The AAA security principle is a framework that builds on top of the CIA triad.
- We control who is permitted to use resources, through authentication. Process of identifying user-validity by asking for credentials.
- We use permissions to determine what they are authorized to do. Authorization is enforcing policies for determining the qualities of activities, resources, or services.
- We log actions perfomed on the network, through accounting (non-repudiation). It ensures that network admins will always be able to track down the user to monitor and audit their activites such as logins, data sent, time and location of access.