From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Authentication, authorization, and accounting (AAA)

Authentication, authorization, and accounting (AAA)

As security professionals, one of the most important things that we do is ensure that only authorized individuals gain access to information, systems, and networks under our protection. The access control process consists of three steps that you need to understand. These steps are identification, authentication, and authorization. During the first step of the process, identification, an individual makes a claim about their identity. The person trying to gain access doesn't present any proof at this point, they simply make an assertion. It's important to remember that the identification step is only a claim, and the user could be making a false claim. Imagine a physical world scenario where you want to enter a secure office building where you have an appointment. During the identification step of the process, you might walk up to the security desk and say, "Hi, I'm Mike Chapple." Proof comes into play during the second step of the process, authentication. During the authentication…

Contents