data from shared computers in public areas such as libraries and airports. This eliminates the possibility of computers in locations such as kiosks to store and pass on private information and passwords. Adding Additional Layers of Protection with Two and Three-Factor Authentication Most remote access requires two- and sometimes three- factor authentication. Two-factor authentication requires a password plus a way to identify that the user is who he or she claims to be. Two-factor security is a safeguard that prevents unauthorized users from using stolen passwords, social security numbers, or birthdays to log into files. Three-factor authentication might require a token ID in addition to a password plus biologic identification. A hacker with a stolen password would most likely not have the means to be authenticated. Authentication refers to the requirement that users prove to computer systems that they are who they claim to be and are authorized to log on to the network. Security software at the user's organization issues prompts for usernames, passwords, and a form or www.TechnicalPDF.com multiple forms of authentication such as: A token ID (identification), which is a small dongle with a screen, which can be attached to a key chain. Random numbers that change about every 60 seconds appear on the token's screen and are typed into the users' screen for access to the cloud, a secure area such as a lab, or particular files. A security app from iPhone, Amazon, or Google requesting a user ID and password plus a code sent by Apple, Amazon, or Google. A text message with a code sent to a user's phone that the user types in to gain access. Biologic authentication such as a fingerprint, iris, or facial recognition scan. To prevent remote users from passing viruses from the Internet to corporate networks, the client software will often not function if there is an open connection to the Internet while the user is logged on remotely. Deploying Firewalls to Protect against Malicious Attacks A firewall is a device, software a