-
Book Overview & Buying
-
Table Of Contents
The Official (ISC)2 Guide to the CCSP CBK - Second Edition
By :
Multifactor authentication goes by many names, including two-factor authentication and strong authentication. The general principle behind multifactor authentication is to add an extra level of protection to verify the legitimacy of a transaction. To be a multifactor system, users must be able to provide at least two of the following requirements:
One-time passwords also fall under the banner of multifactor authentication. The use of one-time passwords is strongly encouraged during provisioning and communicating of first-login passwords to users.
Step-up authentication is an additional factor or procedure that validates a user’s identity, normally prompted by high-risk transactions or violations according to policy rules. Three methods are commonly used:
Change the font size
Change margin width
Change background colour