1
Assignment 3
Demystifying Multi-factor Authentication
LaRae Brown
Principles of Information Security Management
INSS 703
Dr. Shane Stailey
February 18, 2024
2
Assignment 3
Introduction
There is no possible way to emphasize the significance of protecting sensitive information and
systems in this day and age of digital technology. Traditional methods of authentication that just
need a single element, such as passwords, are no longer enough to safeguard against unwanted
access since cyber threats continue to grow. With multi-factor authentication (MFA), users are
required to give various forms of verification before they are allowed access to a system or data.
This offers a powerful defense against potential threats. The purpose of this article is to give a
full overview of multi-factor authentication, including its many different forms and the
combinations that provide the highest level of protection for information security.
-MFA-
Knowledge-Based Authentication
A user's knowledge, such as a PIN or a set of security questions, is the basis of knowledge-based
authentication. While widely used, knowledge-based authentication is susceptible to phishing
attacks and password breaches, making it less secure when used as the sole authentication
method.
Possession-Based Authentication
This form of authentication provides an added layer of security, as an attacker would need to
physically obtain the possession in addition to any other information to gain unauthorized access.
Inherence-Based Authentication
Inherence-based authentication utilizes something inherent to the user, such as biometric data.
Location-Based Authenticationon-based authentication verifies the user's location before
granting access. This can be done using GPS data from a mobile device or by analyzing the
3
Assignment 3
network from which the user is attempting to access the system. While less commonly used,
location-based authentication can add an extra layer of security, particularly for remote access
scenarios.
Combinations of Authentication Factors
The six examples of such combinations are:
1. Biometric (inherence-based) authentication with Role-based Access Control (RBAC)
2. Two-factor authentication (knowledge-based and possession-based) with Mandatory Access
Control (MAC)
3. Smart card (possession-based) authentication with Discretionary Access Control (DAC)
4. Knowledge-based authentication with Role-based Access Control (RBAC)
5. Token-based authentication (possession-based) with Mandatory Access Control (MAC)
6. Single-factor authentication (password) with Discretionary Access Control (DAC)
In my opinion the safest information security is obtained when Biometric authentication is used
together with Role-based Access Control because this point gives the highest level of security
4
Assignment 3
with the use of so secure biometric information and lock access according to defined work
function.
The next highest point in security is dual-factor authentication with Mandatory Access
Control because this idea high or requirement gives rigid access limits based on two different
authentication forms. The most secure points are single-factor authentication combined with
discretionary access control. This is the minimum security level.
References
5
Assignment 3
Lavender, L. K. (2020). Principles of cybersecurity. The Goodheart-Willcox Company,
Inc.