Exam 3: User Authentication

The technique for developing an effective and efficient proactive password checker based on rejecting words on a list is based on the use of a __________ filter.

User authentication is the fundamental building block and the primaryline of defense.

A __________ is a password guessing program.

Each individual who is to be included in the database of authorized users must first be __________ in the system.

__________ defines user authentication as "the process of verifying an identity claimed by or for a system entity".

A __________ is directed at the user file at the host where passwords, token passcodes, or biometric templates are stored.

A __________ attack involves an adversary repeating a previously captured user response.

An institution that issues debit cards to cardholders and is responsible for the cardholder's account and authorizing transactions is the _________.

Identification is the means of establishing the validity of a claimedidentity provided by a user.

Identifiers should be assigned carefully because authenticatedidentities are the basis for other security services.

A __________ strategy is one in which the system periodically runs its own password cracker to find guessable passwords.

Voice pattern, handwriting characteristics, and typing rhythm are examples of __________ biometrics.

Enrollment creates an association between a user and the user'sbiometric characteristics.

A __________ is a separate file from the user IDs where hashed passwords are kept.

A smart card contains an entire microprocessor.

In a __________ attack, an application or physical device masquerades as an authentic application or device for the purpose of capturing a user password, passcode, or biometric.

An authentication process consists of the _________ step and the verification step.

User authentication is a procedure that allows communicating parties toverify that the contents of a received message have not been altered and that the source is authentic.

Memory cards store and process data.

User authentication is the basis for most types of access control and foruser accountability.