Technical Name |
Novel Detection Scheme for Stolen Password File |
Project Operator |
TWISC@NCKU |
Project Host |
李忠憲 |
Summary |
We are proposing a new password storage mapping method by arranging passwords in random order. If the password file is stolen, an attacker could not know any user’s correct password. This method can reduce additional space of storing passwords with the ability to detect security event for stolen password files. We apply our method to the latest version of OpenLDAP Server to prove its feasibility. |
Scientific Breakthrough |
We are proposing a new password storage mapping method by arranging passwords in random order. If the password file is stolen, an attacker could not know any user’s correct password. This method can reduce additional space of storing passwords with the ability to detect security event for stolen password files. We apply our method to the latest version of OpenLDAP Server to prove its feasibility. |
Industrial Applicability |
We apply our method to the latest version of OpenLDAP Server to prove its feasibility. |
Keyword |
System Security Password Security Honeyword System Password authenticate log-on SSO Detection Scheme for Stolen Stolen Password File Social Engineering |