IAS REVIEW

The access control mechanism whereby unverified or unauthenticated entities who seek access to a resource provide a label by which they are known to the system

Ø The selective method by which systems specify who may use a particular resource and how they may use it

The access control mechanism that represents the matching of an authenticated entity to a list of information assets and corresponding access levels.

Ø The access control mechanism that requires the validation and verification of an unauthenticated entity’s purported identity.

Ø A private, secure network operated over a public and insecure network.

Ø a combination of hardware and software that filters or prevents specific information from moving between the outside network and the inside network

examines the header information of data packets that come into a network and determines whether to drop them (deny) or forward them to the next network connection (allow), based on its configuration rules.

Ø An adverse event in which an attacker attempts to gain entry into an information system or disrupt its normal operations, almost always with the intent to do harm

Ø consists of activities that deter an intrusion

Ø consists of procedures and systems that identify system intrusions