Syngress - Eleventh Hour Network+ Exam N10-004 Study Guide (11 ...

132 CHAPTER 8 Security Standards and Services
ONE-FACTOR
With one-factor authentication, only one form of authenticator is used in
conjunction with a username. Often, the single authenticator is a password, or
PIN. Password policies come in the following three security levels:
■ Low (or no) – six characters long or less.
■ Medium – between 8 and 13 characters.
■ High – policies requiring 14 or more characters.
Additionally, all password policies, regardless of password length, should require
an acceptable password that contains a combination of the following:
■
■
■
■
■
■
Uppercase and lowercase alphabetic characters
Numbers
Special characters
No dictionary words
No portion of the username in the password
No personal identifiers should be used, including birthdays, social security
number, pet’s name, and so on.
TWO-FACTOR
Two-factor authentication can be implemented by requiring a user to provide
an authenticator from two categories of authenticators. To misuse your authentication
credentials in a two-factor authentication scheme, an attacker must
acquire both.
Token technology is a method that can be used in networks and facilities to authenticate
users. The tokens are a physical device used for the randomization of a code
that can be used to assure the identity of the individual or service that has control
of them.
MULTIFACTOR
Three-factor authentication or commonly known as multifactor authentication
should use three independent authentication mechanisms available. The following
are four possible types of factors that can be used in a multifactor
authentication implementation:
■
■
■
■
A password or a PIN can be defined as a something you know factor.
A token or Smart Card can be defined as a something you have factor.
A thumbprint, retina, hand, or other biometrically identifiable item can be
defined as a something you are factor.
Voice or handwriting analysis can be used as a something you do factor.
SINGLE SIGN-ON
Single Sign-On (SSO) is a process in which we simplify the access to different
systems by authenticating the user once. Benefits of SSO include direct reduction
in password fatigue that users experience by having to logon to and keep
track of so many different authentication credentials and simplified management.
SSO can be implemented through various network operating systems (NOS)