Basisphilosophie
Thema drucken
12.01.2019 08:51
|
When collecting and analyzing authentication requirements Davis Webb Jersey , remember this question: Can a user using a specific 70-291 device securely authenticate to the device andor securely authenticate to the organization's network? The designer cannot stop with the "can" part of the equation but must keep the "securely" part in mind. The definition of a secure connection will depend on the organization's specification in its security policy, the designer's knowledge of best practices, and an analysis that might be device specific. (Some devices might not meet requirements even if their specifications appear to say they will. For example, device specifications might state a capability, such as using a virtual private network [VPN] Dalvin Tomlinson Jersey , that will meet the security policy requirement, but in practice the device might not manage more than a few connections.) To analyze authentication requirements for clients, follow these steps: 1.Collect information on each of the technologies and authentication processes that might be used to connect to the organization's resources: Technologies for computer (or computing device) authentication Technologies for user authentication Network authentication, including LAN and remote access authentication Device-specific authentication Modification of authentication credentials capabilities 2.Determine where authentication processes might be weakened because of the need to use MCSE exams less secure technologies or "weaker password processes. 3 Determine where a technology can use a stronger authentication process or stay the same. 4. Determine where a technology cannot meet the organization's security policy. 5 Determine where integration with existing directories will mean a separate direc?tory. 6.Determine where single sign-on cannot be achieved. 7.Determine whether alternative authentication technologies, such as biometrics or smart cards Evan Engram Jersey , can be used to strengthen the authentication process. The following sections apply the preceding steps to current technologies. You must also investigate each device to determine its capabilities and needs. For example, most cellular voice-only phones do not provide device authentication. If you have physical possession of the phone, you can use it to make a call. Other cellular phones, many with limited data capabilities, do provide simple authentication schemes such as the need to enter PIN numbers before they can be activated. Still other phones Will Hernandez Jersey , smart phones (phones that can become clients in remote applications or provide capabilities similar to PDAs), and PDAphone combinations might provide more sophisti?cated authentication schemes. You can no longer assume that a device holds a+ certification no data storage, synchronization, or direct connection capabilities. |
|
Antworten
