Thursday, August 4, 2016

Announcing Rock Salt™

Rock Salt™ is a method for storing and accessing password verification data on multi-user computer systems that resists remote attacks. Along with commonly-employed measures that limit the number of unsuccessful attempts to login or otherwise verify a password, it allows users to choose relatively simple passwords with full security. The secret component cannot be easily leaked or exfiltrated by malware, does not require periodic backup and is isolated in a way that allows it to be protected by conventional security measures, such as safes, alarm systems and video surveillance, from attackers who somehow gain access to the computing facility.

I announced Rock Salt on Tuesday, August 2, 2016 at the Passwords16 conference in Las Vegas. My presentation slides are now available at https://www.researchgate.net/publication/305849439_Rock_Salt_A_Method_for_Securely_Storing_and_Utilizing_Password_Validation_Data

Video of the presentation should be available soon at passwordscon.org.

6 comments:

  1. Jakin ID security services combine security cameras or video surveillance system, alarms, and other technology with live monitoring by remote security specialists who can evaluate a threat to your site and react accordingly.

    ReplyDelete
  2. Hey, Dude your blog awesome, I am going to copy all these points for our next post
    access security

    ReplyDelete
  3. I have a hard time describing my thoughts on content, but I really felt I should here. Your article is really great. I like the way you wrote this information. safetylabs.org Tracking devices

    ReplyDelete
  4. The quality of your blogs and conjointly the articles and price appreciating.

    locksmith in sacramento

    ReplyDelete
  5. I really enjoyed reading this post, big fan. Keep up the good work andplease tell me when can you publish more articles or where can I read more on the subject?
    BNC Cable

    ReplyDelete
  6. I apologize for off topic! I think I found a bug in diceware. Where could I file a report?

    ReplyDelete