The FREE Cybersecurity Glossary by Thor Pedersen!

Authentication system: A process or methodology implemented to verify the legitimacy of a user, system, or device seeking access to a secured environment. Such systems commonly involve credentials like usernames and passwords but can also use more advanced methods, such as biometric identification, smart cards, or digital certificates, in order to uphold the integrity of the secured area or data.

Authenticator: A piece of data used to verify the claim of an identity. This could be a password, token, biometric feature, or other element associated with a specific user. In a broader sense, an authenticator can also refer to a device or software that generates or manages such authentication data, for instance, a hardware token that generates one-time passwords.

Authenticity: The assurance that a message, transaction, or data origin is indeed from the source it claims to be. Ensuring authenticity is crucial in preventing activities such as phishing, identity theft, and forgery. Techniques used to maintain authenticity include digital signatures and certificates, encryption, and watermarking.

Authenticode: A digital signature technology used to verify the authenticity and integrity of software. It uses a certificate issued by a trusted third-party to ensure that the software has not been tampered with and comes from a legitimate source. For example, when downloading a software update, Authenticode may be used to verify that the update is safe and comes from the official software developer.

Authorization: The process of determining what permissions an authenticated user has access to. It's the step that follows authentication - once the system confirms the user's identity, it then determines what resources, data, or areas the user can access or manipulate based on predefined policies or rules.

Authorized vendor: A vendor that has been approved by an organization to provide goods or services. This approval is typically based on factors such as the vendor's reputation, security practices, and pricing. For example, a company may have a list of authorized vendors for office supplies, IT services, or marketing services. Only vendors on this list are allowed to provide services to the company.