In general, access control governs each user's ability to read, execute,change, or delete information associated with a particular computer resource. We explore the concepts thatunderlie AAA further in the sections that follow. But, thesethree concepts provide a firm foundation on which security controls of all kindsmay rest, from relatively lax or optimistic security regimes, all the way toextremely rigorous or pessimistic security regimes. The levels of access control, the types and rigor of authentication methodsand technologies, and the degree to which accounting is applied to individualactivities and operations vary according to the security requirements orpolicies associated with specific situations and implementations. Systematically tracks and records the operations andactivities undertaken by individuals or accounts while they're active in asystem or working environment (accounting).Īuthentication Methods These three types of authentication arecommonly referred to as something you have (physical token), something you know(shared secret), and something you are (biometric measure). Process of verifying a user's identitythrough the use of a shared secret (such as a password), a physical token (suchas a key), or a biometric measure (such as a fingerprint).Īccounting. Access controls usually rest on somenotion of identity, which may be associated with a specific individual oraccount, or with a group to which that individual or account belongs.Īuthentication. Manages which individuals or accounts may interactwith specific resources, and governs what kinds of operations such individualsor accounts may perform on those resources. The "AAA" concept is the cornerstone of any systematic disciplineof security (IT or otherwise). Identify, specify, or describe good access control and authenticationprocesses and techniques.
Learn More Buy AAA Overview: Access Control, Authentication, and Accounting
0 kommentar(er)
