SECTION 13

IAAA Model

Identification, Authentication, Authorization, and Accountability model used for security protocols.

Identification

Process of confirming who you are through information like name, username, or employee number.

Multifactor Authentication

Using at least two types of authentication factors - something you know, have, or are.

Knowledge-based Authentication

Type of authentication using information known only to the user, like passwords.

Password Security

Guidelines like length, complexity, expiration, and not reusing passwords to enhance security.

Key Stretching

Adding a delay to login times to deter brute-force attacks on passwords.

Clipping Levels

Locking an account after multiple failed login attempts to prevent unauthorized access.

Security vs

Balancing the need for security measures with ensuring ease of use for end-users.