System and method for remote authentication security management
An information processing system for remote access comprising a network access server and an authentication server is augmented with the ability to provide a simulated authentication process for authentication requests from attackers which do not correspond to authorized user names. Attackers whose requests form a password guessing attack for a user identity selected from a set of reject user names are redirected to a honeypot server.
1. A method of managing an authentication request from an attacker, said method comprising;
(a) transmitting said authentication request from a supplicant to a network access server,
(b) transmitting said authentication request from said network access server to an authentication server,
(c) determining whether to add a failure message to a log by validating that a user name from said authentication request is a member of a set of names of known users and said credential from said authentication request does not match a password corresponding to said member of said set of names of known users,
(d) determining whether to connect said supplicant to a honeypot server by validating that said user name from said authentication request is a member of a set of names of reject users and said credential from said authentication request matches a password corresponding to said member of said set of names of reject users.
2. A non-transitory computer readable medium comprising a computer program product implemented as software on a computer for managing an authentication request from an attacker, said computer program product comprising:
(a) instructions for receiving at a network access server said authentication request from a supplicant,
(b) instructions for transmitting said authentication request from said network access server to an authentication server,
(c) instructions for determining whether to add a failure message to a log by validating that a user name from said authentication request is a member of a set of names of known users and said credential from said authentication request does not match a password corresponding to said member of said set of names of known users,
(d) instructions for determining whether to connect said supplicant to a honeypot server by validating that said user name from said authentication request is a member of a set of names of reject users and said credential from said authentication request matches a password corresponding to said member of said set of names of reject users.