Cyberstudy
PDF p.85 In progress

Multifactor Authentication

Open PDF at p.85 10 flashcards

Summary

PDF p.85

Multifactor authentication (MFA) enhances security by combining multiple types of authentication factors, such as something you know (password), something you have (smart card), and something you are (biometric). This approach mitigates the weaknesses of single-factor authentication.

In plain words

Supplementary — not from your PDF

MFA combines different types of proof: something you know, something you have, and something you are. Location can add context. Two passwords is still one factor type, so it isn't MFA.

Detailed explanation

PDF p.85
  • Weakness of Single-Factor Authentication
    • Issue: Passwords alone are prone to compromise and are not reliable.
    • Solution: MFA supplements or replaces password-based logins with additional factors.
  • Authentication Factors
    • Something You Have (Ownership Factor)
      • Examples: Smart card, key fob, smartphone generating or receiving cryptographic tokens.
      • Purpose: Ensures the account holder possesses a unique item.
    • Something You Are (Biometric Factor)
      • Examples: Fingerprint, facial scan, gait analysis.
      • Process: Scanned identifiers are recorded as a template and compared during authentication.
    • Somewhere You Are (Location-Based Factor)
      • Examples: Geographic location via device's location service, IP address.
      • Usage: Not a primary factor but used for continuous authentication or access control.
      • Application: Restricts access based on unexpected locations or impossible travel times.
  • Multifactor Authentication (MFA)
    • Definition: Combines different types of factors for stronger security.
    • Example: Using a PIN and a smart card together.
  • Two-Factor Authentication (2FA)
    • Definition: A specific type of MFA involving exactly two factors.
    • Example: Combining a password with a biometric identifier.

Important terms

taken from the text above
Multifactor Authentication (MFA)
Combines different types of factors for stronger security.
Two-Factor Authentication (2FA)
A specific type of MFA involving exactly two factors.
MFA Multifactor authentication

Examples & real-world scenarios

Supplementary — not from your PDF
  • Password + phone authenticator code.
  • Smart card + PIN.
  • Blocking a login from a country the user has never visited.

Scenario

An attacker phishes a user's password but can't log in because the account also needs a code from the user's phone. The second factor stopped the takeover.

Common mistakes

Supplementary — not from your PDF
  • Calling password + security question 'MFA'. Both are knowledge factors.
  • Treating location as a main factor. It usually supports decisions such as extra checks or blocking.

Practical skills

Supplementary — not from your PDF
  • Classify a login method by its factor types.

What I should remember

Key Points PDF p.85
  • Weakness of Single-Factor Authentication
    • Compromise Risk: Passwords alone are unreliable.
    • MFA Solution: Adds additional factors for security.
  • Authentication Factors
    • Ownership Factor: Smart card, key fob, smartphone.
    • Biometric Factor: Fingerprint, facial scan, gait.
    • Location-Based Factor: Geographic location, IP address.
  • MFA
    • Combination: Uses multiple factors.
    • Example: PIN and smart card.
  • 2FA
    • Two Factors: Exactly two types of factors.
    • Example: Password and biometric.