Karteikarten
Authentication Concepts
Karten in diesem Stapel (16)
- 1Entity or PrincipalAny actor that needs a distinction between different instances. It can be an user, a computer node on a network or even a program
- 2IdentityUnique representation of an entity
- 3User AuthenticationThe process of binding an identity to an entity, in other words, it is the establishment of the user's identity
- 4RegistrationFirst step of authentication that gathers and stores the information about the entities to be authenticated. This data contains an identifier representing the identity of each entity. Other information like location, function, contact, passphrase, password, public key and biometric data is also provided. This process should be done in a way that prevents imposture
- 5IdentificationSecond step of authentication during which the user specifies his identifier through different system interactions
- 6VerificationThird step of authentication where the system (an inner and protected component of the OS) verifies the previous claim of identification. It asks the user to supply, in some form, some of the recorded complementary information
- 7Something the User KnowsThe user's authentication is done using passphrases, passwords, PINs, ...
- 8Something the User HasThe user's authentication is done with a key, a token, a smartcard, something capable of interacting with the system
- 9Something the User IsThe user's authentication is done with static biometrics like fingerprint, face, retina, iris, ...
- 10Something the User DoesThe user's authentication is done through the use of dynamic biometrics like voice, typing, handwritten signature, ...
- 112FA (Two Factor Authentication)User authentication done with two characteristics, like, for example, something the user has in combination with something the user is
- 12MFA (Multi-Factor Authentication)User authentication done with more than two characteristics, like, for example, something the user has in combination with something the user is and does
- 13Password AuthenticationMost widely used authentication method where the user provides a username or login id to the system. The system then asks for a password, which must be a unique string known by the entity. The system compares the password with the actual value previously saved for the corresponding identifier
- 14Vulnerabilities of Password AuthenticationOffline dictionary attack, specific account attack, popular passwords attack, workstation hijacking, social engineering, exploiting multiple password use, electronic monitoring
- 15Countermeasures for Password Authentication AttacksProtect password file, intrusion detection, account lockout mechanism, password policies, automatic logout, encrypted communications, training and enforcement of policies
- 16SaltRandom value that is combined with a password to prevent the visibility of duplicate passwords in the password files, since different salt values produce different hashes. This increases the difficulty of offline dictionary attacks
Informationen
- Beschreibung
- Mestrado Segurança Informática Karteikarten am Authentication Concepts, erstellt von Inês Macedo am 16/06/2021.
- Erstellt von
- Inês Macedo · Jun 2021
- Aktualisiert
- 16 Jun 2021
- Aufrufe
- 0
- Bewertung