Why this matters
Knowing the threats (last lesson) only helps if you can stop them. These countermeasures are the everyday tools behind every login screen, padlock icon, and "we sent you a code" message.
The idea
Authentication decides whether someone is allowed in. It uses three kinds of factor:
- Knowledge: something you know (a password, a PIN).
- Possession: something you have (a one-time code, a smart card).
- Biometrics: something you are (fingerprint, iris).
Combining two different factors is two-factor authentication, far stronger than a password alone. Good passwords help too: long, mixed characters, never reused, never written on a sticky note.
Other key countermeasures:
- Firewall: hides the internal network and blocks unauthorized access from outside.
- Antivirus software plus keeping the OS updated closes the security holes malware exploits.
- Encryption turns readable plaintext into ciphertext so an interceptor learns nothing; the recipient decrypts it with a key. With symmetric key encryption both sides share the same key; with public key encryption the key to lock differs from the key to unlock.
Picture it
flowchart LR P[Plaintext] -- encrypt with key --> C[Ciphertext] C -- travels safely --> N((network)) N --> C2[Ciphertext] C2 -- decrypt with key --> P2[Plaintext]
Worked example
A site asks for your password and a code from your phone. That's two-factor authentication:
a knowledge factor (password) plus a possession factor (the phone code), so a leaked password
alone can't get in. Separately, when you see https and a padlock, your data is encrypted in
transit: even if intercepted, it's ciphertext without the key.
Your turn
Try the practice questions: sort authentication examples into knowledge / possession / biometrics, and match each countermeasure to the threat it addresses.
Recap
- Authentication factors: knowledge, possession, biometrics; combine two for 2FA.
- Firewall + antivirus + updates block unauthorized access and malware.
- Encryption protects data in transit; symmetric shares one key, public key uses two.