Security Controls - Kerberos - Research Paper Example

Kerberos System Kerberos System Kerberos is an authentication system or protocol created or developed by Massachusetts Institute of Technology (MIT) and adopted by most operating systems today. A basic knowledge of Kerberos is required to determine its usefulness in access control mechanisms provided by the operating system. Kerberos authentication process depends on certain formatted information or data packets referred to as tickets. The tickets are very vital in that they go via the networks rather than passwords.

Conveying tickets rather than passwords makes the process of authentication resistant to threats or attacks that can intercept the network traffic (Brenner, 2008). In the Kerberos milieu, the process of authentication starts at logon. There are several steps used to explain the process of Kerberos authentication. i. When a client or a user enters the login details (username and password), the computer transmits the username to the KDC that has master databases of specific keys for every step in its arena. ii. The KDC searches the client’s master key depending on the client password.

The KDC then develops TGT and a session key to share with the client. The TGT incorporates a copy of S.A, time of expiry and the client name. The KKDC then encrypts the tickets that the KDC recognizes. iii. The user computer gets the data or message from the KDC and operates the password via a one way hashing role that changes the password into the client’s KA. iv. If the user requires getting resources on a certain server of the same domain, it communicates with the KDC. v. The KDC develops a duo of tickets, one for the user and another one for the server on which the user requires to access resources. vi. The KDC takes the ticket of the server and shields or encrypts it utilizing the master key. vii. When the server gets the tickets, the client decrypts it utilizing S.A. This renders the KAB to the user and also renders or exposes the tickets of the server.

After communication between the KAB and the server, the server decrypts the tickets by the use of its KB. In turn, this allows access to the KAB that can decrypt the timestamp for the user (Hornstein, 2000). ReferencesHornstein (2000). Kerberos-faq/general. Accessed November 6, 2013 from http://www.cmf.nrl.navy.mil/krb/kerberos-faq.html#whatisBrenner (2008). Kerberos: Authentication with some drawbacks. Accessed November 6, 2013 from http://searchsecurity.techtarget.com/news/1308058/Kerberos-Authentication-with- some-drawbacks