Authentication, Authorization, and Accounting.

The process of removing access and disabling accounts when no longer needed.

Authentication using physical closeness, often via tokens or smart cards.

A network authentication protocol using tickets to securely manage credentials.

Grant users only the access necessary to perform their job functions.

Using cookies to maintain state and memory of user sessions.

Providing temporary access to resources as needed for specific tasks.

Knowledge (something you know), Possession (something you have), Inherence (something you are), Location, Behavior.

To ensure identities are managed properly and comply with policies.

To verify identity and establish trust, often in PKI systems.

Vulnerable to guesswork, brute-force attacks, and poor user management practices.

The process of determining access rights and permissions for an authenticated user.

To store and manage information about users and resources in a network.

The process of verifying the identity of a user or system.

Discretionary Access Control allows data owners to set permissions, Mandatory Access Control enforces permissions based on policies.

Multifactor Authentication - using two or more factors for authentication.

Single Sign-On.

Linking a user's digital identity across multiple systems or organizations.

Role-Based Access Control, assigns access based on roles within an organization.

Attribute-Based Access Control, assigns access based on attributes like user, resource, or environment.

The process of creating and enabling user accounts and access rights.

To restrict and manage user access to resources based on policies.

The process of verifying identity during enrollment or account creation.

A list defining the permissions for various users or systems to access a resource.

Lightweight Directory Access Protocol, used to access and manage directory information.