Threats against authentication
I want to pretend to be you:
I can steal your password
the sticky on your monitor or the list in your desk
drawer
by monitoring your communications or looking over
your shoulder
I can guess your password (particularly useful if I
can also guess your user name)
I can get between you and the system you are
talking to