Access
Control
Mechanism
Access Control Mechanism:
An access control mechanism in information security is a security system that verifies a user's identity through authentication methods
like passwords, biometrics, or tokens, and then grants them specific access levels to data or systems based on their authorized
permissions, essentially ensuring only authorized users can access sensitive information or perform certain actions within a network or
system.
Key components of an access control mechanism:
•Authentication:
The process of verifying a user's identity by checking their credentials like username and password against a database.
•Authorization:
Determining what actions, a user is allowed to perform once authenticated, based on their assigned roles and privileges.
•Access Control Policy:
A set of rules defining who can access what data and with what level of permission.
Examples of access control mechanisms:
• Password-based authentication: Users log in with a username and password.
• Multi-factor authentication (MFA): Requires users to provide multiple forms of identification, like a password and a
code sent to their phone, for added security.
• Biometric authentication: Uses physical characteristics like fingerprints or facial recognition to verify identity.
• Smart cards: Physical cards with embedded chips that can be used to authenticate users.
• Role-Based Access Control (RBAC): Assigns access permissions based on a user's role within an organization (e.g.,
administrator, editor, viewer).
• Attribute-Based Access Control (ABAC): Grants access based on dynamic attributes like location, time, or device used.
How it works in practice:
1. User attempts to access a system:
A user enters their credentials (username and password) to log in.
2. Authentication process:
The system verifies the credentials against a database to confirm the user's identity.
3. Authorization check:
Based on the authenticated user's role and assigned permissions, the system determines what level of access to grant.
4. Access granted or denied:
If authorized, the user gains access to the system or data; otherwise, access is denied.
Important considerations for access control mechanisms:
•Least privilege principle:
Users should only be granted the minimum level of access needed to perform their job functions.
•Regular password reviews:
Enforce password policies that require users to change passwords frequently and use strong password
combinations.
•Monitoring and logging:
Track user activity to identify suspicious behavior and potential security breaches.
Firewall configuration
A firewall is a security system that monitors and controls incoming and outgoing network traffic based on
predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external
networks, such as the internet. Firewalls help prevent unauthorized access, cyber threats, and malicious attacks.
This is possible by configuring domain names and Internet Protocol (IP) addresses to keep the firewall secure.
Proper firewall configuration is essential, as default features may not provide maximum protection against a
cyberattack.
Types of firewall:
1. Based on Deployment
a) Hardware Firewall
A physical device that filters traffic between a network and an external connection.
Often used by enterprises for securing entire networks.
Examples: Cisco ASA, Fortinet FortiGate.
b) Software Firewall
A program installed on an individual computer or server to monitor and control traffic.
Useful for personal or small-scale protection.
Examples: Windows Defender Firewall, Norton Firewall.
c) Cloud Firewall
A cloud-based security solution that protects cloud infrastructure and remote users.
Ideal for businesses with remote workforces and cloud-based applications.
Examples: Palo Alto Prisma Cloud, Zscaler Cloud Firewall.
Based on Functionality
a) Packet Filtering Firewall
• Examines incoming and outgoing packets based on predefined rules (IP address, ports, protocols).
• Works at the network layer (Layer 3) and transport layer (Layer 4) of the OSI model.
• Fast but lacks deep inspection capabilities.
• Example: Cisco IOS Access Control Lists (ACLs).
b) Stateful Inspection Firewall
• Tracks active connections and only allows packets that belong to an established session.
• Provides better security than packet filtering firewalls.
• Works at Layers 3 and 4 of the OSI model.
• Example: Check Point Firewall.
•Here is the link that help to understand the working of firewall:
https://www.youtube.com/watch?v=kDEX1HXybrU
Firewall Rules are Based On
Firewall rules define how network traffic is allowed or blocked based on specific conditions. These rules operate using
different criteria to filter packets and protect the network. Below are the key factors on which firewall rules are based:
1. Source and Destination
2. Port Numbers and Protocols
3. Traffic Direction
4. Action (Allow or Deny).
5. Stateful vs. Stateless Rules
6. Time-Based Rules
Step 1: Identify Security Requirements
•Determine which assets (servers, databases, user devices) need protection.
•Define security policies, such as which traffic should be allowed or blocked.
•Identify trusted networks (internal LAN, VPN) and untrusted networks (public internet).
Step 2: Choose the Firewall Type
•Hardware Firewall: Installed between the internet and internal network (e.g., Cisco ASA, Fortinet).
•Software Firewall: Installed on an operating system (e.g., Windows Firewall, Linux iptables).
•Cloud Firewall: Managed through cloud services (e.g., AWS WAF, Azure Firewall).
Step 3: Access the Firewall Interface
•For hardware firewalls: Connect to the device using a web browser or SSH.
•For software firewalls: Open the firewall management console (e.g., Windows Defender, iptables).
•For cloud firewalls: Log in to the cloud provider’s dashboard.
Step 4: Configure Network Settings
•Set up network zones (e.g., internal, DMZ, external).
•Assign IP address ranges for different zones.
•Define network interfaces (WAN, LAN, VPN).
Step 5: Define Firewall Rules
•Configure rules based on:
• IP addresses (source & destination).
• Port numbers (e.g., allow port 80 for HTTP, block port 23 for Telnet).
• Protocols (TCP, UDP, ICMP).
• Traffic direction (inbound, outbound).
•Example rule: Allow TCP traffic on port 443 from any external IP to internal web server.
Step 6: Enable Advanced Security Features (if available)
•Intrusion Prevention System (IPS): Detect and block threats.
•Deep Packet Inspection (DPI): Inspect network traffic for malicious activity.
•VPN Configuration: Secure remote connections.
•Geo-IP Filtering: Block traffic from specific countries.
Step 7: Save and Apply Changes
•Save firewall rules and security settings.
•Restart or apply changes to activate configurations.
A VPN (Virtual Private Network) works by creating a secure and encrypted connection between your device and a remote server
managed by the VPN service.
Principle of Operation:
1.Encryption of Data:
1. When you connect to a VPN, all the data sent from your device (e.g., browsing, file downloads, or emails) is encrypted.
2. Encryption ensures that even if someone intercepts your data (like hackers or ISPs), they cannot understand it without the
encryption key.
2.Tunneling:
1. A "tunnel" is established between your device and the VPN server. This tunnel acts as a private pathway where your data
travels securely, separated from other internet traffic.
2. Tunneling protocols like OpenVPN, WireGuard, or IPSec determine how the data is encrypted and routed through the tunnel.
3 Routing via VPN Server:
3. Your internet traffic is routed through the VPN server instead of going directly to the website or service you're accessing.
4. This masks your real IP address, making it appear as though you're browsing from the VPN server's location.
4 Decryption and Forwarding:
1. Once your encrypted data reaches the VPN server, it is decrypted and sent to its final destination (e.g., a
website).
2. The website only sees the VPN server's IP address and location, not yours.
5 Reverse Process:
1. When the website sends a response back, the VPN server receives it, encrypts it, and sends it back to your device
through the tunnel.
2. Your VPN client decrypts the data so you can view it.
Benefits of Using a VPN:
1.Privacy:
1. Your IP address and location are hidden, protecting you from tracking or surveillance.
2.Security:
1. Data encryption protects against hackers, especially on public Wi-Fi.
3.By passing Geo-Restrictions:
1. You can access content or websites restricted in your country by connecting to a server in a different location.
4.Anonymity:
1. Your browsing activity is not easily traceable back to you.
Thank you
