Question

You are charged to protect the machine of Alice from receiving unwanted traffic from machines on a blacklist.

(1) If the access control can only be done on the machine of Alice, will the implementation of access control be an Access Control List, or a directory? Explain briefly.

(2) If the access control can only be done on the senders of all traffic, will the implementation of access control be an Access Control List, or a directory? Explain briefly.

(3) If the access control can only be done by having the traffic carry certain information, what will be the access control implementation you would choose? Explain briefly.

Answer 1

1) The Access Control to be done on the Access Control List because, the rules that are written in the ACL takes the highest preference and the ACL is the first layer of the security. So blocking those traffics through the ACL will be much more effective. Moreover, the inbound traffic rules should be blocked from the blacklisted IP.

2) For the second scenario also, the access control should be done on the ACL level because the outbound traffics can be easily blocked on the system and hence sender won't able to send outbound request from the network.

3) I would rather go for network access control through which we can allow and deny rules based on the traffics coming from whitelisted and blacklisted traffics respectively.