Detecting potentially compromised credentials in a large-scale production single-signon system

Download
Author
Riley, Timothy
Date
2014-06Advisor
Beverly, Robert
Second Reader
Fulp, John D.
Metadata
Show full item recordAbstract
We posit that potentially compromised credentials are detectable by analyzing the system artifacts of a large-scale production, single-signon system. With permission from the Defense Manpower Data Center, we analyze a year’s worth of system artifacts produced by the Department of Defense Self-Service Logon system. Using industry standard tools and descriptive statistics we develop a repeatable process that identifies potentially compromised credentials. We look for characteristics that coincide with compromised credentials and evaluate our approach by obtaining the ground truth on several of the credentials we identify.
Description
CHDS State/Local
Rights
Copyright is reserved by the copyright owner.Collections
Related items
Showing items related by title, author, creator and subject.
-
ANALYSIS OF THE MARINE CORPS EDUCATIONAL TIER SYSTEM
Holmes, Andrew L. (Monterey, California. Naval Postgraduate School, 2013-03);This thesis analyzes the effects of certain demographic characteristics on first-term attrition and fleet attrition from the U.S. Marine Corps. The demographic characteristics studied include age, dependency status, gender, ... -
An evaluation of Marine Corps Educational credentials.
Franke, David B. (Monterey, California. Naval Postgraduate School, 1983-12);The Marine Corps classifies civilian educational credentials into 16 categories. These categories are further divided into two groups--high school graduates and non-high school graduates. This two-tier system is the ... -
Manpower requirements database for the Greek Navy
Sergis, Kyriakos N. (Monterey, California. Naval Postgraduate School, 2003-09);The Greek Navy is trying to create a Web-enabled Data Base system, which will enhance and facilitate the process of assigning duties (jobs) to its officers. This study provides a prototype of implementing the job-to-officers ...