POCS-Ch. 3.2 (Vocab)

All points or areas in a system that could be used or compromised to allow hackers entry into the system

• attack surface

• secondary logon

• federated identity management (FID)

• Active Directory

Security strategy in which a user can be granted additional rights to data beyond what is allowed by his or her assigned access level.

• Shibboleth

• Discretionary Access Control (DAC)

• mandatory vacations

• multifactor authentication

Ratio of the number of false rejections divided by the number of identification attempts

• Lightweight Directory Access Protocol (LDAP)

• multifactor authentication

• rule-based access control

• false rejection rate (FRR)

Allows semi-independent systems to work together so users of one system can access resources from another system.

• crossover error rate (CER)

• Security Account Manager (SAM)

• multifactor authentication

• federated identity management (FID)

Those a user receives by default at a lower level.

• Mandatory Access Control (MAC)

• Role Based Access Control (RBAC)

• false acceptance rate (FAR)

• inherited permissions

Those a user is given at a specific location, such as a folder or a file.

• Security Assertion Markup Language (SAML)

• dongle

• implicit permissions

• explicit permissions

Process of validating a user.

• hardening

• federated identity management (FID)

• crossover error rate (CER)

• authentication

Standard authentication protocol on all versions of Microsoft Server when using the Active Directory.

• Shibboleth

• permission

• Kerberos

• Security Assertion markup Language (SAML)

Allow rights to be set for users on a Windows system.

• New Technology File System (NTFS) permissions

• share permissions

• explicit permissions

• inherited permissions

Allow users to set folder usage that can be accessed by others.

• inherited permissions

• explicit permissions

• share permissions

• New Technology File system (NTFS) permissions