IMPLEMENTATION OF A SECURITY SERVICE PROVIDER FOR INTRANETS

Hamid M. Ali; Wameedh N. Flayih

doi:10.31026/j.eng.2008.02.08

Article Details

IMPLEMENTATION OF A SECURITY SERVICE PROVIDER FOR INTRANETS

Authors:

Hamid M. Ali | Wameedh N. Flayih

Publisher:

University of Baghdad

Journal:

Journal of Engineering Vol.14 Issue 2, pp.2416-2428

Document Type:

Article

Publication Date:

1/2008

Document Language:

English

Document ID (Org No.):

2001380057

pISSN:

2520-3339

DOI:

10.31026/j.eng.2008.02.08

Keywords:

Abstract:

 Among the many branches of security, authentication and confidentiality are very important to be provided. This work studies authentication focusing on the authentication systems supported by Windows 2000 family, especially Kerberos. As a result of this study, some unconvincing points are found along with others that are considered as weaknesses, such as being subject to offline dictionary attacks and the lack of perfect forward secrecy. Hence, some protocols (for authentication and key agreement) are chosen to build an authentication system that takes into consideration the observations on Windows 2000 systems. Based on this system, a security service provider is developed. The proposed provider isolates the developer from the complexity of the underlying system.

Article Details

IMPLEMENTATION OF A SECURITY SERVICE PROVIDER FOR INTRANETS

Authors:

Hamid M. Ali | Wameedh N. Flayih

Publisher:

University of Baghdad

Journal:

Journal of Engineering Vol.14 Issue 2, pp.2416-2428

Document Type:

Article

Publication Date:

1/2008

Document Language:

English

Document ID (Org No.):

2001380057

pISSN:

2520-3339

DOI:

10.31026/j.eng.2008.02.08

security

security service provider

authentication

Kerberos

dictionary attacks

certificates

Issues

Article Details

IMPLEMENTATION OF A SECURITY SERVICE PROVIDER FOR INTRANETS

Authors: Hamid M. Ali | Wameedh N. Flayih

Publisher: University of Baghdad

Journal: Journal of Engineering Vol.14 Issue 2, pp.2416-2428

Document Type: Article

Publication Date: 1/2008

Document Language: English

Document ID (Org No.): 2001380057

pISSN: 2520-3339

DOI: 10.31026/j.eng.2008.02.08

security

security service provider

authentication

Kerberos

dictionary attacks

certificates

Issues

Authors:

Hamid M. Ali | Wameedh N. Flayih

Publisher:

University of Baghdad

Journal:

Journal of Engineering Vol.14 Issue 2, pp.2416-2428

Document Type:

Article

Publication Date:

1/2008

Document Language:

English

Document ID (Org No.):

2001380057

pISSN:

2520-3339

DOI:

10.31026/j.eng.2008.02.08