Studiu asupra nivelului de siguranță oferit de protocoalele de autentificare

Valer Bocan

The second doctoral report, examining how much protection authentication protocols actually provide. It surveys authentication by password, by address and by cryptographic means, together with the practical failure modes of user authentication: online and offline password guessing, password length and capture, careless users, initial distribution, hardware tokens and biometrics. The larger part addresses denial of service: how such attacks are mounted against authentication protocols by flooding, malformed packets, algorithmic complexity or resource exhaustion, and the defences available, from ingress and egress filtering to progressive authentication and client puzzles. An appendix covers SSL and TLS.