Subject, Object and Access Control

Object
An object is the passive element in a security relationship

• files, 
• computers, 
• network connections, and 
• applications. 

Subject
A subject is the active element in a security relationship

• users, 
• programs, and 
• computers. 

A subject acts upon or against an object.

Access Control
The management of the relationship between subjects and objects is known as access control.