| 对Kerberos协议的攻击及对策研究 |
| |
| 引用本文： | 莫燕,张玉清,李学干.对Kerberos协议的攻击及对策研究[J].计算机工程,2005,31(10):66-68,F003. |
| |
| 作者姓名： | 莫燕 张玉清 李学干 |
| |
| 作者单位： | 西安电子科技大学计算机学院,西安,710071;中国科学院研究生院国家计算机网络入侵防范中心,北京,100039;中国科学院研究生院国家计算机网络入侵防范中心,北京,100039;西安电子科技大学计算机学院,西安,710071 |
| |
| 基金项目： | 国家自然科学基金资助项目(60102004,60273027,60025205) |
| |
| 摘 要： | Kerberos协议是当今最重要的实用认证协议，但是它也存在着一些局限性和缺陷，文章主要分析了Kerberos协议的两种最重要的攻击：口令攻击和重放攻击，以Windows2000环境下对Kerberos协议进行的攻击为例进行了具体分析。并且把对Keerteros的各种改进方案作了一个全面的分析和总结，把各种方法作了一个对比，找出各种方法的优缺点，这将对以后Kerberos协议更完美的改进起参考作用。
|
| 关 键 词： | Kerberos 口令攻击 重放攻击 |
| 文章编号： | 1000-3428(2005)10-0066-03 |
Study of the Attacks on Kerberos Protocol and Countermeasures |
| |
| Mo Yan,ZHANG Yuqing,Li Xuegan.Study of the Attacks on Kerberos Protocol and Countermeasures[J].Computer Engineering,2005,31(10):66-68,F003. |
| |
| Authors: | Mo Yan ZHANG Yuqing Li Xuegan |
| |
| Affiliation: | MO Yan1,2,ZHANG Yuqing2,LI Xuegan1 |
| |
| Abstract: | Kerberos protocol is the most important authentication protocol nowadays,nevertheless it has some limitations and flaws. This paper focuses on a detailed analysis of the two most important kinds of attacks: password attack and replay attack, with the example attacks in the environment of Windows 2000. It also presents an all-around analysis and a summary of the various improved countermeasures as well as a comparison of them, which by showing the advantages and disadvantages of each countermeasure will serve as a reference for the future perfection of the Kerberos protocol. |
| |
| Keywords: | Kerberos Password attack Replay attack |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
