Password Authentication Protocol Leslie Wallace

Summary P.A.P. definition How it’s used Types of different NOS involved Why P.A.P. is important Advantages & Disadvantages New Authentication trying to replace P.A.P.

Password Authentication Protocol Also known as (PAP) - a type of cryptographic protocol with the purpose of authenticating entities wishing to communicate securely with the use of a password

How P.A.P. is used… Networking Operating System (N.O.S.) - designed to support workstation, personal computer, and other terminals connected on a local area network - provide sharing, name directory, security, etc.

Types of different NOS involved in P.A.P. Peer-to-Peer Client/Server (Remote Authentication Dial In User Service) Point-to-Point Protocol

Peer-to-Peer Users allowed to share resources or files located on their computers Accessibility, ease of setup, less hardware needed Downside.. - no central location for storage - lack oh high security

Client/Server (R.A.D.I.U.S.) Server enables multiple clients to share resources Allows network to centralize functions and applications in one or more dedicated file servers (stability) Remote Authentication Dial In User Service – used to authenticate remote users with user names and passwords Downside… -expensive, regularly maintenance

Point-to-Point Protocol Point-To-Point Protocol (P.P.P.) - establishes a direct connection between to nodes Validates users before allowing them access to server resources Most common NOS used

Why P.A.P. is important.. The point of having a digital authentication password system is to secure sensitive information You simply prompt a user to enter his/her id and password to gain system access. P.A.P. transmits unencrypted American Standard Code for Information Interchange, or ASCII passwords over the network

Advantages & Disadvantages Validates users before allowing access Flexible Protocol Password Strength Lack of identity check Shoulder Surfing Plain text could be a ploblem

One & The Same? Challenge Handshake Authentication Protocol seems to be an upgraded Password Authentication Protocol It goes hand and hand with P.P.P. Authenticates users to an entity with verification such as password Many servers have replaced P.A.P. with C.H.A.P. because it’s deemed to be stronger

Recap P.A.P. definition How it’s used Types of different NOS involved Why P.A.P. is important Advantages & Disadvantages New Authentication trying to replace P.A.P.

Questions.. ?

References http://www.princeton.edu/~achaney/tmve/wiki100k/docs/Password_authentication_protocol.html http://searchnetworking.techtarget.com/definition/network-operating-system http://technet.microsoft.com/en-us/library/cc958013.aspx http://books.google.com/books?id=l0lAoEvCytcC&pg=PA332&lpg=PA332&dq=different+nos+involved+in+password+authentication+protocol&source=bl&ots=03xOOiP0b-&sig=XvHRnr6pyN-fBbFlOKdTeZITSHs&hl=en&sa=X&ei=lcmdUoqcF8G-kQfC-4CAAw&ved=0CFwQ6AEwCA#v=onepage&q=different%20nos%20involved%20in%20password%20authentication%20protocol&f=false http://www.ehow.com/list_5924269_disadvantages-password-authentication-protocol.html