Technical Seminar

on:

KERBEROS

DEPARTMENT OF INFORMATION
TECHNOLOGY

Introduction
History
Working
Applications
Drawbacks
Reference

Introduction:
Kerberos is a network authentication protocol. It is
designed to provide strong authentication for
client/server applications by using secret-key
cryptography.
Uses Needham-Schroeder Algorithm.
Kerberos was created by MIT as a solution to the
network security problems.

History:
Steve Miller andClifford Neuman designed the
primary
Kerberos version.
Versions 13 occurred only internally at MIT.
Steve Miller and Clifford Neuman, the primary
designers of Kerberos version 4 is done for Project
Athena
Version 5, designed by John Kohl and Clifford
Neuman, appeared in 1993.
Windows 2000 was Microsoft's first system to
implement Kerberos security standard.

Working:

Kerberos Tray

Applications
:
Authentication
Authorization
Confidentiality
Within networks and small sets of networks

Drawbacks:
When the Kerberos server is down, new users cannot
log in. This can be overcomed by using multiple
Kerberos servers and fallback authentication
mechanisms.
Kerberos has strict time requirements, which means
the clocks of the involved hosts must be synchronized
with the Kerberos server clock,else the authentication
will fail.
No authentication is required to request a ticket,
hence attacker can gather equivalent of /etc/passwd
by requesting many tickets.

References:
www.wikipedia.org
www.studymafia.org

Thank you all