Security of Interactive and Automated Access Management Using Secure Shell (SSH)

Ylonen, T., Turner, P., Scarfone, K., & Souppaya, M. (2015). Security of Interactive and Automated Access Management Using Secure Shell (SSH).

Type

Report

Intellectual base

Grey literature

Year

2015

DOI

10.6028/nist.ir.7966

DOI registrant

National Institute of Standards and Technology

Link

https://doi.org/10.6028/NIST.IR.7966

Cited from

communication_media_studies

Cited by

1 citation across 1 artifact.

Each citation links to the sentence it supports in the citing article.

Primes

• Complete Enumeration
  • The periodic table's predictive power, where empty cells are predictions, ports to cryptographic inventories, where missing keys are vulnerabilities

    This sourceDocuments that unmanaged and unenumerated SSH keys constitute standing, unaccounted access (a security vulnerability), motivating complete inventory/discovery of cryptographic keys. (Resolves needs-source-008 with a cryptographic-asset-management reference.)

    Supported in partVerified against the work's full text

    NIST IR 7966 shows that untracked or unmanaged SSH keys are a security risk and calls for a full key inventory; it says nothing of periodic tables.

    “Many organizations have thousands of untracked identity keys, authorized keys, and corresponding trust relationships granting access across a large number of mission critical systems. Existing legacy keys pose a substantial security risk”

    Read by an automated reader; not a human review. How support was checked

Verification

Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.

Does it back the claim? Read against the text for 1 of 1 citation: 1 supported in part. Each verdict is shown under its citation below, with what in the work backs the sentence.

Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.

See how references were verified.

Registry ID ref:440c5e3a72b4 · see in the full table