A Study on Kerberos and Graphical Password-Based Web Authentication Scheme

Web authentication methods are subject to several attacks due to the rapid expansion of information technology. It is apparent that the evolution of authentication-bypassing strategies, from brute force to dictionary attacks, will advance. Simple word lists, for instance, are employed in traditional dictionary attacks to crack commonly used usernames and passwords. Robust hashing methods can be used to safeguard credentials sent via an insecure communication channel. However, hackers have created a novel hybrid method called a ‘rainbow attack’ that is like dictionary attacks but focuses on password hashes. In today’s digital era, traditional security methods like one-factor authentication are ineffective at combating the previously mentioned cyber-attacks. Even two-factor authentication may be bypassed using advanced cyber-methods. This work focuses on advanced cyber-techniques that can defeat even two-factor authentication. Server-side forging is one technique used to get around the restrictions imposed by two-factor authentication. Therefore, it is obvious that strong authentication entities are needed if the danger of credential bypassing needs to be lowered, especially in the Web 3.0 platform. In this proposed study, the objective is to discuss the authentication strategies and improved strategies based on Kerberos and graphical password.