Differentiating Authentication from Authorization
Correction Technology

Differentiating Authentication from Authorization

Corrected by Melik Can Sariyer · on When Notes Fly · 11 July 2026 · View published page ↗

Authentication confirms identity, while authorization defines access levels based on roles.

Changes accepted

1 edited

Computed from the content the publisher accepted, line by line. Neither the contributor nor CitePep writes this diff by hand.

edit
Researchers at Carnegie Mellon University analyzed 6.5 million passwords from actual breach datasets
+Researchers at the University of Illinois at Urbana-Champaign and Indiana University analyzed 6.5 million passwords from actual breach datasets

Why this is better

The Tangled Web of Password Reuse (Das et al., NDSS 2014) was authored by researchers at University of Illinois and Indiana University, not Carnegie Mellon.

More by Melik Can Sariyer in Technology

All of Melik Can Sariyer's contributions →