摘要
随着互联网技术及智能设备的发展,对口令身份认证的多样交互性及良好用户体验的需求越来越强。在微软新推出Windows 8系统中,支持图形口令机制与PIN码,使用背景图片和三种手势相结合的方式进行认证。在安全性上,相比Windows传统版本操作系统Windows8也被认为有了非常大的提升。文章主要在信息安全理论与技术上,通过口令身份认证机制的安全性研究,分析了Windwos8操作系统在口令认证方面的新特征,并通过模拟黑客攻击的方式,横向对比了Windows8与传统Windows Server系统在该机制上的安全性。同时提出了如何对Windows密码策略进行安全配置方案,达到大幅增加系统安全性的效果。
With the development of Internet technology and smart devices, diverse and interactive user experience good demand for increasingly strong password authentication. Microsoft＇s Windows 8 supports a graphical password system and PIN code, use a background image and a combination of three kinds of gestures for authentication. In security, compared to the traditional version of the Windows operating system Windows8 had also considered a very large increase. In this paper, research by the security password authentication mechanism, analyzes Windwos8 new operating system features in terms of password authentication on the theory and technology of information security. And attack the Windows8 horizontal contrast with the traditional Windows Server system security on the mechanism. Also proposed how to secure Windows password policy configuration to achieve a substantial increase in system security results.
