Proposta de um sistema de apresentação de senhas em ambientes hostis

Abstract

Passwords used in order to authenticate users and to information protection have frequently being crackers target, that steal information for financial benefit. So, a great dissemination of malicious software had happened with the objective of stealing data or information typed by keyboard (in some cases, clicked by mouse), sent by internet for some destiny, in order to practice fraud. This kind of incident causes many worry, because damages may be great. According with CERT.br - Center for Studies, Treatment of Incident Response and Security in Brazil - fraud was the second more reported incident (28%) from january to december of 2007. This thesis proposes the development of a password presentation system to be used in insecure machines, whose purpose is that the user proves he knows the password without needing to type or to click it explicitly during the communication process. This system is based on Coding Theory, mainly on syndrome and standard array concept. Syndrome is a coding generated by password and is used to authenticate user, whose password is stored in the standard array. This system intends to proctect the password from people trying to steal it to make undue use.