In this section of the course,
we're going to cover Identity
and Access Management Solutions.
Identity and Access Management, also known as IAM,
is a crucial component of information security that ensures
that the right individuals have access
to the right resources at the right times
for the right reason.
Identity and access management technologies provide tools
for business processes that facilitate the management
of electronic identities, including password management,
network access control,
and the management of digital identities.
Identity and access management focuses on the security
controls, identification techniques, access controls,
and account management to ensure
that only authorized users have access
to specific resources and data.
An identity and access management system usually consists
of four main processes, which are identification,
authentication, authorization, and accounting.
First, we have identification.
Identification is the process
where a user claims an identity, usually in the form
of a username or an email address.
Second, we have authentication.
Authentication is a process of verifying the identity
of a user, device or system.
Third, we have authorization.
Once a user's authenticated,
the authorization process determines what permissions
or levels of access that user has.
Fourth, we have accounting.
Accounting, also known as auditing,
is the process of tracking
and recording user activities for the purpose
of compliant security monitoring and historical records.
So in this section of the course,
we will be focused on domain two and domain four,
specifically objectives 2.4 and objective 4.6.
Objective 2.4 states that given a scenario, you must be able
to analyze indicators of malicious activity.
Objective 4.6 states that given a scenario,
you must be able to implement
and maintain identity and access management.
First, we will cover identity
and access management, including its four main processes
and concepts of provisioning
and deprovisioning of user accounts, identity proofing,
interoperability, and attestation.
Next, we're going to jump into discussion
of multi-factor authentication, also known as MFA.
Here, we would discuss the authentication factors
of something you know, something you have,
something you are, something you do, and somewhere you are.
And we will also cover the different multi-factor
authentication implementations, including the use
of biometrics, hard tokens,
and soft tokens, security keys, and pass keys.
Then, we're going to talk about password security.
Well, we will discuss different password policy
best practices that you should be aware of, as well as how
to use password managers and passwordless authentication
in your modern identity and access management systems.
After that, we're going to discuss
some common password attacks,
including password spraying attacks, brute force attacks,
dictionary attacks, and hybrid attacks, as well
as performing a quick demonstration to show you
how an attacker might conduct a password cracking attack
against your credentials.
Next, we're going to discuss single sign-on.
Single sign-on, also known as SSO,
is a user authentication service that allows a user
to use one set of login credentials, like a name
and password to access multiple applications using various
technologies like LDAP, OAuth and SAML.
Then, we will go over federations.
A federation is a process that allows for the sharing
and use of identities across multiple information systems
or organizations to enable users to access different systems
with a single set of credentials.
After that, we will dive into privileged access management.
Privileged access management,
or PAM, involves the use of just-in-time permissions,
password vaulting, and temporal accounts
to gain administrative access over a given system or device.
Then, we'll discuss access control models,
including mandatory access control,
discretionary access control, role-based access control,
rule-based access control,
and attribute-based access control, as well as a discussion
of time of day restrictions
and how to implement the concept
of least privilege in your system.
Next, we will cover assigning permissions
and how you can best go about the process better
to secure organization.
And finally, we will take a short quiz to see
what you learned during this section of the course,
and review each of those quiz questions to fully ensure
that you can explain why each answer was right.
So if you're ready to dive into the world
of digital identities, let's begin our coverage of identity
and access management solutions in this section
of the course.