- Training
- Training Live Events
- Training Without Travel
- SANS Courses
- Certified Instructors
- Career Roadmap
- Training Calendars
- SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- SANS Onsite
- SANS SelfStudy
- SANS Partnership Series
- SANS Workshop Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Password Protection: Is This the Best We Can Do?
- Abstract
- More often than not, the last barrier between the "outside world" and most computer systems is some kind of password authentication. While passwords are practically ubiquitous in modern computer systems, numerous deficiencies associated with passwords present a critical challenge to network security professionals. If an attacker is able to determine a valid username and password to a computer system, they will be able to impersonate the valid user and access the system. Since valid credentials are presented, these intrusions often go unnoticed. There are numerous problems that can make password authentication a poor line of defense, including weak passwords, improper password storage, and passwords that are captured by eavesdropping on network traffic. These problems can lead to unauthorized access of computer systems and potentially the compromise of important data.