Domain 1 - Access Controls Flashcards
1
Q
Three constructs someone implementing an AC system should consider.
A
AC Policies, Models, and Mechanisms
2
Q
DAC
A
DISCRETIONARY ACCESS CONTROL
Allows the creator of a file to delegate access to others.
3
Q
Attributes of a subject are referred to as…?
A
privilege attributes or sensitives
4
Q
Total number of permissions in a Windows OS uses the NTFS file system?
A
14
5
Q
Number of Standard Permissions in a Windows OS NTFS File System?
A
5
6
Q
Authorization
A
Process where requests to access a particular resource should be granted or declined.
7
Q
Authentication
A
Providing and validating identity.
8
Q
Capability List
A
DAC matrix that sorts by rows.
9
Q
RSBAC
A
RULES SET BASED ACCESS CONTROLS
Discretionary controls giving data owners the discretion to determine the rules necessary to faciliate access.
Open Source Framework logic for GFAC by Abrams and LaPadula
10
Q
CUI
A
CONSTRAINED USER INTERFACE
Methodology that restricts the user’s actions to specific functions by not allowing them to request functions that are outside of their respective level of privilege or role.
11
Q
3 Main Types of CUI
A
- Menus and Shells
- Database Views
- Physically Constraining a UI
12
Q
Menus and Shells
A
Users are given the commands they can execute.
13
Q
Database Views
A
Mechanism used to restrict user access to data contained in databases.
14
Q
Physically Constraining a UI
A
Provides only certain keys on a keypad or a certain touch button on a screen.
15
Q
VBAC
A
VIEW-BASED ACCESS CONTROL
Restricts or limits and AC subject’s ability to view or perhaps act on an object on the AC subject’s assigned level of authority.
16
Q
CDAC
A
CONTENT-DEPENDENT ACCESS CONTROL
Protects databases containing sensitive information. Permits or denies the subjects access to objects based on explicit content within the object.
ex. HIV test.
17
Q
CBAC
A
CONTEXT-BASED ACCESS CONTROL
Used in FW applications to extend the FW’s decision making process. ex. Stateful Inspection FW.
18
Q
CDAC vs CBAC
A
CDAC - Makes decisions based on the content within an object
CBAC - Only concerned with context or the sequence of events leading to the object being allowed through the FW.
19
Q
TRBAC
A
TEMPORAL ROLE-BASED ACCESS CONTROL
Support periodic role enabling and disabling and temporal dependencies among such actions.
20
Q
NDAC
A
NON-DISCRETIONARY ACCESS CONTROL
Policies that have rules that are not established at the discretion of the user.
21
Q
MAC
A
MANDATORY ACCESS CONTROL
Used in environments of high levels of security. Decisions are made by a single entity.
22
Q
MAC’s 3 Object Level Classifications
A
Top Secret
Secret
Confidential
23
Q
*-property
A
Star Property BLP
A subject can save an object only at the same or higher classification. BIBA - A subject cannot modify an object of a higher integrity level (No write up)
24
Q
Strict *-property
A
Strict Star Property Requires information can be written at, but not above, the subject’s clearance level.
25
2 Models that use MAC?
Bell-LaPaula Confidentitiaity
Biba Integrity
26
ABAC
ATTRIBUTE-BASED ACCESS CONTROL
Access control method where subject requests to perform operations on objects are granted or denied based on assigned attributes of the subject, assigned attributes of the object, environment conditions, and a set of policies.
27
Separation of Duties is a key element in which Model?
Clark-Wilson formal model
28
Bell-LaPadula Model Components
Components are: Subjects, Objects and an AC Matrix.
Objects are classified into a hierarchy of security levels based on sensitivity (low to high)
Subjects assigned security levels called 'Clearance Levels'.
AC Matrix - Relation between the sensitivity levels of Objects and Subjects. Defines permissions for each clearance level and object classification.
29
Bell-LaPadula Model Tenet
A given subject can read objects at the same or lower sensitivity level.
30
Simple Security Property
When a subject can read objects at the same or lower sensitivity level, but not higher.
31
Limitations of the Bell-LaPadula Model?
1. Concerned only with confidentiality and makes no mention of other properties
2. Does not address important goals such as 'need to know' or the ability to restrict access to individual objects based on a subject's need to access them.
