A basic principle in information security that holds that entities (people, processes, devices) should be assigned the fewest privileges consistent with their assigned duties and functions. For example, the restrictive "need-to-know" approach defines zero access by default and then opens security as required. All data in a corporate network would be off-limits except to specific people or groups (see role-based access control).
In contrast, a less-restrictive strategy opens up all systems and closes access as required; for example, allowing employees access to all systems except human resources and accounting, which would be limited to only employees in those departments.
In contrast, a less-restrictive strategy opens up all systems and closes access as required; for example, allowing employees access to all systems except human resources and accounting, which would be limited to only employees in those departments.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2008 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Firefox security makeover: 11 vulnerabilities, 4 critical
- Â Mozilla has released a new version of its flagship Firefox browser to fix a total of 11 vulnerabilities that expose users to code execution, information stealing or denial-of-service attacks. Four of the 11 flaws covered with the new Firefox 3.0.4 are rated "critical" because of the risk...
- Blog posts 2008-11-12
- Why did Microsoft wait 7 years to fix SMBRelay attack flaw?
- One of the code execution vulnerabilities fixed in this month's Microsoft Patch Tuesday release dates back to 2001 when it was first disclosed by Cult of the Dead Cow hacker Sir Dystic pictured left. If that wasn't cause for worry, get this:Â An exploit for the bug...
- Blog posts 2008-11-12
- Adobe updates Flash Player 9 to fix six security holes
- Adobe has slapped another band-aid on its ever-present Flash Player to cover at least six documented security vulnerabilities that could expose users to a wide range of hacker attacks. The patch, rated "critical" by Adobe, affects Flash Player 9.0.124.0 on all platforms. Adobe is recommending that users...
- Blog posts 2008-11-06
- WinHEC: Microsoft shows off Windows 7 fundamentals
- WinHEC: Microsoft shows off Windows 7 fundamentalsWhy the obsession over boot times?I shudder to think how many millions of dollars are being spent to shave seconds off something I do MAYBE once a month and I'm sure I'm not alone in my reboot frequency. Microsoft made the default power button...
- Discussion threads 2008-11-05
- Judge wants to see legal memos in NSA wiretapping case
- A federal judge has ordered the Justice Dept. to turn over documents relating to the NSA's warrantless wiretapping program. ACLU and EFF had sought the legal opinions under an FOIA request, while Justice merely submitted summaries, claiming attorney-client privilege. Judge Henry Kennedy said the summaries the department provided were inadequate...
- Blog posts 2008-11-03
- Microsoft: Third party apps killing our security
- Microsoft: Third party apps killing our securityI use Youtube oftenand what they did is good. I really disliked the whole real player thing as well.It was a horrid thing. Aside from which platform it was run on.Tell That To Some Web SeminarsI had to attend one last week, one of...
- Discussion threads 2008-11-03
- Harvard's Charlie Neeson raises Constitutional questions in RIAA litigation
- Harvard's Charlie Neeson raises Constitutional questions in RIAA litigationPoints two and three are dubiousMind you, I tend to take the US Constitution a lot more literally than the US Supreme Court has during my lifetime, but..."Congress has violated the Constitution by putting the prosecution of a criminal statute in the...
- Discussion threads 2008-10-29
- 410K cars and SUVs sold in first half of 2004 had pre-installed DVD systems
- 410K cars and SUVs sold in first half of 2004 had pre-installed DVD systemscool car parts!having pre-installed dvd systems as an additional ford mustang parts is one additional feature for cars that everyone loves. no wonder car sales are on the rise...RE: 410K cars and SUVs sold in first...
- Discussion threads 2008-10-29
- Windows 7 must support netbooks
- Windows 7 must support netbooksYou can run Vista on the new model netbooks......which use Atom Z530 processors.http://www.tweaktown.com/news/9678/win_vista_on_eee_pc_1000h_will_it_work_video/index.htmlPlus, of course, the HP2133 has it as an install option.Problem solved.RE: Windows 7 must support netbooksDrawbacks?Netbooks? Not for years.Eveyone talks about devices and the internet as if the internet is a stable...
- Discussion threads 2008-10-27
- Women and leadership
- Last week, my dead tree copy of McKinsey Quarterly arrived bearing the above title. This section caught my eye (p.45 and written by Joanne Barsch, Susie Cranston and Rebecca A. Craske): One surprising thing we learned as a result of talking with female leaders was that they often fail...
