课程: Threat Modeling: Spoofing In Depth
今天就学习课程吧!
今天就开通帐号,24,700 门业界名师课程任您挑!
Account creation
- Some systems don't have any authentication, like a TV. Why would a TV have a password? I might want my hotel room TV to have one, especially if there are kids around. The need for authentication is situational. Once you know you want authentication, you need to decide what it'll be. A very common pattern on multi-user systems is the combination of an identifier, or username, and an authenticator like a password. That doesn't exist on a TV. Even a hotel TV has just one account, like a phone in 2015. Accounts don't just spring into existence. There's a process for making each one. The intensity of that process ranges from show up and ask for one to get a job, undergo a thorough background check, sign a contract, and then an administrator creates the account. That process is called account creation, account issuance, or even identity issuance. I don't know what sort of weirdo issues an identity sounds very man in the gray…