A basic principle in information security that holds that entities (people, processes, devices) should be assigned the fewest privileges consistent with their assigned duties and functions. For example, the restrictive "need-to-know" approach defines zero access by default and then opens security as required. All data in a corporate network would be off-limits except to specific people or groups (see role-based access control).
In contrast, a less-restrictive strategy opens up all systems and closes access as required; for example, allowing employees access to all systems except human resources and accounting, which would be limited to only employees in those departments.
In contrast, a less-restrictive strategy opens up all systems and closes access as required; for example, allowing employees access to all systems except human resources and accounting, which would be limited to only employees in those departments.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2009 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- AT&T loses lawsuit over Verizon's map commercial
- Ha! Take THAT Such a silly waste of the court's time. If they finally lose, I hope they are made to pay treble court costs just as a lesson in frivolous lawsuits clogging the courts. That would send a much needed messageThat if a corporation is going to...
- Discussion threads 2009-11-18
- Microsoft confirms 'detailed' Windows 7 exploit
- Ummm interesting....so just block 139 and 445...445? great that port aggain.Is SMB blocked to/from internet by th firewall by default?RE: Microsoft confirms 'detailed' Windows 7 exploitPorts 139 and 445 are blocked by default for Internet access by Windows firewall in Windows 7 and any commerical hardware firewall. They are enabled...
- Discussion threads 2009-11-16
- Moxi introduces three-tuner HD DVR, reduces prices on dual-tuner version
- TiVo isn't the only company trying to entice people to choose its DVR solution over one you can get bundled with your cable or satellite programming. Moxi is going the extra step with the latest version of its HD DVR, unleashing a new model that incorporate...
- Blog posts 2009-11-10
- More Apple teardowns: Fall 2009 iMac & Magic Mouse
- You can watch BluRay movies via the Display Port IN. [nt][nt]Windows to the rescue!![i]Of course, until Apple releases software support, you?ll still have to boot into Windows to play movies.[/i]LOL, OS X sucks. :)LOLWhat's sad is that OS X is the best that Apple could steal!Is that the best you...
- Discussion threads 2009-10-22
- Was Apple a "Liar Liar" to the FCC about the Google Voice app?
- right...So now you are milking 2 cows: M$ and Apple.Google rules when it comes to software!M$ & Apple would not hold a candle if it was not for their monopolies!Awaits the impending destruction of Google by "The Followers..." ...Yes, there must be an explanation other than "Apple lied... again"[i]Apple hasn't...
- Discussion threads 2009-09-18
- Sprint lures two from Verizon; new 'unlimited' plan seals deal
- Gone to Sprint!As a 21 year VZW customer and my wife as a 16 year VZW customer, our bills with data on our phones and 400 minutes for me and unlimited and text for hers, our bills were $270/month combined (mine with a 6% discount on a business plan). ...
- Discussion threads 2009-09-14
- Red Hat: Microsoft taking cloud back to the 80s
- Red Hat should feel right at home then because using their software is like using something out of the 80's. I'll prefer a modern company like Microsoft instead of a company based on 30 year old technology such as Red Hat. My theory is that Red Hat is...
- Discussion threads 2009-09-03
- An open letter to the RIAA: Illegal file sharing problem solved?
- I think I'll skip......governments collecting and paying royalties. Its called tolling and every business in the world would like to access governments' ability to use force to collect money for them.What would be the outcome of such a scheme? Whenever "artists" (and I use the word loosely given...
- Discussion threads 2009-08-31
- Deconstructing United Airlines: Where Customers are Transactions
- United Airlines: Customers are Merely Transactions If you're a loyalty marketer and look at my United profile, you find something that would make you 4.5 on a scale of 5.0 when it comes to warm and fuzzy.  You'd see hundreds of thousands of United Airlines frequent flier FF miles;...
- Blog posts 2009-08-20
- Designers build portfolios, maybe land jobs at 99 Designs
- Culture of cheap cr@p...at least one designer landed a few bucks for his work and 3) other designers have another design for the portfolio.It's exploitation as far as I'm concerned. Graphic design ... at least good graphic design ... is not a hobby some kid does when he runs out...
- Discussion threads 2009-08-17
- Why you should care about Apple's Snow Leopard
- How about security?Update: I have answered my own questions with the precious few details found here: http://www.apple.com/macosx/technology/Are there any security improvements in Snow Leopard? yes, a fewWill the NX/DEP finally be switched on in Safari and all other internet facing programs?Presumably it will be switched on for 64bit programs. All...
