list Attribute-based access control (ABAC) Context-based access control (CBAC) Discretionary access control (DAC) Lattice-based access control (LBAC) Organisation-based access control (OrBAC) Role-based access control (RBAC) Rule-set-based access control (RSBAC) Capability-based security Location-based authentication Risk-based authentication Clark–Wilson model Classified information Graham–Denning model Mandatory Integrity Control Multiple single-level Security modes Smack (software) Systrace Take-grant protection model Type enforcement Footnotes References P. A. Loscocco, S. D. Smalley, P. A. Muckelbauer, R. C. Taylor, S. J. Turner, and J. F. Farrell. The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments. In Proceedings of the 21st National Information Systems Security Conference, pages 303–314, Oct. 1998. P. A. Loscocco, S. D. Smalley, Meeting Critical Security Objectives with Security-Enhanced Linux Proceedings of the 2001 Ottawa Linux Symposium. ISO/IEC DIS 10181-3, Information Technology, OSI Security Model, Security FrameWorks, Part 3: Access Control, 1993 Robert N. M. Watson. "A decade of OS access-control extensibility". Commun. ACM 56, 2 (February 2013), 52–63. External links Weblog post on the how virtualization can be used to implement Mandatory Access Control. Weblog post from a Microsoft employee detailing Mandatory Integrity Control and how it differs from MAC implementations. GWV Formal Security Policy Model A Separation Kernel Formal Security Policy, David Greve, Matthew Wilding, and W. Mark Vanfleet. Computer security models Computer access control Operating system security Access control