User Authentication

Question 1

What are the two steps of User Authentication?

Answer 1

Identification, Verification

Question 2

What are three approaches to authentication?

Answer 2

What you know (password), what you have (a key), who you are (fingerprint)

Question 3

Attack against Password Authentication: What is Phishing as an attack? Countermeasure to this Phishing?

Answer 3

Make a fake website that user puts password into. Server-side authentication so you know server is legit

Question 4

Attack against Password Authentication: What is Interception as an attack? Countermeasure to this Interception?

Answer 4

Attacker intercepts password being written. Encrypt communication between users and websites

Question 5

What are 2 measures against password brute force attacks?

Answer 5

Lock out after certain amount of attempts, Password policies (e,g, minimum password length)

Question 6

What are 2 ways of measuring the effectiveness of a password?

Answer 6

Password Strength, Entropy

Question 7

How is Password Strength calculated?

Answer 7

|Alphabet| ^ length of password

Question 8

How is Entropy calculated?

Answer 8

n * log base 2 |a|