CertiGuide to Network+  9  Chapter 1000:  Security in the Real World

III  Network Resource Security Models 1 2 Pop Quiz 1000.00

Security Reference Monitor

The reference monitor checks to see if the user has permission to access a particular object. If this access is granted, the requested user action is performed. This module performs audit messages if enabled.

The NTFS (New Technology File System) available on Windows NT and its successors such as Windows 2000/XP, but not on Windows 9.x, supports the use of user-level network security by specifying at the OS level which users can and cannot access resources such as specific files and printers. Each resource has an associated DACL that specifies allow and deny access permissions for the resource, based on the user’s identity and security group memberships.

These OS-level permissions apply to both local accesses (to users sitting at the server’s console) and network accesses (by users connecting over the network). Simply giving network users Write permission to a network share does NOT mean that they can write to all files available at that share. The files’ DACL’s must also allow that user to write.

Windows NT includes logging for security-related events in its Security log, accessed via the Event Viewer utility.

III  Network Resource Security Models 1 2 Pop Quiz 1000.00