32
Which model was designed for controlling access to sensitive data in government and military applications?
Bell-LaPadula Confidentiality Model
33
Biba Model
Lattice Based.
Integrity model focusing on ensuring that the integrity of information is being maintained by preventing corruption.
Core is a multilevel approach to integrity designed to prevent unauthorized subjects from modifying objects.
34
Biba Model - How is Access Controlled?
To Ensure that objects maintain their current state of integrity as subjects interact with them.
35
Biba Model - How it assigns Integrity?
Assigns levels to subjects and objects depending on how trustworthy they are considered to be.
36
ss-property
BLP - A subject cannot read/access an object of higher classification (No read up).
BIBA - A Subject cannot observe an object of a lower integrity level (no read down)
37
Invocation Property
BLP - Not used.
BIBA - A subject cannot send logical service requests to an object of a higher integrity.
38
Clark-Wilson Components
Authenticated Principals (Users)
Programs Acting on Data (Transaction Processes)
Data Items
39
Clark-Wilson Integrity Policy
Well-formed transactions (that maintain a consistent level of integrity between initial and end state. Also instills the Separation of Duties principals.
40
MLS Systems
Multilevel Security Systems Systems in which information with various sensitivities or integrity requirements can be processed concurrently in a single system by users or actors with multiple levels of clearance or need to know.
41
Brewer-Nash Model
'Chinese Wall' Principal is that users should not access the confidential information of both a client organization and one or more of it's competitors.
Rare because the access control rules change based on subject behavior.
42
Graham-Denning Model
Concerned with how subjects and objects are created, how subjects are assigned rights or privileges, and how ownership of objects is managed. *Primarily concerned with how a model system controls subjects and objects at a very basic level where other models simply assumed such control.
43
Graham-Denning Model 3 Parts
1. Set of Objects
2. Set of Subjects
3. Set of Rights
44
Graham-Denning Subjects
Two Parts:
1. Process
2. Domain - Set of constraints controlling how subjects may access objects.
45
Graham-Denning Model Eight Primitive Protection Rights
Also called Commands that subjects can execute to have an effect on other subjects or objects.
1. Create Object
2. Create Subject
3. Delete Object
4. Delete Subject
5. Read Access Right
6. Grant Access Right
7. Delete Access Right
8. Transfer Access Right
46
Harrison-Ruzzo-Ullman Model
Very similar to Graham-Denning.
Composed of a set of generic rights and a finite set of commands. Also concerned with Situations in which a subject should be restricted from gaining particular privileges.
47
Process Flow involved in the implementation of authentication mechanisms are?
1. Identify - Process used to allow the access control subject to provide information as to their identity.
2. Authenticate - Set of providing and validating identity within the access control system.
3. Authorize - Process where requests to access a particular resource should be granted or denied based on outcome of the authentication process.
48
3 Most Common Methods Used to Provide User Identity in an AC System
1. User ID - Username and Password
2. PIN - Typically a 4 digit numerical combination created by the user.
3. Account Number - Typically an 8-16 unique numerical sequence assigned to an individual.
49
Automated Provisioning
Solutions that provide a framework for managing AC Policies by role, interconnection with IT systems, workflows to sign-off
50
3 Common Factors in Authentication
1. Something you know
2. Something you have
3. Something you are
51
ISO 7816
Standard for landing contact readers (Smart Cards)
52
Dynamic Passwords
One time passwords. Could be from a token or hard word.
53
2 Types of Tokens
1. Synchronous - Time is synchronized between the token device and the authentication server. (RSA Token)
2. Asynchronous - Provides a new, one-time password with each use of the token. (SafeWord eToken PASS)
54
Process for Asynchronous Subject to gain access to object
5 Step Process.
1. Authentication server presents a challenge request to subject
2. Subject enters the challenge into token device
3. Token calculates a correct response
4. Subject enters response to the challenge along with a password or PIN
5. Response & Password (or PIN) is verified by the authentication server.
55
RFID
Radio Frequency Identification
Wireless, non-contact use of radio electromagnetic fields to transfer data for the purposes of automatically identifying and tracking tags attached to objects.
56
Main Issue with RFID
Crossing Signals. When two or more readers overlap, the tag is unable to respond to simultaneous queries.