- Discussion threads 2009-08-17
- Firewire Blocker: A Software Defense Against Firewire-Based Physical Security Attacks on Windows Systems
- This paper presents a software solution to Firewire-based physical security attacks on Microsoft Windows operating systems. In this first proof-of-concept, the FirewireBlocker service is running with SYSTEM privileges in order to be able to enable/disable hardware. While users can normally not interface with service, risk for privilege escalation remains. For...
- White papers 2009-08-13
- The! meaning! of! bing!
- they're all dyingcan three men dying in a boat save one another, well I guess cannibalism could work.HP: has cut their printer line so much that I have to wait a month to get a printer shipped direct from themIntel: actually the strongest of the bunch, but your right their...
- Discussion threads 2009-08-08
- Sitting "Shiva" For My Dead Laptop
- Sitting "Shiva" For My Dead LaptopSomeone from HP will read thisand email you with an apology and some effort to correct this. I hope you do not take them up on their offer since it would never be extended if you weren't blogging for ZDNet. It has taken some time...
- Discussion threads 2009-07-14
- MS Patch Tuesday: 9 bulletins, 6 rated critical
- Microsoft today released six bulletins with fixes for at least nine documented security vulnerabilities in a range of products that put users at risk of malicious hacker attacks. At least two of the vulnerabilities are currently being attacked in the wild so it's imperative that Windows users...
- Blog posts 2009-07-14
- Does free antivirus offer a false feeling of security?
- Does free antivirus offer a false feeling of security?No it does not..."Does free antivirus offer a false feeling of security?" No it does not, not anymore then commercial does. The real question is does all antivirus software offer a false feeling of security? I am undecided...
- Discussion threads 2009-07-14
- Does free antivirus offer a false feeling of security?
- Earlier this month, Symantec's product manager David Hall dismissed free security software as equal alternative to the paid versions, and also described Microsoft's free "Microsoft Security Essentials" as "a stripped down version of the OneCare product Microsoft pulled from retail shelves". Needless to say that such statements...
- Blog posts 2009-07-14
- Microsoft to integrate Twitter into its CRM
- Microsoft to integrate Twitter into its CRM I don't like Microsoft's new direction.I remember when data security and privacy meant something. Are people forgetting the lessons of the past? Is everyone jumping on the trust-the-big-guys wagon? Privacy and security are PARAMOUNT!There is too much temptation for MS...
- Discussion threads 2009-07-10
- In an economic downturn, prepaid mobile is big business
- Why pay $100 or more each month for a two-year cell phone contract when you can pay $50 and keep yourself off the hook? At least that's the thinking behind the latest ad campaign by Boost Mobile, a prepaid, or "no-contract," mobile service provider whose parent company...
- Blog posts 2009-07-09
- My Experience with Dell's Namastechnical Support
- Despite my dislike for all things outsourced, my first experience with DELL's call center in India was a largely positive one. So this week, during a particularly intense session of software testing, the 500GB hard drive on my DELL Precision 530 decided to...
- Blog posts 2009-06-24
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Learn more about tools to grow your business
-
The Business Essentials Guide provides you useful tools and templates to help grow your business and save you time with automated shipping solutions.
- Save time with the UPS Business Essentials Guide
- The best support in the Linux business
-
If Linux is going to power your mission-critical applications, you'd better have the best support known to business. Novell was rated the top provider of Linux technical support.
- Learn more >>
- The best support in the Linux business
-
If Linux is going to power your mission-critical applications, you'd better have the best support known to business. Novell was rated the top provider of Linux technical support.
- Learn more >>
- Reduce risk. Reduce complexity. Increase reliability.
-
A simplified IT environment isn't just less complex. It's also more reliable. Standardize on a single Linux platform with SUSE Linux Enterprise from Novell, and get the world's most interoperable Linux
- Learn more >>
Enterprise Applications
- Check out some of the easiest and most powerful ways to boost productivity while saving money on your application infrastructure. See ZDNet's comprehensive Enterprise Application resource center, now!
- New Online Dashboard
-
- Read about top issues IT decision-makers face every day, plus get cost effective solutions to real life IT problems. Oracle Topline
-
