Karteikarten
Authentication Services & Access Controls
Karten in diesem Stapel (15)
- 1Terminal Access Controller Access-Control System (TACACS)1) Remote authentication protocol
2) Similar to RADIUS
3) Controls Access to Dial-Up - 2Terminal Access Controller Access-Control System (TACACS+)1) Remote Authentication Protocol
2) Multiple methods
3) Accepted from multiple methods, including Kerberos - 3Extended Terminal Access Controller Access-Control System (XTACACS)1) Remote authentication protocol
2) Similar to RADIUS
3) logging to enable auditing - 4Remote Authentication Dial In User Service (RADIUS)• Authentication protocol for almost everything
• A very common AAA service
• Modems, routers, switches, firewalls, etc.
• A common authentication method for 802.1X
• Secure authentication - sends passwords as a hash - 5Lightweight Directory Access Protocol (LDAP)• Protocol for reading and writing directories over an IP network
• X.500 specification was written by the International Telecommunications Union (ITU)
• LDAP is lightweight, and uses TCP/IP (tcp/389 and udp/389)
• LDAP is the protocol used to query and update an X.500 directory
• Used in Windows Active Directory, Apple OpenDirectory, Novell eDirectory, etc. - 6X.500 Directory Information Tree• LDAP User Access and Security
• Simple Authentication and Security Layer (SASL) in LDAP v3
• Usually two levels of access - Read-only (query) and read-write (update) - 7Secure LDAP• LDAP over SSL - Encrypt with SSL/TLS
• Commonly configured in Microsoft environments - Active Directory uses TCP port 636 - 8Security Assertion Markup Language (SAML)• You need access to resources on a
service provider
• You can authenticate through a third-party
• based on XML
• authentication and authorization of data - 9Kerberos1) Send login request
2) TGT (ticket granted ticket) with key (10hrs)
3) Service Request
4) TGS (ticket granting service) returned to client (5mis)
5) TGS is sent to application resource server with keys
6) Access granted to resource - 10Authentication Factors1) Something you know - Username, password, PIN, screen pattern
2) Something you have - Smart card, token
3) Something you are - Fingering, iris scan
4) Something you do - Writing, Typing Technique
5) Somewhere you are - GPS information, IP Address - 11Time-Based One-Time Password (TOTP)algorithm uses a time-based factor to create unique passwords
- 12PAP (Password Authentication Protocol)1) older system that is no longer used. PAP 2) sends the username and password to the authentication server in plain text.
- 13Shiva Password Authentication Protocol (SPAP)1) Replaced PAP
2) The main difference is that SPAP encrypts the username and password - 14Challenge Handshake Authentication Protocol - CHAP1) designed to stop man-in- the-middle attacks.
2) During the initial authentication, the connecting machine is asked to generate a random number which the server will periodically ask to verify - 15HMAC-Based One-Time Password HOTP1) algorithm is based on using a Hash Message Authentication Code (HMAC) algorithm
2) ashing algorithm along with a symmetric key.
Informationen
- Beschreibung
- Karteikarten am Authentication Services & Access Controls, erstellt von Obi Davis am 01/02/2015.
- Erstellt von
- Obi Davis
- Aufrufe
- 6
- Bewertung