57
Anti-Collision Protocol
Enable RFID tags to take turns in transmitting to a reader.
58
Biometrics
Technology that measure and analyze human body characteristics (DNA, fingerprints, voice patterns, facial pattern, hand movements)
59
Key Issue with Biometrics
Since Biometric data cannot be changed, data such as a user's facial characteristics and fingerprints are in the public domain and can be captured without consent or knowledge.
Solution? Protocols should be in place to rely on proof of freshness of biometric data and cannot rely on its secrecy.
60
Two steps in Biometric Authentication Solution
1. Enrollment
| 2. Verification
61
On-Card Matching vs Off-Card Matching?
Think in terms of Biometrics
1. On-Card Matching: User verification carried out via smart card
2. Off-Card Matching: User verification carried out via the system.
62
How many classifications within Biometrics?
Two
1. Behavioral
2. Physiological
63
Behavior Biometrics
signature analysis, voice pattern recognition, and keystroke dynamics
64
Signature Analysis
3D analysis of a signature, using both the pressure and form of the signature.
Also analyzes the series of movements such as acceleration, rhythm, pressure, and flow.
65
Voice Pattern Recognition
Creates a database of unique characteristics of the AC Subject's voice.
Subject speaks into a microphone and an AC device compares the current voice pattern with the one in the database.
* Inexpensive Methodology to implement, but because of high error rate, it is best if used to complement another more accurate technology (Iris Scanning)
66
Issues with Voice Pattern Recognition?
-> Biology. As the subject ages, the characteristics of the voice naturally change. Same is true is subject is under stress (during an emergency)
-> Inflection - Possible through
altering of inflection during given phrase.
67
Keystroke Dynamics
AC Subject's Keystrokes as in the Username and Password. Characteristics include but aren't limited to: - Length of time each key is held down
Length of time between keystrokes
Typing Speed
Tendencies to switch between a numeric keypad and keyboard numbers
Keystroke tendencies involved in capitalization *Lowest cost authentication mechanism. Cannot be used reliably in a single-factor or two-factor (using passphrase). Needs to be used with two-factor (Iris Scanning)
**Provides continuous authentication
68
Issues with Keystroke Dynamics?
Accuracy can be affected by hand injuries, fatigue, arthritis, and even temperature
69
Physiological Biometrics Examples
Fingerprint, Hand, Vascular, Eye, Facial Recognition Technology
70
Fingerprint Verification Technology
Typically requires 7 characteristics or matching points. Human finger contains some 30-40 characteristics or matching points.
71
Issue with Biometric Technology and Possible Solution?
Biggest Challenge facing biometric technology, and fingerprint verification in particular, is the ability to carry out performance evaluations unambiguously and reliable.
Solution FVC-onGoing, a web based automated evaluation system for fingerprint recognition algorithms.
72
FVC-onGoing
Web-Based evaluation system, used mainly for fingerprint recognition algorithms. Test are carried out on a set of sequestered datasets, and results are reported online by using well-known performance indicators and metrics.
FVC = Fingerprint Verification Competitions
73
Hand Geometry Technology
Verification based on key points in Subject's hand. Hand Geometry measures dimensions on hands and fingers.
Pros - Provides a proven reliable verification even with difficult environments, simple to operate
Cons - Less accurate and requires large and expensive equipment.
74
Vascular Patterns
'Ultimate Palm Reader'
A picture of the veins in a person's hand or finger, including, thickness and location, which are determined to be unique for each Subject.
75
Claims for Vascular Pattern Technology
1. Difficult to Forge - Veins are inside hand, and veins are only registered is blood is flowing through them.
2. Contactless
3. Many and Varied Users - Used for ATMs, hospitals, and Universities in Japan.
4. Capable of 1:1 and 1:many matches
76
Retina Scan
Oldest and most accurate biometric authentication methodologies. There is no known technology that can forge a retina scan. And retina scans on a dead subject will not create the same signature as that of a live one.
77
Iris Scan
Based on scanning the granulatrity of the richly detailed color bands around the pupil. Bands are well defined at birth and change litte over the subject's lifetime. Maps nearly 247 variables.
