- All Journals
- Al-Qadisiyah University
- Basrah University
- Kirkuk University
- Mosul University
- The Iraqi Borad for Medical Specialization
- University of Anbar
- University of Technology
- Al Mustafa University
- Al-Zahraa University for Women
- Alnoor University
- Kunooz University
- Misan University
- Ninevah University
- Tikrit University
- University of Al-Hamdaniya
- University of Kerbala
Implementation of A security Service Provider for Intranets | ||
| Journal of Engineering | ||
| Article 1, Volume 14, Issue 2, 2008, Pages 2416-2428 | ||
| Authors | ||
| Wameedh N. Flayih; Hamid M. Ali | ||
| Abstract | ||
| Among the many branches of security, authentication and confidentiality are very important to be provided. This work studies authentication focusing on the authentication systems supported by Windows 2000 family, especially Kerberos. As a result of this study, some unconvincing points are found along with others that are considered as weaknesses, such as being subject to offline dictionary attacks and the lack of perfect forward secrecy. Hence, some protocols (for authentication and key agreement) are chosen to build an authentication system that takes into consideration the observations on Windows 2000 systems. Based on this system, a security service provider is developed. The proposed provider isolates the developer from the complexity of the underlying system. | ||
| Keywords | ||
| Security; security service provider; authentication; Kerberos; dictionary attacks; certificates | ||
|
Statistics Article View: 71 PDF Download: 22 |
||