1. Authentication and Account Management
MTI College

2. Objectives Describe the different types of authentication credentials
Explain what single sign-on can do
List account management procedures

3. Authentications Credentials
What you have?
What you know?
What you are?
Where you are?
What you do?

4. Passwords Complex does not always mean better  Risk
Each password should be unique
Passw0rd is not more secure than Password.
Lets take a look at some common passwords (Are you on this list)
Statistical analysis

5. Password Attacks Social Engineering Capturing Resetting Bruteforce
Dictionary Attack
Hybrid Attack
Rainbow Tables
Password Collections

6. Password Defenses Do not use dictionary words Do not repeat characters
Password complexity
Longer passwords are always more secure
See table 12-2
Credential Managemetn
Keepass (Demo)

7. Password Hashing Demo – John the Ripper Microsoft Windows: Salts
LAN Manager hash
New Technology LAN Manager hash
Salts

8. What You Have?
Tokens: Small device which grants the user a number. These tokens are referred to as one-time password (OTP)
Time Based
HMAC-Based – Event Based (Pin)
Cards
Integrated Chip
Requires card reader
Common Access Card (CAC)
Cell Phones
Can replace Cards and Tokens

9. What You Are? Biometrics
Utilize unique physical characteristics for authentication.
Fingerprint Scanners
Static – Take a whole picture for analysis
Dynamic – Swipe your finger for analysis
Cognitive Biometrics

10. What You Do? Keystroke Dynamics Voice Recognition
Recognize unique typing rhythm
Dwell time – time it takes for a key to be pressed and then release
Voice Recognition
Authenticate users based on unique characteristics of voice.

11. Where You Are?
Geo-Location

12. Single Sign-On Federated Identity Management (FIM) (Federation)
Utilizing one authentication credential to access multiple accounts or applications.
Reduce number of usernames/passwords
Single point of entry
Microsoft Account – office 365
OpenID – Opensource is a URL based identity system.

13. Account Management Password History Max Password Age Min Password Age
Minimum Password Length
Passwords must meet complexity requirements
Store passwords using reversible encryption
(ALL OF THESE SHOULD BE SET IN GROUP POLICY)