78
Iris Scan vs Retina Scan
Iris Scan maps the color bands on the Iris
Retina Scan - Maps the blood vessels in the back of the eye.
79
Issues with Iris Scanning
1. Has proven to fall victim to scanned images
| 2. Alcohol New ISO standard requires two images to be compared with an Iris scan.
80
Facial Recognition
Uses landmarks on the face, such as cheekbone, tip of nose, and eye socket orientation.
Approx 80 separate characteristics, but systems usually measure 14-22.
81
Rates used in Biometric Accuracy
FAR & FRR
82
FRR
FALSE REJECTION RATE
Failure to recognize a legitimate user.
Type 1 Error
83
FAR
FALSE ACCEPTANCE RATE
Erroneous Recognition.
Type 2 Error
84
In terms of FAR and FRR, what will adjusting the threshold do?
Adjust the failure rates. However, decreasing one will increase the other.
85
CER
CROSSOVER ERROR RATE
The point where the accuracy rate equals the error rate of the other.
86
Crossover Accuracy: Retinal Scan
1:100,000,000
87
Crossover Accuracy: Iris Scan
1:131,000
88
Crossover Accuracy: Fingerprint
1:500
89
Crossover Accuracy: Hand Geometry
1:500
90
Crossover Accuracy: Signature Dynamics
1:50
91
Crossover Accuracy: Voice Dynamics
1:50
92
ANSI INCITS 395-2005
Specifies a format for the representation of a digitized sign or signature data.
93
How many types of Tokens are there?
Four
1. Static Password
2. Synchronous Dynamic Password
3. Asynchronous Password
4. Challenge Response
94
Static Password Token
Device contains a password that is physically hidden (not visible to processor) but that is transmitted for each authentication. Vulnerable to replay attacks
95
Synchronous Dynamic Password Token
A timer is used to rotate through various combinations produced by a cryptographic algorithm. Token and authentication server MUST have synchronized clocks.
96
Asynchronous Password Token
A one-time password is generated without the use of a clock.
97
Challenge Response Token
Using public key cryptography, it is possible to prove possession of a private key without revealing that key.
The Authentication server encrypts a challenge with a public key; the device proves it possesses a copy of the matching private key by providing the decrypted challenge.
98
Smart Cards (Types?)
Typically a type of chip card.
Fobs, SIMS used in GSM mobile phones, USB-based tokens are forms of these.
Two types: Contact and Contactless
Contact must be inserted into a reader.
Contactless only requires proximity.
99
Dual-Interface Cards vs Hybrid Cards
Two less known types of Smart Cards Dual-Interface
Single Chip with both contact and non-contact interfaces. Possible to access the same chip using either interface with a high level of security.
Hybrid - Has two chips, one with a contact interface, another with a contactless interface.
100
Common Techniques for authentication in your AC System
1. Knowledge based
2. Token based
3. Characteristic based
101
Dual Control
aka 'Split Knowledge'
Built on the principal that ONE person should have access to information that would allow the person to determine the encryption key used to encrypt protected information more quickly than a brute-force attack.
Collusion would require two people.
102
Periodic Authentication After authentication
Periodically issues the challenge/response authentication queries with the user's token to determine if the user has physically left the area. Reduces risk that a user would walk away from a device before plugging out.
103
Reverse Authentication
"Way to authenticate the website/page to the user. BoA adopted this early using PassMark. Example: ""Chose the pictures with the cars in it"""
104
Reference Monitor
The service or program where AC information is stored and where access control decisions are made. Once granted, what a user can do is controlled by the authorization matrix/table.
105
Authorization Table
Matrix of AC objects, subjects, and their respective rights. Used in some DAC systems to provide a simple and intuitive UI for the definition of AC rules.
106
LDAP
Lightweight Directory Access Protocol Application protocol used for querying and modifying directory services over TCP/IP.
107
LDAP Directory
Lightweight Directory Access Protocol Directory Is a logically and heirarchically organized gropu of objects and their respective attributes using LDAP Directory Tree.
108
LDAP Tree
Lightweight Directory Access Protocol [Directory] Tree Starts with the domain names at the top of the hierarchy followed by organizational boundaries, then groups followed by users and data, such as groups of documents.
