Implementing Zero Trust Model for SSH Security with kerberos and OpenLDAP

Salwa Deta Mediana, lindawati lindawati, Mohammad Fadhli

Abstract


In order to remove trust presumptions towards the internal network, this study addresses the use of the Zero Trust Model in SSH (Secure Shell) security. The study approach is conducting tests by incorporating the Kerberos and OpenLDAP protocols into the SSH infrastructure. While OpenLDAP acts as a central directory for user management and permission access, Kerberos is utilized for single authentication and security resources like Kerberos tickets. As the server operating system for this investigation, Debian was used. Strong justification exists for securing SSH with Kerberos and OpenLDAP. SSH protocol assaults commonly target the standard port 22 (SSH), which is used for SSH. To ensure the security and integrity of the server system, the SSH port must be protected with Kerberos and OpenLDAP. SSH access is limited by Kerberos single authentication, which lowers the possibility of brute-force assaults and password theft. User administration and authorisation are facilitated by the integration of OpenLDAP. Implementing the Zero Trust strategy enables strong authentication and defends the system from insider threats. The system is protected from internal and external network assaults thanks to robust authentication, accurate authorisation, and isolating internal and external networks. An essential step in maintaining the security of the server system, data integrity, and information confidentiality is to secure port 22 and improve SSH with this integration. The research findings show that applying the Zero Trust model through this protocol integration greatly improves system security, resulting in better authentication and authorisation.

Full Text:

PDF

References


J. H. Ir Juanda No, K. Bandung, and J. Barat, “PENERAPAN KEAMANAN REMOTE SERVER MELALUI SSH DENGAN KOMBINASI KRIPTOGRAFI ASIMETRIS DAN AUTENTIKASI DUA LANGKAH Tohirin Program Studi Pascasarana Sistem Informasi, STIMK LIKMI,” Jurnal Teknologi Informasi, vol. 4, no. 1, 2020.

A. W. Wastumirad and M. I. Darmawan, “Implementasi Honeypot Menggunakan Dionaea Dan Kippo Sebagai Penunjang Keamanan Jaringan Komunikasi Komputer,” J Teknol, vol. 9, no. 1, pp. 80–91, Nov. 2021, doi: 10.31479/jtek.v9i1.119.

H. Mutaher and P. Kumar, “Security-enhanced SDN controller based kerberos authentication protocol,” in Proceedings of the Confluence 2021: 11th International Conference on Cloud Computing, Data Science and Engineering, Institute of Electrical and Electronics Engineers Inc., Jan. 2021, pp. 672–677. doi: 10.1109/Confluence51648.2021.9377044.

H. Li, Y. Niu, J. Yi, and H. Li, “Securing offline delivery services by using kerberos authentication,” IEEE Access, vol. 6, pp. 40735–40746, Jul. 2018, doi: 10.1109/ACCESS.2018.2856904.

Sichuan Institute of Electronics and Institute of Electrical and Electronics Engineers, 2018 International Conference on Electronics Technology (ICET) : May 23 -May 27,2018, Chengdu, China.

Y. Yang, H. Li, X. Cheng, X. Yang, and Y. Huo, “A High Security Signature Algorithm Based on Kerberos for REST-style Cloud Storage Service,” in 2020 11th IEEE Annual Ubiquitous Computing, Electronics and Mobile Communication Conference, UEMCON 2020, Institute of Electrical and Electronics Engineers Inc., Oct. 2020, pp. 0176–0182. doi: 10.1109/UEMCON51285.2020.9298140.

H. Arabnia, L. Deligiannidis, M. Q. Yang, American Council on Science and Education, IEEE Computer Society, and Institute of Electrical and Electronics Engineers., 2016 International Conference on Computational Science and Computational Intelligence : CSCI 2016 : proceedings : 15-17 December 2016, Las Vegas, Nevada, USA.

M. C. Rao, “A Fixed Network Transmission Based on Kerberos Authentication Protocol.” [Online]. Available: www.ijert.org

P. K. Shukla, G. S. Mishra, P. G. Shambharkar, P. Rusia, and V. Kapoor, “Implementation comparison of Kerberos passwords by RC-5 encryption type analysis with RC-4 encryption,” in ITNG 2009 - 6th International Conference on Information Technology: New Generations, 2009, pp. 1581–1582. doi: 10.1109/ITNG.2009.304.

Fangchun. Yang et al., Proceedings IC-BNMT : 2010 3rd IEEE International Conference on Broadband Network & Multimedia Technology : October 26-28, Beijing, China. IEEE Press, 2010.

Z. Wang and Y. Wang, “Research and design of campus network unified identity authentication system based on Kerberos,” in Advanced Materials Research, 2012, pp. 1086–1089. doi: 10.4028/www.scientific.net/AMR.546-547.1086.




