2. Authentication and Access Management

AAA

Authentication, Authorization, and Accounting: Framework for controlling access to resources

CHAP

Challenge Handshake Authentication Protocol: Protocol that verifies identity through a three-way handshake

DAC

Discretionary Access Control: Access control policy determined by resource owner

EAP

Extensible Authentication Protocol: Authentication framework frequently used in wireless networks

FACL

File System Access Control List: Method for defining access rights to files

GPO

Group Policy Object: Collection of settings that define what a system will look like for specific users

IAM

Identity and Access Management: Framework for managing digital identities and access

LDAP

Lightweight Directory Access Protocol: Protocol for accessing directory information services

LEAP

Lightweight Extensible Authentication Protocol: Cisco proprietary EAP method

MAC

Mandatory Access Control: Access control policy where security policy determines access

MFA

Multifactor Authentication: Authentication requiring two or more verification methods

MSCHAP

Microsoft Challenge Handshake Authentication Protocol: Microsoft's implementation of CHAP

NAC

Network Access Control: Approach to securing network access based on policies

OAUTH

Open Authorization: Protocol allowing third-party limited access to resources

PAM

Privileged Access Management: Technologies for controlling elevated access

PAM

Pluggable Authentication Modules: Framework for authentication-related services

PAP

Password Authentication Protocol: Basic authentication protocol that sends credentials in plaintext

PEAP

Protected Extensible Authentication Protocol: Protocol that encapsulates EAP within an encrypted TLS tunnel

RADIUS

Remote Authentication Dial-in User Service: Protocol providing centralized authentication and authorization

RBAC

Role-based Access Control: Access control based on user roles within an organization

RBAC

Rule-based Access Control: Access control based on predefined rules

SAE

Simultaneous Authentication of Equals: Password-authenticated key agreement method

SAML

Security Assertions Markup Language: XML standard for exchanging authentication data

SSO

Single Sign-on: Authentication service allowing one set of credentials across multiple systems

TACACS+

Terminal Access Controller Access Control System: Protocol for authentication, authorization, and accounting