login time,
IP address, and duration of the session.
PAGE 08
Auth0 is a powerful identity and access
management platform that provides
authentication and authorization services for
web, mobile, and desktop applications,
These are the functions:
1. USER AUTHENTICATION:
IT ENABLES SECURE LOGIN AND SIGNUP AND
SUPPORTS USERNAME/PASSWORD, SOCIAL
LOGINS, IT ALSO SUPPORTS MULTI-FACTOR
AUTHENTICATION (MFA)
PAGE 10
Auth0 is a powerful identity and access
management platform that provides
authentication and authorization services for
web, mobile, and desktop applications,
These are the functions:
2. AUTHORIZATION:
IT CONTROLS WHAT USERS CAN DO OR ACCESS
AFTER LOGGING IN AND IMPLEMENTS ROLE-
BASED ACCESS CONTROL (RBAC) AND ATTRIBUTE-
BASED ACCESS CONTROL (ABAC)
PAGE 11
Auth0 is a powerful identity and access
management platform that provides
authentication and authorization services for
web, mobile, and desktop applications,
These are the functions:
SINGLE SIGN-ON (SSO)
LETS USERS LOG IN ONCE AND ACCESS MULTIPLE
APPS WITHOUT LOGGING IN AGAIN
BENEFITS:
SIMPLIFIES USER EXPERIENCE (FEWER
PASSWORDS)
REDUCES PASSWORD FATIGUE AND LOGIN
ERRORS
CENTRALIZED CONTROL OVER AUTHENTICATION
BETTER SECURITY THROUGH ONE MANAGED
PAGE 12
ENTRY POINT
Authentication and access control are essential components of information security.
Effective management of subjects and objects, along with a clear understanding of the
pillars of authentication—identification, authentication methods, and accountability—
ensures that resources remain protected against unauthorized access and enhances
organizational security.
PAGE 13
YOU!
YOU!
GROUP MEMBERS:
ATIF AZIZ
JIYA ASSNANI
PAGE 14
HAMMADULLAH MAGSI