Authentication

Question 1

What are the four means of authenticating user identity based on?

Give three examples

Answer 1

1. Something the individual knows - password, PIN, answers to prearranged questions.
2. Something the individual possesses (token) - smartcard, electronic keycard, physical key.
3. Something the individual is (static biometrics) - fingerprint, retina, face.
4. Something the individual does (dynamic biometrics) - voice pattern m, handwriting, typing rhythm.

Question 2

What are six authentication security issues?

Answer 2

Eavesdropping

Denial of Service

Trojan horse

Client attacks

Replay

Host attacks

Question 3

What are some advantages and disadvantages of biometrics?

Answer 3

Advantages: cannot be shared, copied or stolen. It cannot be lost.

Disadvantages: used complicated technology, requires specialised hardware.

Might have false positives/negatives, it can be combined with another technology to avoid this.

Question 4

What’s a replay attack?

Answer 4

Attacker repeats a previously-captured user response (packet sniffing)

Question 5

What are some password vulnerabilities? (7)

Answer 5

Brute force attack (offline dictionary attack)
Specific account attack
Popular password attack
Workstation hijacking
Exploiting user mistakes
Exploiting multiple password use
Electronic monitoring.