290 likes | 305 Views
Password Awareness. Authentication. Who Are You?. Authentication. Something you know Password PIN # Secret Handshake (OG). Authentication. Something you have Phone Smart Card USB Drive. Authentication. Something you are Face Scan Fingerprint Iris Scan.
E N D
Authentication Who Are You?
Authentication • Something you know • Password • PIN # • Secret Handshake (OG)
Authentication • Something you have • Phone • Smart Card • USB Drive
Authentication • Something you are • Face Scan • Fingerprint • Iris Scan
Access vs. Information Security • Balancing Act • Password Complexity • Number of Factors • Biometric Sensitivity
Out of Balance Password • iPhone Password: 000000
Duel-Factor Out of Balance • Who is this?
Duel-Factor Out of Balance ? ? ? ? ? ? ? ? ? ? ? • Benedict Cumberbatch – Password?
Basic PasswordGuidelines Basic Rules?
Basic PasswordGuidelines • Don’t Post/Text/Share Your Password • Don’t Use Just One Password for All Accounts • Don’t Use Personal Information • Beware of Phishing • Beware of Shoulder Surfing • Don’t Save Passwords in a Browser
What Makes a Good Password? Hard for Computers to Guess
Hard for Computers to Guess Entropy
Hard for Computers to Guess • Entropy • Degree of Disorder • Randomness
Hard for Computers to Guess • Entropy Factors • Password Length • Character Set
What Makes a Good Password? Easy for Humans to Remember
Easy for Humans to Remember Passphrase
Easy for Humans to Remember Don’t Get Me Involved with Some Crazy Process
Password Check http://www.passwordmeter.com/
Easy for Humans to Remember Passphrase to Password DGMIwSCP
Password Check http://www.passwordmeter.com/
Adding Entropy DGMIwSCP D&m1W$c9
Password Check http://www.passwordmeter.com/
Password Managers • LastPass • 1Password • @Keeper
Information Assurance Program at UNM • http://ia.unm.edu