Last update:
Apr 1, 2000
|
|
|
Fermilab Strong Authentication Project
|
Mark Kaletka,
Matt Crawford
Fermi National Accelerator Laboratory
Speaker:
Mark Kaletka
Experience shows that a major source of computer security incidents is the compromise
of re-usable passwords by clear text transmission over the network, or by weakly protected storage
on disk on individual systems. The strong authentication project proposes to greatly reduce the
risk of such compromise by implementing an authentication system based on the Kerberos v5 protocol
developed at MIT. This protocol avoids transmission or storage of passwords. A secure portal with
non-reusable passwords will provide access between those systems where only Kerberos access is
permitted (the "strengthened realm") and those systems where other forms of access are
permitted (the "untrusted realm"). A phased implementation is proposed, beginning with
the Run II systems now under development.
Presentation: | Short Paper: |
|