Securing Interactive and Automated Access Management Using Secure Shell (SSH)

Souppaya, Murugiah; Scarfone, Karen; Feldman, Larry

ITL Bulletin

Securing Interactive and Automated Access Management Using Secure Shell (SSH)

Documentation Topics

Date Published: January 2016

Author(s)

Murugiah Souppaya (NIST), Karen Scarfone (Scarfone Cybersecurity), Larry Feldman (G2)

Abstract

This bulletin summarizes the information presented in NISTIR 7966, "Security of Interactive and Automated Access Management Using Secure Shell (SSH)." The publication assists organizations in understanding the basics of SSH interactive and automated access management in an enterprise, focusing on the management of SSH user keys.

Keywords

access control; authentication; automated access management; device authentication; interactive access management; Secure Shell (SSH); user authentication

Control Families

Access Control; Audit and Accountability; Assessment, Authorization and Monitoring; Contingency Planning; Identification and Authentication; Maintenance; Personnel Security; Planning; Risk Assessment; System and Communications Protection; System and Information Integrity

Documentation

Publication:
January 2016 ITL Bulletin

Supplemental Material:
None available

Document History:
01/11/16: ITL Bulletin (Final)

Topics

Security and Privacy
audit & accountability; authentication; cryptography; general security & privacy; planning; public key infrastructure; risk assessment

Laws and Regulations
Federal Information Security Modernization Act; Health Insurance Portability and Accountability Act