Message authentication code

Users, programs, and services

Ticket granting service

Authentication service

User

Security policy

Security officer

Owner

It provides a centralized approach for access control, which frees up department managers

It enforces enterprise-wide security policies, standards, and guidelines

User membership in roles can be easily revoked and new ones established as job assignments dictate

It allows entities closer to the resource to make decisions about who can and cannot access resources

If the threshold is set too high, nonintrusive activities are considered attacks (false positives). If the threshold is set too low, then malicious activities are not identified.

If the threshold is set too low, nonintrusive activities are considered attacks (false negatives). If the threshold is set too high, then malicious activities are not identified (false positives)

If the threshold is set too low, nonintrusive activities are considered attacks (false positives). If the threshold is set too high, then malicious activities are not identified (false negatives)

If the threshold is set too high, nonintrusive activities are considered attacks (false positives). If the threshold is set too low, then malicious activities are not identified (false negatives)