Authentication and Access Control notes
16 notes by 13 users
This GoConqr page gathers notes on Authentication and Access Control, from passwords and Kerberos to access control models. University students and professional candidates can review identification and authorisation, while teachers can find material to use. There are over 10 notes covering university and professional-level topics. Choose a note to start exploring.
Select topic
- Identity and Access Management15
- Authentication Methods15
- Password Security14
- Biometric Authentication15
- Authentication Protocols16
- Kerberos8
- Identity Federation and Single Sign-On5
- AAA and Network Access Control21
- Access Control Models21
- Security Models and Trusted Computing17
- Access Control Lists and Permissions9
- Active Directory9
- AWS Identity and Access Management5
Notes
-
CHAP Challenge Handshake Authentication Protocol (CHAP) Challenge Handshake Authentication Protocol (CHAP) is a widely supported authentication method in which a representation of the user's password, rather than the passw...
-
Authentication & Identity Identity - Username/PasswordEverybody who has an online account with Facebook, Twitter, Spotify etc will know that usernames are hard to remember. Not only this, passwords are even harder to remember! Those who access...
-
Identity and Access Services Authorisation Definition function of specifying access rights and privileges to resources related to information security process of ensuring only users who are suppose to have access to certain resources are given ac...
-
Reference Monitors Security kernel- implementation of a reference monitorTrusted computing base- kernel + other protection measuresReference monitor- "an access control concept that refers to an abstract machine that mediates all access...
-
Access Control Steps in Authentication and Authorisation Subject/ principle- an active entity Object- resource being accessed Access Operation Reference Monitor- grants or denies access Access control has 2 steps- Authentication- wh...
-
Passwords and Authentication Identification- Who you areAuthentication- Verify that identityPasswords are digital keys, demonstrates someone is who they say they are and understood by users.Passwords are a terrible way to handle authenticationPas...
-
Exam - Kerberos - created from Mind Map principals & their roles A Kerberos principal is a unique identity to which Kerberos can assign tickets. Principals can have an arbitrary number of components: the primary, the instance and the realm. format typically...
-
access control - created from Mind Map access control principles information classification access control system
-
Crypto U8, example dynamic password scheme Prerequisite: Server and user's smart token both share the same, agreed up key and password function.Steps to authentication with dynamic passwords: User makes a request to server to be able to authenticate. Ser...
-
A A A - created from Mind Map
-
ultimateApp RBAC systemUserAdmin Rol Defining Application User Profile Predefined responsibilities making Credentials defining resposibilities User Session Limits Session Timeout RBAC fist user logoninitial pass change process
-
Types of Access Control - created from Mind Map Discretionary Access Control (DAC) Discretionary Access Control (DAC) Role Based Access Control (RBAC)
-
CPM / PVWA CPM / PVWA Main Funcionality Password Vault Web Acess - Enabe both End Users and Administrators to acess and manage privileged accounts. Central Policy Manager - Responsible for Password Management Operations Install ...
-
Domain 4 - Access Controls (End User Audits) Domain 4 - Access Control (End User Audits) Organizations need to ensure appropriate accessibility to its info. Users who have access need to be authenticated. Authentication - verify identity of users requesting spec...
-
Password Attacks 14.1 - Preparing for Brute Force 14.1.1 - Dictionary Files 14.1.2 - Key-space Brute Force 14.1.3 - Pwdump and Fgdump 14.1.4 - Windows Credential Editor (WCE) 14.1.5 - Exercises 14.1.6 - Password Profiling 14.1.7 - Pas...
-
OAuth-IoT: an access control framework for the Internet of Things based on open standards OAuth-IoT: an access control framework for the Internet of Things based on open standards
More Authentication and Access Control resources
About authentication and access control notes
GoConqr OriginalUsing authentication and access control notes
Start with Passwords and Authentication for its distinction between identification and authentication. Then read Access Control to follow the steps involved in authentication and authorisation. These notes offer a starting point before you move to a specific protocol or access control approach.
For a closer look at passwords, the listing includes notes on a dynamic password scheme and Password Attacks. The Kerberos notes cover principals and their roles. Identity and Access Services lists authorisation approaches, including discretionary and role-based access control.
Make the notes part of revision
Read one note and write down its key terms in your own words. Return to the text when you need to check a distinction, such as identification versus authentication. When you want to see ideas organised visually, switch to a mind map on the unit page; use a quiz there when you want to test your understanding. Pick a topic and open a note to begin.
Frequently asked questions
Which note is a good place to start?
Try Passwords and Authentication if you want a starting point for the difference between identification and authentication. Follow it with Access Control, which sets out steps in authentication and authorisation. From there, you can choose a note on a specific protocol, password topic or access control approach.
Are there notes on Kerberos and access control?
Yes. The Kerberos notes cover principals and their roles. For access control, Identity and Access Services lists approaches including discretionary and role-based access control, while Reference Monitors covers the reference monitor concept. You can choose between these notes according to the topic you want to review.
Are these notes free to use?
Yes. Every resource listed here is free to open and study without an account. The notes were made by GoConqr users, not by GoConqr. A free account also lets you save quiz scores and make your own quizzes, mind maps, flashcards and notes.