1.1 AAAAI Services

Question 1

AAAAI - What’s it stand for?

Answer 1

Authentication, authorization, auditing, accounting, identification

Question 2

Identification - what is it?

Answer 2

Identification - The start of the security process, a subject must always provide an identity to access an object. It is how accountability is started, it’s how authentication occurs, and it’s how issues can be audited after the fact.

Question 3

Authentication - what is it?

Answer 3

The process of verifying an identity. Requires the subject to give some info, such as a password or pin.

Question 4

Authorization - what is it?

Access Control Matrix

Answer 4

Comparing the requested activity with the authenticated identity to determine if the user has the rights or privileges to perform said activity. This process is usually performed by an access control matrix.

Question 5

Auditing - what is it?

Answer 5

Subjects actions are tracked and recorded. Object logs are recorded as well. This can be used to track system health and performance, as well as determining the origins of security breaches or mistakes.

Question 6

Accountability - what is it?

Answer 6

Subjects must be held accountable for their actions, otherwise security policy is meaningless.