课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Authentication, authorization, and accounting (AAA)

Authentication, authorization, and accounting (AAA)

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Authentication, authorization, and accounting (AAA)

“

- [Instructor] As security professionals, one of the most important things that we do is ensure that only authorized individuals gain access to information, systems, and networks under our protection. The access control process consists of three steps that you need to understand. These steps are identification, authentication, and authorization. During the first step of the process, identification, an individual makes a claim about their identity. The person trying to gain access doesn't present any proof at this point; they simply make an assertion. It's important to remember that the identification step is only a claim and the user could be making a false claim. Imagine a physical world scenario where you want to enter a secure office building where you have an appointment. During the identification step of the process, you might walk up to the security desk and say, "Hi, I'm Mike Chapple." Proof comes into play during the second step of the process, authentication. During the…

内容