Countering Abuse of Name-Based Authentication

by Eugene H. Spafford. Christoph L. Schuba.

Authentication for access control procedures is usually based on the identity of participating entities. In some communications systems, identities are partially or wholly resolved using hostnames or machine addresses in the underlying protocol suite. Access control lists and revocation lists are often defined on the basis of hostnames, whereby the communication subsystem at runtime utilizes machine addresses. After communications between two machines are established, hosts identify each other by their protocol addresses. To map this address to a high-level name, which can then be compared with access control or revocation lists to grant or deny access, a resolution process is initiated. The abstraction from protocol addresses to high-level hostnames is necessary to hide details of heterogeneous communication subsystems, and of dynamic network configurations from the application layer where a uniform, high-level naming scheme is desired. [via]

http://homes.cerias.purdue.edu/~spaf/tech-rep...

Download File

PDF Finder

Countering Abuse of Name-Based Authentication

Related Files

Rate this Document

Popular eBooks

ADS

Tag Clouds

Last Download

BookShelf