1. Single SignOn
1.1. Windows Live ID
1.1.1. Centralized and uses Cookies
1.2. Open ID
1.2.1. Decentralized open source FIM
1.3. Opne Authorization (OAuth)
1.3.1. Relies on Tokens
1.4. The idea behind identity management is using a single authentication credential that is shared across multiple networks. When the networks are owned by different organizations, it is call Federated Identity Management (FIM)
2. Account Management
2.1. Group password settings
2.1.1. Password policy settings
2.1.1.1. Password setting objects
2.1.1.1.1. Enforce password history
2.1.1.1.2. Maximum password age
2.1.1.1.3. Minimum password age
2.1.1.1.4. Minimum password length
2.1.1.1.5. Complexity requirements
2.1.1.1.6. Reversible encryption
2.1.2. Account lockout policy settings
2.1.2.1. Account lockout duration
2.1.2.2. Account lockout threshold
2.1.2.3. Reset account lockout counter after
3. Trusted Operating Systems
3.1. Can have basic flaws
3.1.1. millions of lines of code making vulnerabilities difficult to recognize
3.1.2. do not isolate apps from each other
3.1.3. lack a facility for apps to authenticate themselves to each other
3.1.4. Cannot create a trusted path between users and apps
3.1.5. Do not use the principle of least privilege
4. Authentication Credintials
4.1. What you know: Password
4.1.1. Attacks on password
4.1.1.1. Social engineering
4.1.1.2. Resetting
4.1.1.3. Online guessing
4.1.1.4. Offline cracking
4.1.1.4.1. Brute force
4.1.1.4.2. Dictionary attack
4.1.2. Password defenses
4.1.2.1. Creating strong passwords
4.1.2.2. Managing passwords
4.1.2.2.1. Password supplements rely on technology rather than human memory
4.1.2.2.2. Password management applications
4.1.3. Creating strong passwords
4.1.4. Managing passwords
4.1.5. Password weakness
4.2. What you have: token and cards
4.2.1. Tokens
4.2.1.1. The token and authentication server have the same agorithm and time setting
4.2.2. Cards
4.2.2.1. Smart Cards
4.2.2.1.1. one type of smart card is Common Access Card (CAC)
4.3. What you are: Biomentrix
4.3.1. Standard Biometrics
4.3.1.1. Face
4.3.1.2. Hands
4.3.1.3. Eyes
4.3.2. Behavioral Biometrics
4.3.2.1. Keystroke dynamics
4.3.2.1.1. dwell time
4.3.2.1.2. flight time
4.3.2.2. Voice recognition
4.3.2.3. Computer footprinting
4.3.2.3.1. Geographic location
4.3.2.3.2. Time of day
4.3.2.3.3. ISP
4.3.2.3.4. PC Configuration
4.3.3. Cognitive Biometrics
4.3.3.1. Identify specific faces
4.3.3.2. Based on life experience