|
Defending against brute force ssh attacks |
|
|
|
Saturday, 02 June 2007 |
|
During 2005, bute force attacks on the ssh service
became pretty popular.
These attacks are based on a rather simple idea:
use an automated program for trying, one after the other, many
combinations of standard or frequently used account names and likewise
frequently used password (e.g.: guest/guest).
There are a number of methods to defend against such brute force
attacks. The following list is intended to give an overview of them,
and briefly mention their respective advantages and disadvantages. Read more at Samhain Labs
|