摘要
Kerberos协议是当今最重要的实用认证协议,但是它也存在着一些局限性和缺陷,文章主要分析了Kerberos协议的两种最重要的攻击:口令攻击和重放攻击,以Windows2000环境下对Kerberos协议进行的攻击为例进行了具体分析。并且把对Kerberos的各种改进方案作了一个全面的分析和总结,把各种方法作了一个对比,找出各种方法的优缺点,这将对以后Kerberos协议更完美的改进起参考作用。
Kerberos protocol is the most important authentication protocol nowadays, nevertheless it has some limitations and flaws. This paper focuses on a detailed analysis of the two most important kinds of attacks: password attack and replay attack, with the example attacks in the environment of Windows 2000. It also presents an all-around analysis and a summary of the various improved countermeasures as well as a comparison of them, which by showing the advantages and disadvantages of each countermeasure will serve as a reference for the future perfection of the Kerberos protocol.
出处
《计算机工程》
EI
CAS
CSCD
北大核心
2005年第10期66-68,F003,共4页
Computer Engineering
基金
国家自然科学基金资助项目(60102004
60273027
60025205)
