08b - Authentication

Question 1

List three general approaches to dealing with replay attacks

Question 2

What problems was Kerberos designed to address?

Question 3

What entities constitute a full-service Kerberos?

Question 4

List three approaches to secure user authentication in a distributed environment

Question 5

Give an example of a suppress-replay attack when a part’s clock is ahead of that of the KDC

Question 6

Give an example of a suppress-replay attack when a party’s clock is ahead of that of another party

Question 7

In Kerberos, when Bob receives a Ticket from Alice:

a) how does he know it is genuine?
b) how does he know that it came from Alice?

Question 8

Consider a one-way authentication technique based on asymmetric encryption:
A->B: IDa
B->A: E(PUa, R1)
A->B: R1
a) Explain the protocol.
b) What type of attack is this protocol susceptible to?

Question 9

Present an overview of techniques for remote user authentication using symmetric encryption.

Question 10

Give a presentation on Kerberos.

Question 11

Explain the differences between versions 4 and 5 of Kerberos.

Question 12

Describe the use of Kerberos in multiple realms

Question 13

Present an overview of techniques for remote user authentication using asymmetric encryption

Question 14

Understand the need for a federated identity management system