1.2 Authentication, Authorization, and Accounting

authentication

the process of verifying a users identify before providing access. The most common forms involve login in with credentials

authentication

login in with credentials and other methods is the most common form of

authorization

determine the resources and data a user has access after being authenticated.

accounting

keeping track of user’s logins, resources used, and data accesed.

AAA framework

what framework does authentication, authorization, and accounting form. Hint, the first letter of each word.

AAA server

a server that compares provided credentials to stored credentials and grant authentication and authorization if theirs a match. It also provides cyber professionals with login data.

authentication and authorization

a user on a client device provides login credentials to login into VPN to gain access to an internal file server. There credentials are compared against a database of credentials on an AAA server and if found grants the user access to the VPN and internal file server. This is an example of

certificate

something added to a device to verify it’s authenticity before granting authorization

authenticating systems

a certificate that verifies that a device is from the company is an example of

certificate authority

a software or device that manages certificates for an organization’s devices by providing certificates to devices and validating them.

authorization model

a framework that determines what resources and data a user has access to. It’s usually based on role, organization, etc.

rights and permissions

alternative to an authorization model where authorization is granted to users for each resource or data separately

rights and permissions

an employee working in shipping gaining access to different resources individually is an example of

authorization model

members of the shipping department being added to a group called shipping and label that has access to relevant resources such as creating shipping labels and tracking packages is an example of using an