SANS Whitepaper – Biometrics and User Authentication 3.5 3.5.2 Identification and Authentication
This SANS whitepaper looks at the use of biometrics technology to determine how secure it might be in authenticating users.
SEARCH RESULTS
SANS Whitepaper – Implementing IEEE 802.1x for Wired Networks 3.5 3.5.2 Identification and Authentication
This SANS whitepaper discusses implementing an additional security layer for wired networks.
SANS Whitepaper – Two-Factor Authentication (2FA) using OpenOTP 3.5 3.5.2 3.5.3 3.7 3.7.5 Identification and Authentication Maintenance
This SANS whitepaper discusses the theory behind user-based two-factor (or multifactor) authentication systems, also known as “2FA”.
SANS Whitepaper – Two-Factor Authentication: Can You Choose the Right One? 3.5 3.5.2 3.5.3 Identification and Authentication
This SANS whitepaper focuses on enterprise solutions for two-factor authentication.
SANS Whitepaper – Vendor-Supplied Backdoor Passwords – A Continuing Vulnerability 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication
This SANS whitepaper discusses vendor-supplied passwords that are embedded in software/hardware.
Schneier on Security – More on Two-Factor Authentication 3.5 3.5.2 3.5.3 Identification and Authentication
More on Two-Factor Authentication and it's ineffectivenss defense against identity theft.
State of Alabama – System Maintenance Policy 3.5 3.5.2 3.5.3 3.7 3.7.5 Identification and Authentication Maintenance
This example policy from the State of Alabama provides a starting point for system maintenance.
STIG Viewer – Network Device Management Security Requirements Guide 3.5 3.5.11 Identification and Authentication
This Security Requirements Guide (SRG) is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the NIST 800-53 and related documents.
Symantec Whitepaper – Two-Factor Authentication 3.5 3.5.2 3.5.3 Identification and Authentication
This whitepaper is directed at IT, Security, and Compliance workers who are responsible for recommending or evaluating security products; or running and managing two-factor authentication infrastructure.
Texas A&M – Sample Identification and Authentication Policy 3.5 3.5.5 Identification and Authentication
This is an example of an identification and authentication policy for Texas A&M