Empirical Investigation of Response Time of OTP Techniques in Radius Environment

Emmanuel Adewale Adedokun, Yusuf Abdullahi, M. B. Muazu

Abstract


The increase in the use of computers in processing, transmission and storage of data by organizations has increase the quest for protection of data from unauthorized access. This has made network security a necessity. To protect sensitive data over the network; many security solutions and protocols have been developed. RADIUS is one of the most popular protocols used in network communication for user authentication. Unfortunately, there are several vulnerabilities in RADIUS network protocol. Researchers have presented number of techniques to reduce the effects of these vulnerabilities. One-time password (OTP) technique is one of the most important techniques which are used to enhance the security of user authentication in numerous environments and to close the potential gap in network security. In this paper, the response time of three OTP techniques, namely Time OTP (TOTP), Hash OTP (HOTP) and Challenge Response OTP (CROTP) were considered, with respect to their operation in a RADIUS environment. TOTP presented the best result with an average response time of 2.5secs, as compared to others.


Full Text:

PDF

References


Hashmathur Rehman1 .Govardhan T. Venkat Narayana Rao, "Design and Implementation of RADIUS An Network Security Protocol", Global Journal of Computer Science and Technology, P a g e 48 Vol. 10 Issue 7 Ver. 1.0 September 2010.

Ji Cao," AAA Functionality for Handheld Systems", master thesis 2005.

Havard Raddum, Lars Hopland Nestas, and Kjell Jrgen Hole," Security Analysis of Mobile Phones Used as OTP Generators ", page 324-331, IFIP International Federation for Information Processing 2010.

Andrew Y. Lindell,"Time versus Event Based One-Time Passwords", the foundation of information security, white paper, 2002.

Bellare, Hoornaert, Naccache," HOTP: An HMAC-Based One-Time Password Algorithm" ,RFC4226, 2005

Bellare, Hoornaert, Naccache, "CROTP: OATH Challenge-Response Algorithm", RFC4226, ISSN: 2070-1721, 2011.

D. M’Raihi," TOTP: Time-Based One-Time Password Algorithm", Internet Engineering Task Force (IETF), 2011.

Sung-Jae Lee, Jae Seong Lee, Mun-Kyu Lee, Sang Jin Lee, Doo-Ho Choi, and Dong Kyue Kim ,"Low-Power Design of Hardware One-Time Password Generators for

Card-Type OTPs", ETRI Journal, Volume 33, Number 4, August 2011.

Trupti Hemant Gurav1, Manisha Dhage2,"remote client authentication using mobile phone ", International Journal of Scientific and Research Publications, Volume 2, Issue 5, May 2012, page 5549-5555, ISSN 2250-3153.

Xuguang Ren, Xin-Wen Wu，and Kun Tang, " TSPass: A Dynamic User Authentication Scheme Based On Time and Space", IJCSNS International Journal of Computer Science and Network Security, VOL.12 No.10, October 2012.

Balkis Hamdane y , Ahmed Serhrouchni y , Adrien Montfaucony , Sihem Guemara ," Using the HMAC-Based One-Time Password Algorithm for TLS Authentication", , page 1-8 2011 conference IEEE.

madhuri and ramana lakshmi "attack patterns for detecting and preventing ddos and replay attacks", international journal of engineering and technology vol. 2(9), page 4850-4859, 2010.

Chii-Ren Tsai, "Non-Repudiation In Practice", Citigroup Information Security Office 2003.

Rigney, C. S. (2007). Remote Authentication Dial in User Services (RADIUS). Internet Engineering Task Force (IETF).

Namrata, T. V. (2013). An Approach of Authentication in Public Cloud using Two Step Verification Code. International Journal of Emerging Research in Management &Technology, 2(5).

Mikko, S. (2004). Legacy User Authentication with IPSEC. Retrieved from http://www.tml.tkk.fi/Publications/Thesis/msaarinen.pdf

Hassel, J. (2003). Securing Public Access to Private

Resources RADIUS (First Edition ed.). (J. Sumser, Ed.) California CA: O’Reilly & Associates, Inc.

Jaakko, T. (2014). Overview, details and analysis of Radius protocol. Retrieved from Cisco how radius works, Authentication, