Skip to main content.
Arizona State University College of Liberal Arts and Sciences
Department of Mathematics and Statistics
Navigation:

Home

Search





How to SSH from Windows PC to Unix / Linux Workstation

What is ssh?

Ssh (Secure Shell) is a program to log into another computer over a network, to execute commands in a remote machine, and to move files from one machine to another. It provides strong authentication and secure communications over unsecure channels. It is intended as a replacement for rlogin, rsh, and rcp, but also replaces telnet.

Additionally, ssh provides secure X connections and secure forwarding of arbitrary TCP connections.

 
Why should I use it?

The traditional BSD 'r' - commmands (rsh, rlogin, rcp) are vulnerable to different kinds of attacks. Somebody who has root access to machines on the network, or physical access to the wire, can gain unauthorized access to systems in a variety of ways. It is also possible for such a person to log all the traffic to and from your system, including passwords (which ssh never sends in clear text).

The X Window System also has a number of severe vulnerabilities. With ssh, you can create secure remote X sessions which are transparent to the user. As a side effect, using remote X clients with ssh is more convenient for users.

Users can continue to use old .rhosts and /etc/hosts.equiv files; changing over to ssh is mostly transparent for them. If a remote site does not support ssh, a fallback mechanism to rsh is included.

 
What kinds of attacks does ssh protect against?

Ssh protects against:

  • IP spoofing, where a remote host sends out packets which pretend to come from another, trusted host. Ssh even protects against a spoofer on the local network, who can pretend he is your router to the outside.
  • IP source routing, where a host can pretend that an IP packet comes from another, trusted host.
  • DNS spoofing, where an attacker forges name server records.
  • Interception of cleartext passwords and other data by intermediate hosts.
  • Manipulation of data by people in control of intermediate hosts
  • Attacks based on listening to X authentication data and spoofed connection to the X11 server.

In other words, ssh never trusts the net; somebody hostile who has taken over the network can only force ssh to disconnect, but cannot decrypted or play back the traffic, or hijack the connection.

 
Where do I get ssh?

This software is only available for members of ASU. You can download from the ASU website at http://www.asu.edu/it/security/software/html/ssh/download.htm.

 
What next? How to install?
After getting the software just click on the SSHWinxxx.exe file as shown below.
 
 
 

After accepting the software agreement you will be asked the directory to where the software will be installed. For convienence put it in the default directory and click next.

Once again, for ASU members ONLY!

 
 
Select all the components. It will take only 6.2MB of your hard disk space. After clicking next it will install into your hard disk.
 
 
After completing the installation click on the SSH folder, you will see the following window. Now you only have to press enter or go to file and click connect.
 
 
Please enter hostname you want to connect to and your userid for this hostname. Then it ask for the password.
 
 
Now enter the password.
 
 

After opening the SSH Secure File Transfer window you can :-

  • Open the terminal window( SSH Secure Shell), by just clicking (windows, new terminal) without typing username and password again.
  • You can even open the windows explorer of your hard disk from which you can even transfer the data into the ssh window similar to ftp. You can do it by copying and pasting or simply by dragging and dropping.

Please click here to see some examples pictures which explains everything.