4 - Authentication

Question 1

FAR, FRR importance

Answer 1

False acceptance rate - non identifiable user can authenticate

False rejection rate - identified user can’t authenticate

Importance - ERR (equal error rate) when FAR = FRR

Question 2

Methods of authentication

Answer 2

Something a user:

Knows -
Pros: can be used if user forgets password
Cons: bad memory, can’t be changed if compromised, can be used multiple times
Has -
Pros: keys can be generated on command
Cons: devices being lost, one time pass can be intercepted, users don’t authenticate who is asking for 2f
Is -
Pros: can’t lose what you are (physical or behavioral)
Cons: fallback needed, privacy concerns, spoofing

Question 3

Password hashing and attacks

Answer 3

Hashing - scrambled representation of password

Attacks - can be brute forced! Hashing helps if PW is stolen

Question 4

Trusted path

Answer 4

We have a trusted way to authenticate with OS

Network auth introduces new problems