MITRE D3FENDdefensive technique
D3-UGPH User Group Permissions
- Tactic
- Isolate
- Synonyms
- Role Based Access Controls
Definition
Access control where access is determined based on attributes associated with users and the objects being accessed.
How it works
How it works
Access is determined based on the attributes associated with subjects (requesters) and the objects being accessed. Each object and subject has a set of associated attributes, such as location, time of creation, and access rights. Access to an object is authorized or denied depending on whether the required.
Related
Child of · MITRE D3FEND (1)
- D3-APA Access Policy Administration defensive technique
References
- https://csrc.nist.gov/pubs/sp/800/82/r3/final Guide to Operational Technology (OT) Security