Authentication, Authorization, and Accounting (AAA) Framework

These flashcards encompass key vocabulary related to the authentication, authorization, and accounting (AAA) framework in network security.

Authentication

The process of proving that you are who you claim to be, usually by using a username and password.

Authorization

The process of determining what resources a user has access to after authentication has been successful.

Accounting

The recording of actions and access history within a security system.

AAA Framework

An acronym for Authentication, Authorization, and Accounting, which describes a framework for access control in systems.

VPN Concentrator

A hardware device that creates and manages VPN communication, allowing secure access to a network.

Certificate Authority (CA)

A trusted entity that issues digital certificates to verify the ownership of public keys.

Authorization Model

A framework to define access rights and permissions for users based on roles and attributes.

Digital Certificate

An electronic document used to prove the ownership of a public key, signed by a Certificate Authority.

Root CA

The top-level Certificate Authority in a certificate hierarchy that signs the certificates of lower-level CAs.

Access Control

A security technique that regulates who or what can view or use resources in a computing environment.

Multifactor Authentication (MFA)

A security system that requires more than 1 method of authentication from independent categories of credentials to verify identity.

Single Sign-On (SSO)

An authentication process that allows a user to access multiple applications with 1 set of login credentials.

Public Key Infrastructure (PKI)

A system of processes, technologies, and policies used to create, manage, distribute, and revoke digital certificates.

Identity Provider (IdP)

A system entity that creates, maintains, and manages identity information for principals while providing authentication services.

RADIUS

A networking protocol that provides centralized AAA management for users who connect and use a network service.

TACACSplus

A proprietary Cisco protocol that provides detailed AAA security services, separating authentication, authorization, and accounting functions.

Role-Based Access Control (RBAC)

An access control model that assigns permissions to roles rather than individual users, simplifying management.

Principle of Least Privilege (PoLP)

A security concept where users are granted the minimum level of access or permissions needed to perform their job functions.