Hackers Beware

Protecting Against UNIX Password Crackers

Just as was stated in Chapter 9, “Microsoft NT Password Crackers,” there is no silver bullet for protecting against password cracking, although there are ways to minimize the chances of a successful crack. The following are some key aspects to strong password protection:

• Have a strong password policy

• Use shadow files

• Use one-time passwords

• Use biometric authentication

• Use Passwd+ to enforce strong passwords

• Audit access to key files

• Scan for cracking tools

• Keep inventory of active accounts

• Limit who has access to root

Have a Strong Password Policy

Because password policies have already been covered in Chapter 9, they will only be briefly covered here. Password policies, or any security policy for that matter, ...