Personal tools
You are here: Home Members pacneil's Home Linux Authentication Systems Why Use SSH?
Navigation
Log in


Forgot your password?
New user?
 
Document Actions

Why Use SSH?

by Neil Schneider last modified 2005-05-04 19:24

Why Use SSH?

next up previous contents index
Next: Heimdal Up: SSH Previous: What is SSH?

Why Use SSH?

Threats to network traffic include packet sniffing, DNS and IP spoofing [2] and the proliferation of fake routing information. In general terms, these threats can be categorized as follows:

  • Interception of communication between two systems - In this scenario, a third party exists somewhere on the network between communicating entities and makes a copy of the information being passed between them. The intercepting party may intercept and keep the information, or it may alter the information and send it on to the intended recipient.
  • Impersonation of a particular host - Using this strategy, an intercepting system pretends to be the intended recipient of a message. If the strategy works, the client remains unaware of the deception and continues to communicate with the interceptor as if its traffic had successfully reached its destination.
Both techniques cause information to be intercepted, possibly for hostile reasons. The results can be disastrous, whether that goal is achieved by listening for all packets on a LAN or a hacked DNS server pointing to a maliciously duplicated host.

If SSH is used for remote shell logins and file copying, these security threats can be greatly diminished. A server's digital signature provides verification for its identity. The entire communication between client and server systems cannot be used if intercepted, because each of the packets is encrypted. Attempts to spoof the identity of either side of a communication will not work, since each packet is encrypted using a key known only by the local and remote systems.


next up previous contents index
Next: Heimdal Up: SSH Previous: What is SSH?
2005-05-04

Powered by Plone CMS, the Open Source Content Management System

This site conforms to the following standards: