Difference between DAC and MAC

When it comes to IT security, especially in computer systems, user’s access to certain resources and information must be regulated. Of particular importance in managing information in a system is the ability to decide who can have access to what. Of all the models, the two most common models are the Discretionary Access Control (DAC) and Mandatory Access Control (MAC). There are differences in features, advantages, and drawbacks of each model.

What is DAC?

DAC is identity-based access control. DAC mechanisms will be controlled by user identification such as username and password. DAC is discretionary because the owners can transfer objects or any authenticated information to other users. In simple words, the owner can determine the access privileges.  

Examples: Imagine your Instagram account as a host user. Once you put a story online and tag your friend, the story would only be visible to your followers. If that friend reposts it, then their followers can also view the story. This system is called DAC, where users can share objects (story files/privileges) based on authentication.

What is MAC?

The operating system in MAC will provide access to the user based on their identities and data. To gain access, the user has to submit their personal information. It is very secure because the rules and restrictions are imposed by the admin and will be strictly followed. MAC settings and policy management will be established in a secure network and are limited to system administrators.  

Examples: Whereas, if you post a story to your close friends list, only those you’ve added as close friends can view the story. In this case, even the tagged person cannot repost it due to the rules and restrictions set by Instagram. This system is called MAC, where the rules and restrictions are imposed by the admin and must be strictly followed. This is a more secure network compared to DAC.

Differences Between DAC and MAC

DAC offers ease and flexibility for general use, while MAC ensures strict, high-security environments like military and government systems.

MAC and DAC are two important access control models which are useful in regard to various security requirements. DAC has control flexibility which is appropriate for commercial use – a major strength. But it is not as safe as the MAC addressing since the later is well defined and perfect for the security conscious networks such as the military or the government. It is crucial to make a distinction between these models in order to be able to employ the most appropriate solution for the aimed objectives.