Security and Information Protection

Identification is the means through which a user is associated with and gains access to an account. The most common form of identification in use with computer systems is through the use of a username. Other systems use Common Access Cards (CAC), smart cards, or tokens combined with a pin code that allow for access to a system. More complex, high security systems might use some form of biometric to associate a user with an account and permission set. Biometrics include: fingerprint, iris scan, facial scan etc.. something that is unique to the particular person that cannot be easily altered. Identification allows for the tracking

The specific purpose of this paper is to describe the authentication process and to describe how this and other information security considerations will affect the design and development process for new information systems.

Antivirus software is something we use to protect our computers from viruses .we use software's such as Norton security and MacAfee.

Authentication factors could be classified into four factors which are, factors that users never forget, factors that people use to get access, factors that people have on their body, and the location. To explain more, multifactor authentication is recommended because of the security incidents these days. The worst factor that I used in my life is password because it does provide less security and anyone could guess passwords. Right now, I am using passphrases even in my social media accounts. Another example is the PIN number at the ATM machine, it provides security but sometimes not active because of the scammers. Mobile applications help a lot in our life and some application have security roles that ensures the security and privacy. Biometric is another important method in protection using fingerprint is the most common way. Finally, getting the location of the user is an important method for security, a good example is location services in the phone or

Describe how and why authentication credentials are used to identify and control access to files, screens, and systems. Include a discussion of the principles of authentication such as passwords, multifactor authentication, biometrics, and single-sign-on.

Encryption is the conversion of electronic data into another form, called cipher text, which cannot be easily understood by anyone except authorized parties. The primary purpose of encryption is to protect the confidentiality of digital data stored on computer systems or transmitted via the Internet or other computer networks. Modern encryption algorithms play

Step1. The client starts to utilize a Kerberized application by entering the client name and password. Alternatively, the client can ask for particular ticket signals and indicate the key sort to be utilized for developing the secret key. The client can likewise acknowledge the default, arranged for the customer. The client sends the following data to the Authentication Service (AS) to acquire qualifications:

1.Basic Authentication- Basic authentication is one of the two mechanisms in HTTP 1.1 specification . It required the safe http communication i.e. https communication for encoding.

Encryption is a method of encoding a message or information before sending it, so unauthorized users can’t access it without permission and only the person who has authorised access to it can decode it. Encryption is used to keep things secure and keep things confidential within the organisation. For example let’s say you have a chat with a friend on Skype, when you’re sending a message to him, that message will display as random symbols until he receives it, which then decodes it and makes it so that only he can read it. This allows the communication to be secure and private, no one will be able to know what the message says.

Encyption takes data and transforms it into unreadable jargon until a key is used to unlock or decrypt the data back to its original form. Due to its near infallibility, encryption is one the most best ways to secure data (Williams & Sawyer, 2015).

Authentication: It enables the mobile nodes to ensure the identity of the nodes they are communicating with. With this it provides the secure communication among the nodes. It also helps in identifying the false identity of nodes. This avoids the unauthorized nodes to gain access of the other nodes.

So, once you have successfully authenticated, you have now finished two parts: first, you have identified to the banker or immigration departments you are someone. Second, you have proven to them that you are the same actual person.

* Persistent Security: Content needs to be secured independent of time and location. Long-lived authentication ensures this by protecting information that is in-transit, stored in a database, or being processed by an application. Persistent security also involves guarding information in a mixed workflow environment – including e-mail, file transfers, EDI, mobile applications, and Web Services

Authentication is the only method which protects information or data of an individual or organization from a second party to access. Based upon the confidentiality of that particular data or information, the level of authentication depends. Now-a-days, all this data and information what we are talking about is getting digitized all around the world. For this digitized data or information to be secure, a proper authentication procedure must be set. This arise the need for an authentication secret which belongs to the category “Something we know” to come into picture. These secrets authenticate each secret holder as the authorized legitimate user to access their particular account. Technology is

Confidentiality: Access controls help ensure that only authorized subjects can access objects. When unauthorized entities are able to access systems or data, it results in a loss of confidentiality.