Kerberos and Network Security on Amoeba

• Main Authors: Chen, Tse-Min, 陳澤民
• Other Authors: Chien-Chun Chou
• Format: Others
• Language: zh-TW
• Published: 1997
• Online Access: http://ndltd.ncl.edu.tw/handle/83857234317653337349

碩士 === 淡江大學 === 資訊工程學系 === 85 === Beneficial from the increasing bandwidth of computer network, distributed system design issues have emerged and became the implementation focus of modern operating system design. The microkernel-based Amoeba which groups a network of computers as a virtual machine is one of many currently used distributed operating systems. Amoeba uses RPC to support a client-server style of operating system services but it does not provide secure communication and authentication between clients and servers. Network Sniffer (both hardware and software) has been used to intrude Amoeba virtual machine in order to find security holes in the system. An Amoeba Network Security System (ANSS) is then built based on the design schemes used in Kerberos (Version 5 of MIT) to recover from the security abnormal. ANSS also adopts several characteristics of Amoeba itself such as multithreads and distributed servers. By using ANSS, we not only can provide a secure communication (on top of RPC) but also the authentication to protect information exchange between clients and servers. At the end, a secure password server is constructed (by using the security features provided by ANSS) to provide asecure environment of user accounts for Amoeba.