acc2cr14

Comments-1 100 Words with reference

Multilayer User Access Control

Multilayer user access control is required for maintaining a security system to improve logical access in a system. Adapting access control to increase physical IT assets and connecting to computers. The objective of user access control is important to maintain components of data security with policies at an organization. Implementation methods can use multilayer access control is mandatory and Discretionary in a business. This method of access control is important to maintain policies at the user's operations. Simple security characteristics will build with various secure levels in an organization (Cao et al., 2018). This access information is labeled with high classification based on multilayer access control.

Discretionary access control is a matrix process to develop the three-dimensional matric that helps in reaching the goals. The columns and mapping are pairs to develop the objects with various classified at restricts the flow of information. Role-based access control is generalized functions that help in blending functions with developing the business models. These three types of user access control are needed to develop the mapping functions with labeled at a higher classification (Guclu et al., 2020). Implementation of several methods is used to incorporate multilayer access control in an organization. Proper selection of controlling methods is needed to improve authority among users.

This method will have benefits at multilayer access control in an organization. Mandatory access control is a benefit for improving the mapping process with maintaining objects related to access control. Discretionary access control is matrices to representing various labeled with the restricted flow of information. Role-based access control is a provision of a neutral framework, this process will allow customization to control the system. This method benefits applicable to secure government security (Sun et al., 2020). User's access control is maintained to gain information with commercial security at proper methods. Restrict access information is required for users which are authorized in a system.

References

Cao, L., Wang, Y., Dong, X., Liu, Y., Zhang, Y., Guo, X., & Feng, T. (2018). Multiuser access control searchable privacy‐preserving scheme in cloud storage. International Journal of Communication Systems, 31(9), 1. https://doi.org/10.1002/dac.3548

Guclu, M., Bakir, C., & Hakkoymaz, V. (2020). A new scalable and expandable access control model for distributed database systems in data security. Scientific Programming, 1–10. https://doi.org/10.1155/2020/8875069

Bottom of Form

Comments-2 100 Words with reference Multi-Layer Access Control

There are various types of implementation methods for incorporating multilayer user access let us discuss some of the methods of implementing user access control they are discretionary access control, mandatory access control, and role-based access control, and let us see a brief explanation of the above methods (Kauspadiene et al., 2018). The first one is discretionary access control and in this access is controlled by the operating system and it allows users to control their respective own or personal data and this system is having some set or list of access control and he is capable of operating his data and this method of access control is more flexible but at the same time access will be made or done by other persons also (Kauspadiene et al., 2018).

The second one is mandatory to access control and this is the most secured form of access control and used in most of the industries and also used by the government and in this method access is controlled by the system administrator whether to provide access or deny is under the hands of the administrator (Rezakhani et al., 2018). This method classifies information into two types they are top secret or confidential and the second one is the category which means access for management and department of the project and this method of implementation is most secure but at the same time, it is too costly to implement it (Rezakhani et al., 2018).

The third method is role-based access control and this is mostly considered as a structured form of access control and if we consider an organization there are different roles based on the work of the individual (Sue et al., 2016). The individual may necessarily provide access depending on the performance of his role and the access is denied for him to other roles and this can be clearly understood by an example of considering an organization and the different roles are accountants, software, human resources, etc. The accountant person will have access only up to the accounting section and he is restricted from accessing other roles of information and this can be very helpful for the organization (Sue et al., 2016).

References

Kauspadiene, L., Ramanauskaite, S., Cenys, A., Janulevicius, J., & Rastenis, J. (2018). Modeling of the enterprise management structure for data leakage evaluation. Information Security Journal: A Global Perspective, 27(1), 1–13. https://doi.org/10.1080/19393555.2017.1423136

Rezakhani, A., Shirazi, H., & Modiri, N. (2018). A novel multilayer AAA model for integrated applications. Neural Computing & Applications, 29(10), 887–901. https://doi.org/10.1007/s00521-016-2610-3

Comments-3 100 Words with reference The email exchange is a piece of information exchanged between two email users, and each email user verifies the authenticity of the other email user. This verifiable information includes a sender, a recipient, and the time and date the two emails have to exchange. In the end, the use of blockchain technology is the best and most secure way to achieve any data protection requirements such as data origin authentication, integrity, availability, data origin and integrity management, data quality, and data privacy and data origin authentication. It is important to note that this contract and its execution have to decentralize from the blockchain, and the contract does not exist itself (Bhavani & Krishna, 2020).

Email exchange has to help both users verify each other's identity, and the emails to exchange can use for both authentication purposes. The company must adopt the use of email for authentication and other purposes like the authentication of personnel. A message exchange is one of the most basic operations we do. When a device sends a message, it first computes a key. It then uses that key to encrypt or decrypt the message. After some negotiation, the sender wants to send the encrypted or decrypted data back to the receiver. Since a sender needs to know the key to decrypt a message, the sender often uses a unique secret key or private key. The recipient encrypts the message and signs it, M, which has encrypted with K. The recipient sends the signature to Bob. If so, then it is a signed message. If a message does not match the signature, it means that it is signed. The message verification algorithm has a design to handle a given message where a given message has no sign but has instead by an outside party. They make the situation even more complicated, the signature might come from a known entity, or the sender might have created an unauthorized signature using his secret key (Vidhya & Rathipriya, 2020).

 

References

Bhavani, Y., & Krishna, B. J. (2020). Security Enhancement Using Modified AES and Diffie–Hellman Key Exchange. In Advances in Computational Intelligence and Communication Technology (pp. 173-183). Springer, Singapore.

Vidhya, E., & Rathipriya, R. (2020). Key Generation for DNA Cryptography Using Genetic Operators and Diffie-Hellman Key Exchange Algorithm. Computer Science, 15(4), 1109-1115.

Comments-4 100 Words with reference

Introduction

Cryptography can be defined as a method that involves securing various techniques that deal with communications and has the right to allow the sender and recipient of the message to view the statement. Cryptography deals mostly with the transmission of electronic data. Its primary function is encryption and decryption of both explicit messages and also the email messages (Reuter, Boudaoud, Winckler, Abdelmaksoud & Lemrazzeq,2020).

Organizations and various companies use this system through the application of a data encryption mechanism known as a secret key. In this case, the statements are exposed to encryption facilities, after which decryption is applied through the private keys sent to the recipients. Companies need to encrypt their email traffic because it ensures data is not exposed to third parties. It has been known that data traffic is one of the obstacles that lead to information being disclosed to hackers. Encrypting emails ensures integrity and sanity in the workplace. This is because, in case of any unusual traffic, the system can impose firewalls and block access from unauthorized personnel. Some disadvantages can accompany data encryption. The shortcomings of encryption, therefore, include decryption in case a third-party individual intercepts the message. This means that the news will be exposed, and its contents may be tampered with, affecting the privacy and integrity of data rules. This issue can be solved by applying robust cryptography algorithms together with easy access to the available interfaces to avoid data losses (Amalraj & Jose,2016).

Conclusion

Email encryption is, therefore, an essential factor that needs to be applied in all organizations. This is because data privacy and other information uses can be stored with integrity as information is relayed to the relevant recipient.