#Security of #Information #Systems - Lecture 8 : User Authentication, Passwords, Tokens & Biometrics

#IT #IoT #Hacking #Internet #Computer #Cyber #Attack #Injection #Attacks #Course Hello everyone. My name is Furkan Gözükara, and I am a Computer Engineer Ph.D. Assistant Professor at the Software Engineering department.

In this course, we will learn general overview and some in depth information about how to secure online information systems.

Security of online systems and IT is a whole area of profession. You can become expert of this area and find very well paying jobs.

Security of Information Systems Full Course Playlist : https://www.youtube.com/playlist?list=PL_pbwdIyffslM_o92NwkaUzD7C6Fekx26

GitHub repository of the course : https://github.com/FurkanGozukara/Security-of-Information-Systems-CSE413-2020

Discord channel link of the course : https://discord.gg/6Mrb8MwteQ How to use Discord : https://youtu.be/AEwPtYiLvsQ

This course does not require you to have any knowledge about programming in any programming language.

However, if you want to start learning programming or develop your other Software Engineering related skills you can watch our below full courses:

[1] Introduction to Programming Full Course with C# playlist : https://www.youtube.com/playlist?list=PL_pbwdIyffskoSXySh0MdiayPJsBZ7m2o

[2] Object Oriented Programming Full Course with C# playlist : https://www.youtube.com/playlist?list=PL_pbwdIyffsnH3XJb66FDIHh1yHwWC26I

[3] Artificial Intelligence (AI) and Machine Learning (ML) Full Course with C# Examples playlist: https://www.youtube.com/playlist?list=PL_pbwdIyffskVschrADCL6KEnL_nqDtgD

[4] Software Engineering Full Course playlist : https://www.youtube.com/playlist?list=PL_pbwdIyffslgxMVyXhnHiSn_EWTvx1G-

[5] Security of Information Systems Full Course playlist : https://www.youtube.com/playlist?list=PL_pbwdIyffslM_o92NwkaUzD7C6Fekx26

[6] (Turkish) Bilgisayar Becerileri Tam Ders playlist : https://www.youtube.com/playlist?list=PL_pbwdIyffsmyE2e909ea1MXLcMb8MenG

Lecture 8 : User Authentication *** Outline • Context of user authentication – Identity and authentication steps • User Authentication – Knowledge-Based Authentication • Passwords – Ownership-Based Authentication • Tokens – Inherence-Based Authentication • Biometrics • Authentication frameworks for e-Government

• Taxonomy of Authentication
• Identity and Access Management (IAM) Phases
• User authentication credentials
• Knowledge-Based Authentication
• Authentication: Static passwords
• RockYou Hack
• Secure password strategies
• Strategies for strong passwords
• Password storage in OS
• Prevent exposure of password file
• Hash functions
• Cracking passwords
• Hash table and rainbow table attacks
• Password salting: Defence against password cracking
• Storing and checking passwords
• Problems with using passwords in the clear
• HTTP Digest Authentication ** A simple challenge-response protocol (rarely used)
• Ownership-Based Authenticatio ** Something you have: Tokens
• Taxonomy of Authentication Tokens
• Synchronised OTP (One-Time-Password) Generator
• Clock-based OTP Tokens: Operation
• Clock-based OTP Token Operation with (optional) input PIN
• Clock-based OTP Tokens:
• Hacking OTP Tokens
• Counter-based OTP Tokens: Overview
• Counter-based OTP Token Operation
• Challenge Response Based Tokens for User Authentication:
• Token-based User authentication Challenge Response Systems
• Contactless Cards: Overview
• Inherence-Based Authentication Biometrics
• Biometrics: Overview
• Biometrics: Requirements
• Biometrics: Practical considerations
• Biometrics Safety
• Biometrics: Modes of operation
• Extracting biometric features Example fingerprints: Extracting minutia
• Biometrics: System components
• Biometrics: Enrolment
• Biometrics: Verification
• Biometrics: Identification
• Evaluating Biometrics:
• Matching algorithm characteristics
• Evaluating Biometrics: System Errors
• Spoofing Biometrics: Presentation Attacks
• Authentication: Multi-factor
• Authentication Assurance
• e-Authentication Frameworks for e-Gov
• Alignment of e-Authentication Frameworks
• AAL: Authentication Assurance Level ** AAL is determined by the weakest of three links:
• eIDAS electronic IDentification, Authentication and trust Services
• Risk Analysis for eAuthentication
• Only Three AALs in Modern eAuth. Frameworks

Auto timed subtitle : success ... https://www.youtube.com/watch?v=b_A5nH2uz88