1. CS795/895.NET Passport1. NET PASSPORT &TRUSTBRIDGE SHRIPAD PATIL CS795/895 SECURITY IN DISTRIBUTED SYSTEMS

2. CS795/895.NET Passport2 OVERVIEW  Why Single Sign-on? (sso)  How Passport works?  Security threats  Passport Implementation (.NET)  TrustBridge

3. CS795/895.NET Passport3 Single Sign-on  The problem  Too many credentials  Which one for which app.  Multiple logon  Business Impact  Increased risk of compromise  Reduced Productivity  Increased helpdesk expenses

4. CS795/895.NET Passport4 Single sign-on  The problem  Provisioning new accounts  Password management  Auditing user activity  Managing non-user access  Deploying enterprise applications  Impact  No single view of user  Risk of unauthorized access  Delayed access

5. CS795/895.NET Passport5 Passport - Introduction  single-login system that allows users to navigate across Passport-enabled sites without having to maintain a separate login at each site  User Account contains A Unique Identifier (PUID) A User profile Credentials  3 security levels Standard sign-in Secure channel sign-in Strong credential sign-in

6. CS795/895.NET Passport6 Passport: How does it works?  Cookies 1.Ticket cookie 2.Profile cookie 3.Visited site cookie

7. CS795/895.NET Passport7 Problem Areas  Central point of attack  Weak user passwords  Cookies/persistent cookies  Bogus merchant attack  Active attack  DNS Attacks

8. CS795/895.NET Passport8 2. TrustBridge  Microsoft technology to provide AAA (Authentication, Authorization, Accounting)  Designed to achieve cross-organizational resource sharing  Uses windows active directory  Provides resilient defense against security attacks (data mining, Denial Of Service)  Convenient to use  But, do not provide heterogeneous enterprise system support

9. CS795/895.NET Passport9 TrustBridge

10. CS795/895.NET Passport10 Passport Implementation 1.Requirements:- passport SDK, passport manager, IIS, DNS name 2.Register application with.NET service manager 3.Get site ID, Encryption Keys, Certificate 4.Code, test, then deploy passport application 5.Compliance review from Microsoft 6.Launch live web-site

11. CS795/895.NET Passport11 Thank You…