109
DN
Distinguished Name
Part of the Directory Entry Formed by combining it's Relative Distinguished Name (RDN), one or more attributes of the entity itself, and the RDN of the superior entries reaching all the way up tot eh root of the DIT.
110
ADDS
(NT Directory Services)
Micrsoft Active Directory Domain Services
Stores data and information within a central database. Provides things like LDAP, authentication, DNS based naming. Used for assignment of policies because of its many attributes, it is commonly used by separate services to facilitate software distribution with a network.
111
SSO
Single Sign On Primary Purpose is convenience of the user.
112
What are the two Significant risks with SSO?
1. Single point of failure
| 2. Single point of access
113
Kerberos
Developed at MIT Popular network authentication protocol for indirect (3rd party) authentication services. Provides strong authentication using secret-key cryptography.
114
Kerberos Operations
It is an operational implementation of key distribution technology and affords a key distribution center, authentication service, and ticket granting service. Hosts, applications, and servers all have to be 'kerberized' to be able to communicate with the user and the ticket granting services
115
Kerberos Supports?
1. Authentication
2. Authorization
3. Confidentiality
4. Integrity
5. Nonrepudiation
116
Nonrepudiation
Determines exactly who sent or received a message.
117
Kerberos Port Number(s)
UDP: 53/88
TCP: 53/88
118
Four types of trust architectures
1. Internet
2. Intranet
3. extranet
4. DMZ
119
DMZ
Demilitarized Zone Computer host or small network inserted in a 'neutral zone' between a companies private network and the outside public network. Prevents outside threats from having direct access to company data.
120
Intranet vs Extranet
Intranet - Network based on TCP/IP and belonging to an organization, accessible only by the organization's members, employees, or other with authorization. Extranet - Network that allows controlled access from outside for specific business or educational purposes.
121
Trust Path
Series of trust relationships that authentication requests must follow between domains.
122
One-Way Trust
Unidirectional authentication path that is created between two domains. A trust B, so A can get to B, but B cannot get to A
123
Two-Way Trust
Authentication requests between two domains in both directions. A trust B, and B trust A.
124
Trust Transitivity (And Types)
Determines whether a trust can be extended outside the two domains between which the trust was formed.
Transitive Trust - Extend Trust Relationship
Non-Transitive Trust - Deny Trust Relationships with other domains.
125
Name areas that make up the Identity Management Lifecycle
1. Authorization - Determines whether a user is permiteed to access desired resource.
2. Proofing - Verify's peoples identity before enterprise issues them accounts and credentials.
3. Provisioning - Automation of all procedures and tools to manage the lifecycle of an identity.
4. Maintenance - User management, password management, role/group management
5. Entitlement - Set of rules, defined by resource owner, for managing access to a resource, and for what purpose.
126
GFAC
Generalized Framework AC by Adams and LaPadula RSBAC is based on this.
127
iSCSI
Internet Small Computer Systems Interface Transport Layer Protocol that works on top of TCP.
128
What are the Authentication methods supported with iSCSI
Kerberos
SRP
SPKM1/2
CHAP
129
SRP
SECURE REMOTE PASSWORD
Secure password-based authentication and key-exchange protocol.
130
SPKM1/2
Simple Public-Key Mechanism Provides authentication, key establishment, data integrity, and dta confidentiality in an online distributed application enviroment using a public-key infastructure.
131
CHAP
Challenge Handshake Authentication Protocol Used to periodically verify the identity of the peer using a three-way handshake.
132
Biba Formal Model - 3 Primary Rules
1. AC Subject cannot request services from an AC Object that has a higher integrity level
2. AC Subject cannot modify an AC Object that has a higher integrity level
3. AC Subject cannot access an AC Object that has a lower integrity level
133
Singulation Protocol
Anti-collision protocols for RFID tags to take turns in transmitting to a reader.
134
Behavior traits in a biometric device
Voice pattern
Keystroke dynamics
Signature dynamics
135
type 1 error
FRR - Fales Reject Rate
136
type 2 error
FAR - False Acceptance Rate
137
Voice Pattern vs Speech Recognition
VP - Identifies and Records a number of Data Points based on patterns.
SR - Identifies Word sounds and matches the sounds to a prerecorded profile.
138
IAM Programs?
Control Physical and logical access to information, systems, devices, and facilities.
