8 results ·
● Live web index
D
docs.cloud.google.com
article
https://docs.cloud.google.com/storage/docs/access-control
Cloud Storage offers two systems for granting users access your buckets and objects: IAM and Access Control Lists (ACLs). These systems act in parallel - in order for a user to access a Cloud Storage resource, only one of the systems needs to grant that user permission. For example, if your bucket's IAM policy only allows a few users to read object data in the bucket, but one of the objects in the bucket has an ACL that makes it publicly readable, then that specific object is exposed to the [...] Fine-grained: The fine-grained option enables you to use IAM and Access Control Lists (ACLs) together to manage permissions. ACLs are a legacy access control system for Cloud Storage designed for interoperability with Amazon S3. ACLs also allow you to specify access on a per-object basis. [...] In most cases, IAM is the recommended method for controlling access to your resources. IAM controls permissioning throughout Google Cloud and allows you to grant permissions at the bucket and project levels. You should use IAM for any permissions that apply to multiple objects in a bucket to reduce the risks of unintended exposure. To use IAM exclusively, enable uniform bucket-level access to disallow ACLs for all Cloud Storage resources.
I
ijisae.org
article
https://ijisae.org/index.php/IJISAE/article/view/5438
. Wang, Jian, Chunxiao Ye, and YangfeiOu. "Dynamic Data Access Control for Multi-Authority Cloud Storage." In 2019 IEEE 21st International Conference on High Performance Computing and Communications; IEEE 17th International Conference on Smart City; IEEE 5th International Conference on Data Science and Systems (HPCC/SmartCity/DSS), pp. 599-608. IEEE, 2019. [...] . Kayes, A. S. M., Wenny Rahayu, Tharam Dillon, Elizabeth Chang, and Jun Han. "Context-aware access control with imprecise context characterization for cloud-based data resources." Future Generation Computer Systems 93 (2019): 237-255.
. Sangeetha, M., P. Vijayakarthik, S. Dhanasekaran, and B. S. Murugan. "Fine grained access control using H-KCABE in cloud storage." Materials Today: Proceedings 37 (2021): 2735-2737. [...] ### Downloads
Download data is not yet available.
## References
. Khashan, Osama Ahmed. "Secure Outsourcing and Sharing of Cloud Data Using a User-Side Encrypted File System." IEEE Access 8 (2020): 210855-210867.
. Sukmana, Muhammad IH, Kennedy A. Torkura, Hendrik Graupner, Feng Cheng, and Christoph Meinel. "Unified cloud access control model for cloud storage broker." In 2019 International Conference on Information Networking (ICOIN), pp. 60-65. IEEE, 2019.
N
nvlpubs.nist.gov
official
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-210.pdf
its collaborative activities with industry, government, and academic organizations. Abstract This document presents cloud access control characteristics and a set of general access control guidance for cloud service models: IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service). Different service delivery models require managing different types of access on offered service components. Such service models can be considered hierarchical, thus the access [...] arbitrary software, including operating systems and applications. The consumer may in turn have control over virtual storage, virtualized network components, and the ability to deploy their own VMs and applications given access provisioned by the cloud service provider. The shared responsibility of access control needs to be considered in the PaaS and SaaS model ; For example software developers might need to access data in systems provided by PaaS for their developmental needs, and internal [...] access to its data by specifying security classes for the SCA to keep the data provider and the cloud host synchronized in determining the access right of data. For example, in a Bell-LaPadula model , assuming a patient’s report is written by a doctor with confidential clearance, the report can only be read by a host with the same or higher security clearance. Additionally, when multiple data sources that are not intended to be accessed in the same cloud system are accessed, the privacy of data
P
prodatakey.com
news
https://www.prodatakey.com/single-post/choosing-a-cloud-based-access-control-…
Privacy concerns are at the forefront of challenges faced by organizations implementing cloud-based access control systems. The primary areas of concern revolve around how data is stored and accessed within these systems. When it comes to data storage, organizations must be vigilant about where their sensitive information is physically located. This is particularly crucial for companies operating in regions with strict data sovereignty laws. Ensuring that data is stored in compliant locations [...] When evaluating cloud-based access control systems, robust security features should be at the top of your priority list. Look for systems that offer end-to-end encryption to protect data during transmission, similar to the security measures used in banking systems. This ensures that sensitive information remains confidential as it travels between the cloud and your on-site devices. [...] Cloud-based access control differs from traditional systems by utilizing cloud computing technology for remote management, real-time updates, and greater flexibility, while traditional systems rely on on-site servers and hardware for data storage and operation. This allows cloud-based systems to require less hardware and offer more scalability and integration capabilities.
