Password protection in IT systems

• Main Authors: Przemysław Rodwald, Bartosz Biernacik
• Format: Article
• Language: English
• Published: Wojskowa Akademia Techniczna, Redakcja Wydawnictw WAT, ul. gen. S. Kaliskiego 2, 00-908 Warszawa 2018-04-01
• Series: Biuletyn Wojskowej Akademii Technicznej
• Subjects: computer security; password; authentication; hash function
• Online Access: http://biuletynwat.pl/gicid/01.3001.0011.8036

The aim of the article is to systematise the methods of securing static passwords stored in IT systems. Pros and cons of those methods are presented and conclusions as a recommendation for IT system designers are proposed. At the beginning, the concept of cryptographic hash function is presented, following discussion of methods of storing passwords showing their evolution and susceptibility to modern attacks. Results of research on masked passwords of Polish banks IT systems are presented, as well as the most interesting examples of adaptive password functions are given. Then, the systematisation of password protection methods was carried out. Finally, the directions for further research are indicated. Keywords: computer security, password, authentication, hash function