Password Protection: Is This the Best We Can Do?

More often than not, the last barrier between the "outside world" and most computer systems is some kind of password authentication. While passwords are practically ubiquitous in modern computer systems, numerous deficiencies associated with passwords present a critical challenge to network security professionals. If an attacker is able to determine a valid username and password to a computer system, they will be able to impersonate the valid user and access the system. Since valid credentials are presented, these intrusions often go unnoticed.

Tags:

Read the complete paper at SANS