DOI: https://doi.org/10.32520/stmsi.v12i3.3330

Article Metrics

Abstract view : 189 times
PDF - 66 times

Refbacks

  • There are currently no refbacks.


Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
https://www.remap.ugto.mx/pages/slot-luar-negeri-winrate-tertinggi/http://workload.cmp.ubu.ac.th/PortFolio/InnerCollAct/https://journal.mdpip.com/starlight-princess-1000/https://journal.uhe.edu.pk/sweet-bonanza-xmas/https://journals.zu.edu.ly/gates-of-gatot-kaca/https://mdpip.com/akun-pro-kamboja/https://sayangibu.sch.id/bonanza-gold/https://ppdb.sayangibu.sch.id/lucky-neko/https://www.sa-ijas.org/gates-of-olympus/https://www.sa-ijas.org/sweet-bonanza/https://rovedar.com/akun-pro-kamboja/https://www.sa-ijas.org/mahjong-ways-2/https://admin.berjasa.co.id/akun-pro-kamboja/https://admin.berjasa.co.id/gates-of-olympus/https://learning.modernland.co.id/storage/-/akun-pro-kamboja/https://learning.modernland.co.id/gates-of-olympus/https://pcdn.edu.pl/link-terbaik/https://pcdn.edu.pl/sweet-bonanza/https://pythononlinecompiler.com/sigmaslot/http://niaksha-academic.ac.id/rekomendasi-link/https://tapchi.hce.edu.vn/slot-hoki/https://tapchi.hce.edu.vn/link-situs/https://journal.uhe.edu.pk/demo-gratis/https://vokasi.ui.ac.id/products/luar-negeri/https://www.sa-ijas.org/depo25-bonus25/https://askantech.com/wp-content/gates-of-olympus/https://stephclairesmith.com.au/passwordhttps://theairdgroup.com.au/password/https://podcastmerch.com/password/http://ojs.redfundamentos.com/slot-pulsa/https://revistas.natura.unsa.edu.ar/schemas/dana/https://rmta.ru/sdana/http://ovo-terbaru.spatialys.com/https://iqtisodiyot.tsue.uz/sites/default/dana/https://www.redfundamentos.com/imgs/pulsa/https://vokasi.ui.ac.id/web/wp-content/power-of-ninja/https://satpolpp.padanglawasutarakab.go.id/build/js/https://simtaru.padanglawasutarakab.go.id/assets/app/http://ptj.encyklopediateatru.pl/js/statistics/gates-of-olympus/http://ptj.encyklopediateatru.pl/styles/sweet-bonanza/https://sibukinblkpp.jogjaprov.go.id/project/thailand/https://morbis.id/https://sibukinblkpp.jogjaprov.go.id/tema/tanpa-potongan/https://demo-olympus.carrd.cohttps://demo-2024.crd.co/https://mahjong-ways2.uwu.ai/https://sibukinblkpp.jogjaprov.go.id/js/slot-dana/https://link-thailand.crd.co/https://padanglawasutarakab.go.id/starlight-princess/https://dpmptsp.simalungunkab.go.id/image/starlight-princess/https://sibukinblkpp.jogjaprov.go.id/js/gates-olympus/https://sibukinblkpp.jogjaprov.go.id/js/mahjong-ways-2/https://slot-gacor-2024.crd.co/https://satpolpp.padanglawasutarakab.go.id/slot-deposit-pulsa-tanpa-potongan/https://data.pasamankab.go.id/uploads/user/2024-02-28-081555.312437index.htmlhttps://data.kepahiangkab.go.id/uploads/user/2024-02-28-084507.827272index.htmlhttps://dpmptsp.simalungunkab.go.id/slot-deposit-pulsa/https://opendata.dairikab.go.id/uploads/user/2024-02-28-105502.123933index.htmlhttps://tpid.morbis.id/gates-of-olympus/https://repo.itdri.id/uploads/user/2024-02-28-115628.411686index.html/https://padanglawasutarakab.go.id/slot-gacor/https://reciss.asuss.gob.bo/slot-dana/https://philol-journal.sfedu.ru/pages/products/slot-depo-10k/https://tpid.morbis.id/starlight-princess/http://demo-olympus.atlantageek.com/https://babebun.ditjenbun.pertanian.go.id/products/gampang-menang/https://sgacor.carlosdelfino.eti.br/https://link-thailand.elumenotion.com/https://mahjong-2.healthyprog.com/https://slot-mahjong.vashonstorefront.com/https://majta.creson.edu.mx/slot-luar/https://minervaideas.com/https://babebun.ditjenbun.pertanian.go.id/products/malam-ini/https://pointer.ternatekota.go.id/products/kakek-merah/https://library.binawan.ac.id/products/kakek-zeus/