NTE 01
NTE 04
:

• Security in Computing, 5th edition, C. P. Pfleeger, S. L. Pfleeger, J. Margulies: Secs. 2.2, 7.2
• Identity management: A primer, Williamson, G., Yip, D., Sharoni, I., & Spaulding, K.: Chaps. 4, 6
• Computer Security Art and Science, 2nd edition, Matt Bishop: Chaps. 2, 5, 6, 8, 16, 17
• Segurança Informática nas Organizações, H. São Mamede: Secs. 2.2, 2.3.1, 3.1
• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Secs. 11.1, 11.2

:

• Access control
• Separation of duties
• Multilevel security
• Bell-LaPadula model
• Biba model
• Clark-Wilson model
• Take-grant protection model

:

• Linux Capabilities and Seccomp
• Introduction to Control Groups (Cgroups)
• Linux Security Module Usage

:

• Security in Computing, 5th edition, C. P. Pfleeger, S. L. Pfleeger, J. Margulies: Sec. 8.4
• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Sec. 11.3

:

• OAuth Community Site
• Auth0 docs
• Auth0 doc: Protocols
• An introduction to OAuth 2
• The OAuth 2.0 Authorization Framework

:

• Identity management: A primer, Williamson, G., Yip, D., Sharoni, I., & Spaulding, K.: Chaps. 1, 2, 5
• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Sec. 10.5.3

:

• Federated Identity Management
• The Laws of Identity
• The Three Models of Digital Identity Relationships
• What is Federated Identity
• Federated Identity Management vs. Single Sign-On: What’s the Difference?
• Claims-based identity
• The Importance of Centralized Identity Management
• What’s the Difference Between OAuth, OpenID Connect, and SAML?
• A Gentle Introduction to Verifiable Credentials
• Self-sovereign identity
• 7 Myths of Self-Sovereign Identity
• User-centric Mobile Identity Management Services
• eIDAS: Digital Identification Regulation in Europe
• eIDAS - The Ecosystems
• Autenticação Europeia
• What is eID?

:

• Security in Computing, 5th edition, C. P. Pfleeger, S. L. Pfleeger, J. Margulies: Chap. 9
• Identity management: A primer, Williamson, G., Yip, D., Sharoni, I., & Spaulding, K.: Chaps. 1, 2

:

• k-Anonymity: A model for protecting privacy
• l-Diversity: Privacy Beyond k-Anonymity

:

• Security in Computing, 5th edition, C. P. Pfleeger, S. L. Pfleeger, J. Margulies: Secs. 2.1, 9.3
• Identity management: A primer, Williamson, G., Yip, D., Sharoni, I., & Spaulding, K.: Chap. 4
• Computer Security Art and Science, 2nd edition, Matt Bishop: Chap. 13
• Segurança Informática nas Organizações, H. São Mamede: Sec. 3.5
• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Secs. 5.3, 5.4.1, 8.6.2, 8.9.2.1, Chap. 10

:

• Authentication
• Biometric authentication
• Dictionary attacks
• RSA SecurID
• S/Key
• Hash chain
• SSH

:

• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Sec. 10.3.7.1

:

• Pluggable Authentication Modules
• Pluggable Authentication Modules for Linux

:

• Identity management: A primer, Williamson, G., Yip, D., Sharoni, I., & Spaulding, K.: Chap. 11
• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Sec. 3.2.2
:
• Smartcards
• Cartão de Cidadão
• PKCS #11
• PKCS #11 Version 2.30
• IAIK PKCS #11 Java Wrapper

:

• Identity management: A primer, Williamson, G., Yip, D., Sharoni, I., & Spaulding, K.: Chap. 7
• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Secs. 10.3.6.1, 10.5.1

:

• Security Assertion Markup Language (SAML) V2.0 Technical Overview
• SAML 2.0
• OASIS SAML Wiki
• SAML SSO Profiles

• Kerberos: The Network Authentication Protocol
• Kerberos (protocol)
• RFC 4120

:

• Security in Computing, 5th edition, C. P. Pfleeger, S. L. Pfleeger, J. Margulies: Sec. 6.3
• Segurança em Redes Informáticas, 6ª Edição, A. Zúquete: Chap. 9

:

• 802.11i (aka WPA2)
• IEEE 802.1X
• Extensible Authentication Protocol (EAP)
• RADIUS (Remote Authentication Dial In User Service)