摘要： Kerberos协议是当今最重要的实用认证协议,但是它也存在着一些局限性和缺陷,文章主要分析了Kerberos协议的两种最重要的攻击:口令攻击和重放攻击,以Windows2000环境下对Kerberos协议进行的攻击为例进行了具体分析。并且把对Kerberos的各种改进方案作了一个全面的分析和总结,把各种方法作了一个对比,找出各种方法的优缺点,这将对以后Kerberos协议更完美的改进起参考作用。
关键词:
Kerberos,
口令攻击,
重放攻击
Abstract: Kerberos protocol is the most important authentication protocol nowadays,nevertheless it has some limitations and flaws. This paper focuses on a detailed analysis of the two most important kinds of attacks: password attack and replay attack, with the example attacks in the environment of Windows 2000. It also presents an all-around analysis and a summary of the various improved countermeasures as well as a comparison of them, which by showing the advantages and disadvantages of each countermeasure will serve as a reference for the future perfection of the Kerberos protocol.
中图分类号:
莫燕,张玉清,李学干. 对Kerberos协议的攻击及对策研究[J]. , 2005, 31(10): 75-.
MO Yan1, 2, ZHANG Yuqing2,LI Xuegan1. Study of the Attacks on Kerberos Protocol and Countermeasures[J]. , 2005, 31(10): 75-.