Protocols

Question 1

HOTP

Answer 1

HOTP

-Open standard for creating one-time passwords. Digits expire after being used (but never expire if not used)

Question 2

TOTP

Answer 2

TOTP

-Standard for creating on-time passwords. Expire every 30 seconds.

Question 3

SAML

• based on what
• an implementation

Answer 3

SAML

• Standard for authentication and authorization
• Provides SSO for web-based apps
• SSO alone does not provide authorization; SAML does authorization
• Authenticate through third party
• XML-based
• Shibboleth implements SAML to provide federated SSO

Question 4

RBAC

Answer 4

RBAC
Role-Based Access Control
-groups

Question 5

ABAC

Answer 5

Attribute-Based Access Control

• Many parameters: resource info, IP address, time of day, desired action, relationship to data
• aware of context
• next-generation model
• Software-Defined Networks
• Can enforce DAC and MAC

Question 6

DAC

Answer 6

DAC
Discretionary Access Control
-Most OS's
-Owner establishes access
-Very weak security
-susceptible trojan horses

Question 7

MAC

Answer 7

MAC
Mandatory Access Control
-Security clearance levels
-Security or sensitivity labels
-Users cannot change
-Used when need to know

Question 8

TCP

Answer 8

TCP
Transmission Control Protocol
-Connection oriented (guaranteed delivery)
-Three-way handshake (SYN, SYN/ACK, ACK)

Question 9

UDP

• What uses?
• What attacks exploit?

Answer 9

UDP
User Datagram Protocol
-connectionless session
-No three-way handshake
-Best effort to deliver (no guaranteed deliver)
-ICMP (ping) and audio streaming use UDP
-Many DoS attacks use UDP

Question 10

NDP

Answer 10

NDP
Neighbor Discovery Protocol
-IPv6
-Similar to ARP
-Auto-config of device IPv6 address; discover other IPv6 devices on NW

Question 11

RTP

Answer 11

RTP
Real-Time Transport Protocol
-VoIP, streaming video, telecon
-SRTP (Secure RTP) - encryption (AES), authentication, integrity (HMAC-SHA1) - protects against replay attacks (capture comms, modify, impersonate)

Question 12

SRTP

Answer 12

SRTP
Secure Real-Time Transport Protocol
-Voip, streaming
-Encryption with AES
-Authentication, Integrity, replay protection with HMAC-SHA1