Authentication and Access Control

Single-factor authentication (typically a password) has several weaknesses that make it insufficient for secure systems. Two-factor authentication addresses these by requiring two independent forms of verification before granting access. Factor Type Example...

Two-Factor Authentication (2FA) is a security mechanism that requires a user to provide two distinct forms of verification from two different categories before granting access to a system or account. It adds an extra layer of security beyond just a username...

Definition: A phishing attack is a type of social engineering attack in which an attacker disguises themselves as a trustworthy entity to trick users into revealing sensitive information such as usernames, passwords, credit card numbers, or other confidenti...

Note: The reference notes did not contain this topic directly. The following answer is based on standard, correct information from access control theory as taught in security and operating systems courses. --- RBAC grants or restricts access to resources ba...

--- (a) Subjects, Objects, and Access Rights A subject is an active entity that requests access to resources or objects in a system. Subjects are typically users, processes, or programs that initiate actions. Examples: - A logged-in user requesting a file -...

Note: No specific curriculum notes were found for this topic. The following answer is based on standard, correct Computer Science / Information Security principles as taught in BSc CSIT Operating Systems and Information Security courses. --- Access control ...

Subjects (Users): U1, U2, U3 Objects (Files): F1, F2, F3, F4 Stated permissions: - U1: read and write on F2 and F3 - U2: read all files (F1, F2, F3, F4); write on F2 - U3: read on F3; append on F4 All permissions fully specified. Nothing missing. --- Rows =...

Dictionary attacks exploit the fact that users tend to choose weak, predictable passwords. An attacker uses a pre-compiled list of likely passwords (a "dictionary") and systematically tries each one. --- - The attacker directly interacts with the live authe...

Note: The reference notes did not contain this topic directly. The following answer is based on standard Information Security / Operating Systems curriculum as taught in BSc CSIT programs. --- Access control is a security mechanism that regulates who can ac...

--- User authentication faces several practical and security-related challenges: 1. Password Management Problems - Users tend to choose weak, easily guessable passwords - Password reuse across multiple systems increases vulnerability - Forgotten passwords l...

--- Access control is a security mechanism that regulates who or what can view, use, or perform operations on resources in a computing environment. It ensures that only authorized users can access specific resources and perform permitted actions. Access con...

Authentication is the process of verifying the identity of a user, system, or entity attempting to gain access to a resource. It is the mechanism by which a system confirms that someone is who they claim to be, typically before granting access to protected ...

--- An authentication system is a security mechanism that verifies the identity of a user, process, or device before granting access to a system or resource. It ensures that the entity claiming an identity is genuinely who or what it claims to be. --- An au...