Aug 12, 2026 · Information Security

Day 54 – Attacks and Access Control: From “Who Are You?” to “Can This Action Be Performed?”

This article walks through the fundamentals of authentication, multi‑factor authentication, SSO, common attack vectors such as SQL injection, XSS, CSRF, DDoS, and Man‑in‑the‑Middle, explains DAC, MAC, RBAC, TBAC, OBAC, ABAC, Bell‑LaPadula, Biba, Clark‑Wilson and Chinese‑Wall models, and shows how to design a comprehensive audit log for an Internet‑based prescription system.

CSRFDDoSSQL injection

0 likes · 31 min read

Day 54 – Attacks and Access Control: From “Who Are You?” to “Can This Action Be Performed?”

Architect

Oct 12, 2024 · Information Security

Understanding ACL, ABAC, and RBAC: Choosing the Right Access Control Model

This article introduces three common permission models—ACL, ABAC, and RBAC—explaining their core concepts, how they manage user access through objects, attributes, or roles, and discusses the strengths and limitations of each approach for secure system design.

ABACACLRBAC

0 likes · 8 min read

Understanding ACL, ABAC, and RBAC: Choosing the Right Access Control Model

security models

Day 54 – Attacks and Access Control: From “Who Are You?” to “Can This Action Be Performed?”

Understanding ACL, ABAC, and RBAC: Choosing the Right Access Control Model

Day 54 – Attacks and Access Control: From “Who Are You?” to “Can This Action Be Performed?”