Authentication

Authentication

1. Authentication

   • Authorization
     • Gives users a permission to access the resource
   • Authentication
     • Confirms users are who they say they are
   • Process to verify identity of user
     • restricts illegitimate users

2. Passwords

   • Traditional Passwords
     • Costly
     • Poor User Experience
     • Easily Compromised
     • Burdensome
     • Password Regulations
   • Human Error
     • Reusing Passowrds
     • Simple Passwords
     • "forget password"
   • Password Managers
     • Store all passwords
       • "Wallet"
     • Master Password
   • Single Sign-On
     • SSO
     • One set of credentials
     • Password leak can cause compromise to all systems

3. Types of Authentication

   • What you know
     • Passwords
     • PINs
     • Weak
     • Forgettable
   • What you have
     • Photo ID
     • Token
     • Passport
     • Costly to replace
     • Forgery
     • Duplication
   • What you are - biometrics
     • Robust
     • Cant be lost
     • Expensive
     • False positives
       • Acceptable %
     • Behavioural
       • Voice
       • Gait - walk
       • Keystroke
     • Physiological
       • Face
       • Fingerprint
   • Where you are
     • GPS
     • IP
     • Location of user

4. MFA

   • Future
     • Biometric factor
     • Knowledge Factor
     • Ownership factor
   • More secure
   • Lengthy
   • 2FA
     • Soft token - SMS
     • Password & token
   • Effective
   • Layered defence

5. Biometrics

   • Fingerprint
     • Unique
     • Cheap
     • Spoofing
     • Injury
   • Hand veins
     • Expensive
     • Hard to replicate
     • Vascular patterns
   • Voice
     • Sick/drunk
     • Simple
     • Speech Pattern
     • Maintanence
     • Fooled by family
     • High quality
   • Facial Recognition
     • Fooled by family
     • Fast
     • Distances between features