What are the advantage and disadvantages of DAC and MAC ?

Discretionary Access Control (DAC):

Advantages:

1. Intuitive: It’s easy to understand. Users have control over their own resources.
2. Easy to implement: Setting up who can access what is straightforward.

Disadvantages:

1. Inherent vulnerability: Users can be tricked into granting access to malicious entities.
2. Maintenance of ACL: Keeping track of who has access to what requires ongoing effort.
3. Maintenance of Grant/Revoke: Managing permissions changes can be a hassle.
4. Limited power of negative authorization: It’s challenging to restrict specific actions.

Mandatory Access Control (MAC):

Advantages:

1. High degree of protection: It ensures a strong level of security, preventing unauthorized information flow.
2. Suitable for military and high-security applications: Ideal for environments where strict control is crucial.

Disadvantages:

1. Requires strict classification: Subjects and objects need to be categorized rigidly, which can be complex.
2. Applicable to few environments: Not suitable for all scenarios, limiting its practical use.