Technical Name Novel Detection Scheme for Stolen Password File
Project Operator TWISC@NCKU
Project Host 李忠憲
Summary
We are proposing a new password storage mapping method by arranging passwords in random order. If the password file is stolen, an attacker could not know any user’s correct password. This method can reduce additional space of storing passwords with the ability to detect security event for stolen password files. We apply our method to the latest version of OpenLDAP Server to prove its feasibility.
Scientific Breakthrough
We are proposing a new password storage mapping method by arranging passwords in random order. If the password file is stolen, an attacker could not know any user’s correct password. This method can reduce additional space of storing passwords with the ability to detect security event for stolen password files. We apply our method to the latest version of OpenLDAP Server to prove its feasibility.
Industrial Applicability
We apply our method to the latest version of OpenLDAP Server to prove its feasibility.
Keyword System Security Password Security Honeyword System Password authenticate log-on SSO Detection Scheme for Stolen Stolen Password File Social Engineering
other people also saw