#### How secure are cloud-based access control systems?
H
handytrac.com
article
https://www.handytrac.com/access-control-cloud-data-protection
–STANDARD TOUCH
–PREMIUM TOUCH
Access control is a fundamental aspect of data protection in cloud computing. By implementing robust access control measures, organizations can protect sensitive data, comply with regulations, and mitigate security risks. As technology evolves, staying informed about the latest access control solutions and best practices will be crucial for maintaining data security in the cloud. [...] 3. Context-Aware Access Control (CAAC): This approach adapts access permissions based on the context, such as location or time, providing an additional layer of security. [...] In today’s digital world, cloud computing has become a cornerstone for businesses and individuals alike. It offers scalability, flexibility, and cost-effectiveness, making it an attractive option for data storage and processing. However, with these benefits come significant challenges, particularly in terms of data protection. One of the most critical components of data security in cloud computing is access control. By HandyTrac
A
acresecurity.com
article
https://www.acresecurity.com/blog/best-cloud-based-access-control-systems
SOC 2-aligned cloud access control; GDPR data protection posture across the platform
Native integration with Acre Intrusion, Enterprise Visitor Management, and Comnet by Acre
Supports cloud (Acre Access Control, ACT365), on-premises (ACTpro), and hybrid deployment models
Smart Controller for cost-optimized cloud AC deployment at SMB scale [...] Acre's access control portfolio spans three distinct deployment models, each purpose-built rather than retrofitted: [...] Genetec Synergis is a hybrid-cloud access control solution built for organizations with complex infrastructure and strict compliance requirements. It is particularly well-suited to government agencies, financial institutions, and transportation operators transitioning from legacy on-premises systems to cloud-enabled management.
N
nordlayer.com
article
https://nordlayer.com/learn/access-control/types-of-access-control
Finding the right access control model is critically important. Poor access controls compromise network resources and put sensitive data at risk. But every organization requires an access system that suits their employees and corporate structure.
## Learn next
Network security
Zero Trust
Secure Access Service Edge (SASE)
Cloud security
Virtual Private Network (VPN)
Identity access management (IAM)
Access control
Regulatory compliance [...] NAC includes on-premises workstations and remote devices. It encompasses access requests from third parties and seeks to control access to any cloud resources that the organization uses. As such, NAC is a general approach to network security and can include many of the access models discussed above.
## How to choose the right access control model for your organization? [...] The main types of access control models are Discretionary Access Control (DAC), Mandatory Access Control (MAC), Role-Based Access Control (RBAC), Rule-Based Access Control, Attribute-Based Access Control (ABAC), Policy-Based Access Control (PBAC), Remote Access Control, and Network Access Control (NAC).
### 1. Discretionary access control (DAC)
D
delinea.com
article
https://delinea.com/blog/access-control-models-methods?hs_amp=true
# Access Control Models and Methods | Types of Access Control
With most organizations migrating to the cloud, access control is becoming increasingly complex with the need for both on-premise and cloud solutions. Whether located across the world remotely or on-prem, employees need access to do their jobs. [...] ## Types of access control
### Access control and access control models
Access Control Models allow organizations to grant user permissions and enforce access policies. There are four types of access control methods: Mandatory Access Control (MAC), Role-Based Access Control (RBAC), Discretionary Access Control (DAC), and Rule-Based Access Control (RBAC or RB-RBAC). A method is chosen based on the level of access needed by each user, security requirement, infrastructure, etc. [...] Simply put, this is the access control process:
In information security, one would look at this as:
So, how does one grant the right level of permission to an individual so that they can perform their duties? This is where access control models come into the picture.
Access control models have four flavors:
Mandatory Access Control (MAC)
Role-Based Access Control (RBAC)
Discretionary Access Control (DAC)
Rule-Based Access Control (RBAC or RB-RBAC)