3.5.4 Replay-Resistant Authentication for Accounts

3.5.4 Employ replay-resistant authentication mechanisms for network access to privileged and no-privileged accounts.

To go back to the NIST 800-171 Controls page click here.

Guides

• Tufts University – Replay Attack Vulnerabilities and Mitigation Strategies
• Federal Identity, Credential, & Access Management – Approved Products List
• Sitepoint – How to Prevent Replay Attacks on Your Website
• Red Hat Customer Portal – Chapter 20. Directory Servers
• Windows IT Center – AD DS Deployment
• SANS Institute – Global Information Assurance Certification Paper
• DFARS FAQ Q47

Sample Policy & Procedures

• USDA FSIS Directive 1306.5

Videos

• BrightTALK – How to Prepare for IAM
• BrightTALK – Privileged Account Security

Example Tools

• Microsoft Active Directory
• LDAP
• Centrify