Access Control is the ability to manage (limit and control) the access to host systems and applications via communication links. With Access Control, one could specify one has the access to a particular resource, under which condition should the access be permitted, and what those with access are permitted to do.
It could be used as a counter of Masquerade# so that none of the unauthorised source could access resources without permission.
#SNMPv3, defined by RFC 2570 - 2575, addresses security issues of #SNMPv1 1988 and #SNMPv2 1993 by using User Security Model (USM), including overall architecture and security capability. It provides authentication service# that is part of User-Based Security (UBS), privacy# (Data Encryption Standard (DES) message encryption), and Access Control# to allowed operations, device information, and Management Information Base (MIB) access.
SNMPv1 uses community, a relationship between a SNMP manager and a set of SNMP agents, to establish trust between them. It provides three aspects of agent control including: authentication service#, access policy#, and proxy service. This is later inherited by its successor SNMPv2 1993#. However, it has a major security issue as it transmits a password, called “community string”, in cleartext to authenticate clients.
The data encapsulation is done by two extension headers (append to the IP header): Authentication Header (AH) and Encapsulating Security Payload (ESP), defined by RFC 4303 and RFC 4302 respectively. AH provides Access Control#, Authentication# (including the IP Address#) and Connectionless Data Integrity# services using Message Authentication Code (MAC# /HMAC) where both parties must share secret key. It guards against address spoofing attacks and Replay Attack. ESP provides Confidentiality# services over message contents and traffic flow (but limited) and optionally support Access Control# services like in AH using MAC. It can also guard against Replay Attack#. The users can design which kind of ciphers, modes, and padding to be used in ESP. The IPsec could be set up to have AH only or ESP only or both.
Firewall could be used to control access# to information or resources on a system. There are some #cryptography techniques being utilised too. It needs to have a gatekeeper function to identify users and implement a screening logic to detect and reject worms, viruses or any software attack.
Automation Controller uses a user management system which allow role-based Access Control#. The user management involves of three entities: organisation, user, and teams. Organisation is a collection of entities including users, teams, projects, and inventories. User is the basic unit in the user management system. A team can include several users, projects, credentials and permission. The permission granted to the team will be granted to all members in that team.