IAAA Flashcards
Identification
Something that identifies you
Example of Identification
Your name
Username
ID number
Employee number
SSN
Authentication
Prove who you say you are
Types of Authentication
Something you know: type 1 passwords, pass phrase, PIN
Something you have: type 2 ID, passport, smart card, token, cookie on PC, onetime password
Something you are: type 3 biometrics including fingerprint, iris scan, facial geometry
Authorization
What you have access to
Types of authorization
MAC mandatory access control
DAC discretionary access control
RBAC role based access control
ABAC attribute based access control
RUBAC rule based access control
Accountability
Also referred to as auditing
Trace an action to a subject’s identity
Prove who/what a given action was performed by (non repudiation)