In this video, I explain authentication and authorization as part of logical access controls.

✔Accounting students or CPA Exam candidates, check my website for additional resources: https://farhatlectures.com/

#cpaexaminindia #cpaexam #cpaevolution

Logical access controls are methods, policies, and procedures that manage access to computer systems and network resources. They control user interactions with operating systems, applications, and data, ensuring that only authorized users can access certain resources and perform allowable actions.
Authentication is a security process that verifies the identity of users, systems, or services. It is a fundamental component of logical access control and is crucial for ensuring that only authorized individuals or systems can access secured resources or data.

Methods of Authentication:
1. Something You Know (Knowledge Factors):
Password/PIN: The most common form of authentication. It requires users to provide a secret known only to them and the authentication system.
Example: Logging into an email account with a username and password.
2. Something You Have (Possession Factors):
Security Token/Smart Card: A physical device that generates a timesensitive code or needs to be connected to the system for granting access.
Example: Using a hardware token that generates a temporary code to log into a secure system.
3. Something You Are (Inherence Factors):
Biometrics: Uses unique biological characteristics for identification.
Example: Using fingerprint recognition or facial recognition to unlock a smartphone.
4. Somewhere You Are (Location Factors):
Geolocation: Uses the geographical location of the user as an additional layer of authentication.
Example: Restricting access to a service to users connecting from a specific country or region.
5. Something You Do (Behavioral Factors):
Behavioral Biometrics: Analyzes the unique ways in which individuals interact with systems.
Example: Analyzing keystroke dynamics or mouse movement patterns to identify a user.
MultiFactor Authentication (MFA):
MultiFactor Authentication requires users to provide two or more of the above authentication factors, significantly increasing security.

Example: Logging into a bank account online may require a password (something you know) and a temporary code sent to a mobile device (something you have).
Advanced Authentication Methods:
1. Adaptive Authentication:
Uses various attributes like device, location, time of access, etc., to assess the risk level and adapt the authentication process accordingly.
Example: Requesting additional verification if a user is logging in from a new device or unusual location.
2. Single SignOn (SSO):
Allows users to log in once and gain access to multiple systems without being prompted to log in again.
Example: Logging into a Google account and having access to Gmail, Google Drive, and Google Photos without needing to log in separately.
Use of Authentication in Systems and Applications:
Almost every system and application that requires user access employs some form of authentication:

Operating Systems: Require users to log in with a username and password and possibly a second factor like a fingerprint.
Web Applications: Typically use a combination of username and password, with options for MFA, to authenticate users.
Mobile Apps: Many use biometrics, like facial recognition or fingerprints, in addition to or instead of passwords for user authentication.
Conclusion:
Authentication is crucial for ensuring the security of systems and data by verifying the identities of users or entities trying to gain access. Employing robust and multilayered authentication methods is essential in protecting against unauthorized access and various security threats.