Vulnerabilities of LDAP As An Authentication Service

• 作者: Benjamin Ferriman Charlie Obimbo
• 来源期刊: 信息安全(英文)
• 学科: 工学
• 关键词: LDAP SYN FLOODING DENIAL-OF-SERVICE AUTHENTICATION SERVICE
• 年，卷（期）: 2011,（4）
• 页码范围: 151-157
• 页数: 7页
• 分类号: TP39

摘要

Lightweight Directory Access Protocol (LDAP) servers are widely used to authenticate users in enterprise level networks. Organizations such as universities and small to medium-sized businesses use LDAP for a variety of applications including e-mail clients, SSH, and workstation authentication. Since many organizations build dependencies on the LDAP service, a Denial-of-Service (DoS) attack to the service can cause a greater number of services disrupted. This paper examines the danger in the use of LDAP for user authentication by executing a DoS attack exploiting the TCP three-way handshake required when initializing a connection to an LDAP server.