Методы защиты данных и аутентификации

Уровень 0 · материалов: 5

В кластер входят документы, описывающие технические механизмы защиты доступа и аутентификации, и не входят документы о социальном влиянии систем видеонаблюдения и психологическом сдерживании.

Общие признаки: защита от перехвата паролей, поведенческий анализ безопасности, методы аутентификации, противодействие кибератакам

Группа выше: Уязвимости систем аутентификации

Материалы

• #6261 — Identifying Account Intruders via Machine Learning — Представитель этого кластера

  Эксперимент в Яндексе. Как идентифицировать взломщика с помощью машинного обучения — eandreeva

  Смысл: The main idea is that behavioral patterns created by machine learning can act as a second layer of security to detect account hijacking, effectively identifying intruders who have already bypassed password authentication.

  Yandex is developing a machine learning system that detects account intruders by analyzing behavioral patterns to supplement traditional password security.

• #3270 — Iconographic User Authentication Method

  Графический пароль не дает смотрящему украсть себя — lKAMiKADZE

  Смысл: The main idea is to create an authentication system based on geometric patterns (triangles formed by icons) that is immune to visual observation (shoulder surfing) and network interception.

  An authentication method where users click inside a mentally formed triangle of secret icons, making it nearly impossible for observers or hackers to steal the password.

• #9443 — The Insider Red Team Experience: A Tale of Resilience and Detection

  Враг внутри: как я попался на инсайдерском редтиминге — Michae1

  Смысл: The text illustrates that even a skilled insider with physical access can be thwarted by a comprehensive security strategy combining technical controls (Least Privilege, MFA) and behavioral monitoring (anomaly detection).

  A red teamer embedded as an employee fails to maintain stealth despite bypassing multiple layers of security, eventually getting caught due to a simple PowerShell execution alert on a finance computer.

• #5423 — Non-Sequential Password Entry for Keylogger Mitigation

  Пароль для гиков — смешать, но не взбалтывать — denvo

  Смысл: The main idea is to mitigate the effectiveness of keyloggers by decoupling the chronological order of keystrokes from the actual sequence of the password through non-linear input.

  A proposal to fight keyloggers by entering password characters in a random order using a grid of cells to obfuscate the input sequence.

• #33120 — Keystroke Timing Obfuscation in OpenSSH

  Не набирайте тексты в интернете, или Обфускация времени между нажатиями клавиш в SSH — ru_vds

  Смысл: The main idea is that the timing between keystrokes creates a side-channel leak that can compromise passwords and user identity; therefore, the implementation of timing obfuscation in OpenSSH is a critical step in securing interactive remote sessions.

  OpenSSH has implemented keystroke timing obfuscation to prevent attackers from guessing passwords or identifying users based on the rhythm of their typing.