Skip to content

Kerberos

What is Kerberos?

A network authentication protocol that uses secret-key cryptography to authenticate client-server applications. Kerberos provides mutual authentication where both the user and server verify each other's identity.

Information Security

Terms that appear alongside kerberos

Each of these is named in at least one of the same controls as kerberos. The number is how many controls name both.

Frameworks that govern kerberos

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on kerberos

Requirements naming kerberos across 3 standards, quoted from the control text.

Australian Information Security Manual1 control

Credentials for the Kerberos Key Distribution Center's service account (KRBTGT) are changed twice, allowing for replication to all Microsoft AD DS domain controllers in-between each change, if the domain has been directly compromised, the domain is suspected o...

ISM-1847 · Credentials for the Kerberos Key Distribution Center's service account (KRBTGT) are change →
ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication ensures the validity of the claimed identities of the entities participating in communication (e.g.

X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →
MITRE D3FEND1 control

Apply D3FEND EVICT tactic to remove adversary access from a system after detected compromise. D3-CE Credential Eviction (D3-ANR Authentication Cache Invalidation + D3-CR Credential Revoking + D3-CRO Credential Rotation + D3-OACA Outbound Authentication Channel...

MITRE-D3FEND-Evict-Tactic-Credential-Process-Eviction-Containment-Incident-Response-Recovery · MITRE D3FEND Evict Tactic + Credential + Process Eviction + Containment + Incident Response + Recovery →

Questions people ask about kerberos

What is Kerberos?
A network authentication protocol that uses secret-key cryptography to authenticate client-server applications. Kerberos provides mutual authentication where both the user and server verify each other's identity.
Why is Kerberos important for compliance?
Kerberos is a key concept in Information Security. Understanding kerberos helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Kerberos?
Kerberos appears in the requirement text of Australian Information Security Manual, ITU-T X.805 - Security Architecture for End-to-End Communications, MITRE D3FEND. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Kerberos?
Explore our compliance framework pages to see how kerberos applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Kerberos applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.