Authentication and Access Control

Authentication in this days is not only having a password, today in a distributed client server a user might have several client programs running on her desktop which access server programs uses remote computers across a network and in such environment, the server must authenticate the client run on behalf of a legitimate user.

Modern computer systems provide services to multiple users and require the ability to accurately identify the user making a request. From services like banks or assurance, is not enough to verify a given password because in a network, its a package that can be intercepted and subsequently used to impersonate a user. Nowadays, servers save the behaviour of the users and can detect an abnormal state in the way a person interacts with the system and can activate a flag that it may be an attacker.

Also now the cryptography is an essential tool in the network communication because it can be a intercepted package, but if you dont have the acces key or the security key, you won't be able to read or interprate the package.


Comments

Post a Comment

Popular posts from this blog

Ethical hacking

Image
The ACM in 1992 adopted the ACM Code of Ethics and Professional Conduct, it consist of 24 statements of personal responsibility. Some of them are: Contribute to society and human well being, Avoid harm to others, Be honest and trustworthy, Respect privacy to others, Honor confidentiality, etc. Some of them involve more professional topics like: Strive to achieve highest quality, Acquire and maintain professional competence, Know and respect existing laws, Honor contracts, agreements and assigned responsibilities, etc. To the full article you can check this website  https://www.acm.org/about-acm/acm-code-of-ethics-and-professional-conduct#sect1 . Here are some existing and really serious example of some of the statutes written in the code of ethics that this author believes is important for the reader: 1) don't spy the work of others 2) Respect the plants   3) Don't harm other ppl 4) Don't enter the girls bathroom 5) Be careful with the water, you ca...
Read more

PGP Security!

Image
The PGP (Pretty Good Privacy) is a crypto system that combines symmetric and asymmetric techniques of encryption, developed by Phil Zimmermann which goal was to protect the distributed data across the internet with a digital signature or key. PGP offers authentication of messages and verification of it's integrity in case the message has been compromised and to know if the message has been read by the person that is supposed to. This is the tutorial I followed, in this video you can check how to send a encrypted message and how to decrypt. ( http://notes.jerzygangi.com/the-best-pgp-tutorial-for-mac-os-x-ever/ )
Read more