Fundamentals of I.T. Security - D430 Chapter 2
1. What is the relationship between identification and authentication?: Identi- fication makes a claim about what
someone or something is. Authentication estab- lishes whether this claim is true.
2. In regard to Authentication, what are factors?: This helps to authenticate a claim of identity. These include:
- Something you know
- Something you are
- Something you have
- Something you do
- Where you are.
3. Define the factor "Something you know": This includes passwords or PINS. Generally viewed as a weak factor.
4. Define the factor "Something you are": Refers to the biometrics of an individual. Can include physical attributes
from the body such as height or eye color, although not common. This includes fingerprints, iris patterns, facia
characteristics.
5. Define the factor "Something you have": Generally based on physical posses- sion. ATM cards, state/federal ID
cards, software-based tokens (verification code)
6. Define the factor "Something you do": Factor based on the actions or behav- iors of an individual. Can include an
analysis of the individuals gait or handwriting, time delay between keystrokes when typing a passphrase. This is a strong
method of authentication, although have a higher rate of rejecting legitimate users as well.
7. Define the factor "Where you are": Geographically based authentication factor. Requires a person to be present in
a specific location. Think of a bank requiring you to go into a branch to change a PIN, rather than online. Online presents
a potential attacker that could change your PIN remotely.
8. What is Mutual Authentication?: Authentication Mechanism in which both parties in a transaction
authenticate each other. These parties are typically software-based. Client authenticates Server and vice versa.
1. What is the relationship between identification and authentication?: Identi- fication makes a claim about what
someone or something is. Authentication estab- lishes whether this claim is true.
2. In regard to Authentication, what are factors?: This helps to authenticate a claim of identity. These include:
- Something you know
- Something you are
- Something you have
- Something you do
- Where you are.
3. Define the factor "Something you know": This includes passwords or PINS. Generally viewed as a weak factor.
4. Define the factor "Something you are": Refers to the biometrics of an individual. Can include physical attributes
from the body such as height or eye color, although not common. This includes fingerprints, iris patterns, facia
characteristics.
5. Define the factor "Something you have": Generally based on physical posses- sion. ATM cards, state/federal ID
cards, software-based tokens (verification code)
6. Define the factor "Something you do": Factor based on the actions or behav- iors of an individual. Can include an
analysis of the individuals gait or handwriting, time delay between keystrokes when typing a passphrase. This is a strong
method of authentication, although have a higher rate of rejecting legitimate users as well.
7. Define the factor "Where you are": Geographically based authentication factor. Requires a person to be present in
a specific location. Think of a bank requiring you to go into a branch to change a PIN, rather than online. Online presents
a potential attacker that could change your PIN remotely.
8. What is Mutual Authentication?: Authentication Mechanism in which both parties in a transaction
authenticate each other. These parties are typically software-based. Client authenticates Server and vice versa.
