Module 8 Security Technology: Access Controls, Firewalls, and VPNs

This set of flashcards captures key vocabulary terms and definitions related to access controls, firewalls, and VPNs as per the lecture transcript.

Access Control

The selective method by which systems specify who may use a particular resource and how they may use it.

Authentication

The process of validating and verifying an unauthenticated entity's purported identity.

Authorization

The access control mechanism that matches an authenticated entity to a list of information assets and corresponding access levels.

Accountability

The access control mechanism that ensures all actions on a system can be attributed to an authenticated identity.

Mandatory Access Control (MAC)

A structured data classification scheme that rates each collection of information as well as each user.

Discretionary Access Control (DAC)

Access controls that are implemented at the discretion of the data user.

Nondiscretionary Access Control

Access controls that are implemented by a central authority.

Role-Based Access Control (RBAC)

Access control associated with the duties a user performs in an organization.

Task-Based Access Control (TBAC)

Access controls tied to a specific task or responsibility.

Biometrics

The use of measurable human characteristics to authenticate identity.

Crossover Error Rate (CER)

The point at which false reject rates equal false accept rates; a common measure of biometric accuracy.

Firewall

A combination of hardware and software that filters or prevents specific information from moving between untrusted and trusted networks.

Packet Filtering

A firewall processing mode examining the header information of data packets.

Stateful Packet Inspection (SPI)

A firewall that keeps track of each network connection using a state table.

Virtual Private Network (VPN)

A secure network connection that extends an organization’s internal network over insecure public networks.

Tunnel Mode VPN

A mode that encrypts all traffic that traverses unsecured networks by using two perimeter tunnel servers.

Transport Mode VPN

A mode where the data within an IP packet is encrypted, but the header information is not.