- Blog posts 2008-10-27
- "Joe the Plumber"'s data compromised by government insider
- "Joe the Plumber"'s data compromised by government insiderIllegal activity no big deal...because the security breach benefits the Dems, who are overwhelmingly supported by the media and government workers. Hey, slap on the wrist, don't do that again.Now, if the breach had gone the other way, it'd be front-page news...
- Discussion threads 2008-10-25
- Amazon Kindle: It’s not for us, Jack
- Amazon Kindle: It’s not for us, JackHappy Early Adopter HereI have a Kindle and I think it's great. I currently use it solely for reading books. That's ok, because that's what I bought it for! Once my current magazing subscriptions run out, I'll probably convert over to...
- Discussion threads 2008-10-22
- Vizio rolls out four new bargain-priced 1080p LCD HDTVs
- It's highly debatable that you can tell the difference between 720p and 1080p HD content in sets under 50 inches, much less in models less than 42 inches, but that isn't stopping HDTV makers from bringing 1080p to sets as small as 32 inches. Vizio continues...
- Blog posts 2008-10-21
- I'm a PC: We don't say the "V" word any more
- I'm a PC: We don't say the "V" word any moreI dislike Apple even more than Microsoft, but I love the adsApple is, of course, a horribly restrictive company towards it's customers. Nasty as can be, even worse than Microsoft. Plus they make their customers pay through the nose.But they...
- Discussion threads 2008-10-20
- Silverlight 2: Google Chrome support, yes; iPhone, no
- Silverlight 2: Google Chrome support, yes; iPhone, noThe choose their words carefully. Like "has access to" a computer withSilverlight. They might lead you to think that one in four computers has Silverlight installed. But, NO, that just means one in four persons has access somewhere, somehow, to Silverlight, though possibly...
- Discussion threads 2008-10-13
- Amazon, open the Kindle before Apple eats your lunch!
- Apple's iPhone is beating the Amazon Kindle at its own game -- what a shame. It doesn't have to be that way, though. Amazon could put the iPhone to shame if they'd make the Linux-based Kindle open to developers. According to Wired: Since the launch of...
- Blog posts 2008-10-02
- How to read your FBI file
- As part of the occasional series Life in post-Constitutional America I'm pleased to offer a brief primer on How to read your FBI file. It isn't as easy as you'd think, since the FBI has failed several times to create a modern data management system - which may not be...
- Blog posts 2008-10-01
- Protect your company's admin-level identities
- Today's organizations spend an excessive amount of time, energy and effort to fortify their IT infrastructure from external attacks, yet don't address the most pressing need - internal security. Learn how to solve the challenges of securing privileged account access and enforcing strong authentication in this white paper by...
- White papers 2008-10-01
- Samsung Omnia
- Photo gallery:Samsung OmniaAlong with the RIM BlackBerry Bold and Sony Ericsson Xperia X1, the Samsung Omnia is one of the most requested and sought after smartphones of 2008. Why all the buzz? It's not so much the Omnia's touch screen that's drawing attention (after all, we've seen it in the...
- Product reviews 2008-09-30
- Dirty dozen: Firefox ships patch for 12 security flaws
- Dirty dozen: Firefox ships patch for 12 security flawsAdobe Flash Beta 10 on Linux Stopped CrashingEvery since build version 3 of Firefox 3.0.2 Adobe 10 beta stopped crashing on Linux 32/64 bit systems. Flash now runs great on this release, except for some minor issues with accelerated graphics and nVidia...
- Discussion threads 2008-09-24
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Intel Xeon 7400 highlights available now!
-
With key platform innovations built-in, the Intel Xeon processor 7400 series offers more headroom, reliability, and the highest expandability for large-scale server consolidation. See highlights from Summer IDF, SAP Tech-Ed, VMWorld, and more.
- Get blogs, videos and more from past tech events >>
All-in-One Printers
- 10 things to look for in an all-in-one printer A multifunction printer may offer the convenient, consolidated functionality your organization needs, but there are a lot of choices out there. Before making a selection, be sure to consider these key factors.
- From our sponsors
- HP Small Business LaserJet Printers
-
HP Laser Jet M3035 MFP series Starting at $1,599. SHOP NOW
- New HP Color LaserJet CP3525n Printer Starting at $699. SHOP NOW
-
