10.3 Authentication

A type of authentication that requires the user to provide something that they know, such as a password or PIN.

• Type 1 Authentication

• Type 2 Authentication

• Single Sign-on

• Discretionary Access Control (DAC)

A type of authentication that requires the user to provide something that they have, such as a key fob, electronic chip, or smart card.

• Type 2 Authentication

• Type 3 Authentication

• Multifactor Authentication

• Single Sign-on

A type of authentication that requires the user to provide something that they are, such as a fingerprint, handprint, retinal pattern, face, or voice.

• Type 2 Authentication

• Type 3 Authentication

• Role-based Access Control (RBAC)

• Mandatory Access Control (MAC)

Authentication that requires two or more evidences of authentication, usually of different types.

• Type 2 Authentication

• Type 3 Authentication

• Multifactor

• Authentication

  Single Sign-on

A method of authenticating with one system to gain access to other related systems.

• Single Sign-on

• Discretionary Access Control (DAC)

• Logging

• Non-repudiation

A type of access control where a user has complete control over a resource, and also determines the permissions other users have to those resources.

• Discretionary Access Control (DAC)

• Accounting

• Logging

• Non-repudiation

A type of access control that restricts access based on the user's role in an organization.

• Role-based Access Control (RBAC)

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

• Type 2 Authentication

A type of access control that historically was associated with multilevel security and military systems and may use a security clearance to restrict access to resources. The security manager controls the security policy, and users aren't able to override the policy.

• Discretionary Access Control (DAC)

• Role-based Access Control (RBAC)

• Mandatory Access Control (MAC)

• Logging

The process of keeping track of user activity while attached to a system.

• Accounting

• Logging

• Authentication

• Single Sign On

The capturing and storing of computer and user events.

• Accounting

• Logging

• Non-repudiation

• Single Sign-on