Multi-Level Authentication Flashcards
What is multi-level authentication?
MLA is the process of using more than one secret in order to authenticate the user.
What are the different methods of MLA?
Biometrics
Visual passwords
Audio Passwords
What are the drawbacks of visual passwords?
Users are predictable in their choices as they need to remember lots.
Users choose things that are familiar to them
Users may forget what picture they chose given time as other images may become familiar to them.
What are the four stages of authentication?
Enrollment
Authentication to the system
Replacement
De-registration
What is enrollment to a system?
User ID must be matched to a secret
What is authentication to the system?
User is challenged by the system to produce the secret they gave at enrollment in order to be logged in.
What is replacement in a system?
Provide a new secret when the user forgets the secret that they gave at enrollment
What is de-registration in a system?
Users should have the right to be completely removed from a system
Is the process of authentication the same for every system?
No, as some systems need to be stronger in their security than others.
Depending on the security there may be more authentication or more difficult authentication required.
What needs to happen for non-repudiation in a system?
Users have to be authenticated beyond reasonable doubt to prove who was using the system.
What are visual passwords?
Use pictures in order to authenticate individuals
Should inhibit insecure practices as users are less likely to write down/draw the image of the person or share disclose it.
What are the different metrics that can be assessed with visual passwords?
Locimetric - users locate points on an image
Drawmetric - users sketch their passwords
Searchmetric - users select images in a challenge set
What are the drawbacks of Searchmetric designs?
Susceptible to keylogging and shoulder surfing
Users get confused as to what image is the one they’re looking for
What are the drawbacks of Locimetric designs?
Users tend to select the same points on the image, due to them being processed as a scene and not single images.
Calibration issues mean that the points aren’t going to be picked exactly every time.
What are the drawbacks to drawmetric design?
Hard to reproduce same image
Humans tend to draw symmetrically
Humans tend to gravitate towards centre of the image.
