Troubleshooting authentication and authorization

- [Instructor] Security professionals often find…themselves in the situation of troubleshooting…issues with security controls.…Authentication and authorization issues…are high on the list of problems to solve.…The use of unencrypted credentials is one of…the most serious authentication security issues…found on systems today.…There's really no excuse for systems that have this issue,…as the use of encryption can easily protect…these credentials.…The root issue is that when usernames and passwords…are sent in cleartext, anyone eavesdropping on the…network communication can intercept them and view them.…

You can encrypt credentials at the application level…by replacing protocols that run in cleartext…with secure alternatives that use encryption.…For example, instead of using the unencrypted Telnet…protocol, use the encrypted Secure Shell, or SSH protocol…for administrative connections to servers.…Instead of the unencrypted File Transfer Protocol, FTP,…use the encrypted Secure FTP, or SFTP protocol.…Instead of sending usernames and passwords…