Exam 3: User Authentication

__________ systems identify features of the hand,including shape,and lengths and widths of fingers.

An authentication process consists of the _________ step and the verification step.

A __________ is when an adversary attempts to achieve user authentication without access to the remote host or to the intervening communications path.

A good technique for choosing a password is to use the first letter of each word of a phrase.

The __________ is the pattern formed by veins beneath the retinal surface.

A __________ is an individual to whom a debit card is issued.

An individual's signature is not unique enough to use in biometric applications.

Memory cards store and process data.

User authentication is the basis for most types of access control and for user accountability.

Enrollment creates an association between a user and the user's biometric characteristics.

A host generated random number is often called a __________.

Each individual who is to be included in the database of authorized users must first be __________ in the system.

__________,in the context of passwords,refers to an adversary's attempt to learn the password by observing the user,finding a written copy of the password,or some similar attack that involves the physical proximity of user and adversary.

__________ defines user authentication as "the process of verifying an identity claimed by or for a system entity".

Depending on the application,user authentication on a biometric system involves either verification or identification.

An institution that issues debit cards to cardholders and is responsible for the cardholder's account and authorizing transactions is the _________.

In a biometric scheme some physical characteristic of the individual is mapped into a digital representation.

A __________ strategy is one in which the system periodically runs its own password cracker to find guessable passwords.

In a __________ attack,an application or physical device masquerades as an authentic application or device for the purpose of capturing a user password,passcode,or biometric.

Identifiers should be assigned carefully because authenticated identities are the basis for other security services.