THE ROLE OF ACCESS CONTROL AND AUTHENTICATION IN INFORMATION SYSTEMS SECURITY

摘要

The ubiquitous nature of data, information, and knowledge in today's business environments makes them critical resources for building organizational competitive capabilities. However, the contributions of these intangible assets to firms' capabilities building hinges on their characteristics embodied in quality, adequacy, consistency, confidentiality, integrity, and availability. Achieving and maintaining these distinct attributes is seldom feasible especially given the myriad security threats and vulnerabilities currently facing organizations and thus the need for appropriate strategies for militating against access control, and authentication methods. This paper explores the different implementation schemes of access control and proposes a conceptual model linking the different access control models to authentication methods.