How many kinds of "security models" are there?

Question

I heard about “security-based,” “role-based security,” “component-based security,” and in .NET, I learned that Code Access Security (CAS) is “origin-based security.” Are there any other security models? And what technically do they mean? Can someone give me some explanations or point me to some link? Thanks a lot.

Answer 1

Code access security is more of a feature that .NET uses to conform to the security model. The security model itself is a loosely defined term for general security concepts .

For example, role-based security or role-based access control is a security model for determining access to a resource based on a user role. Although, this is just a small part of the entire security component that needs to be considered as part of the development. This can be a big help:

http://msdn.microsoft.com/en-us/security/default.aspx

But you can also explore more generalized security concepts, such as Comptia Security + certification for beginners and CISSP through ISC2, for more advanced security knowledge for a heuristic approach to security.

Answer 2

Wikipedia defines a computer security model as

A computer security model is a framework for specifying and ensuring security policies. The security model can be based on the official access rights model, the calculation model, the distributed computing model, or not all the theoretical justification.

As you can imagine, with a broad definition, there are many types of computer security models. Instead of recounting all the different models here, it would be easiest to look at the most comprehensive category of computer security models from Wikipedia. Finally, Wikipedia also provides a computer security portal , citing many computer security topics.

In addition, MSDN has excellent articles on protecting .NET applications . They also provide what seems like a pretty good security guide .