Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

2. Knock, Knock. Who’s There?

Chapter Spotlight

• Identification and authentication

• Identification failures

• Strong authentication: based on something you know, are, or have

• Physiological properties and authentication

• The relationship between privacy and strong authentication: anonymous access and pseudonyms

• The relationship between usability and strong authentication

Attack: Impersonation 39

Attack Detail: Failed Authentication 40

Vulnerability: Faulty or Incomplete Authentication 41

Countermeasure: Strong Authentication 47

Conclusion 64

Recurring Thread: Privacy 67

Recurring Thread: Usability 69

Exercises 71

Your neighbor recognizes you, sees you frequently, and knows you are someone who should be going into your home. Your ...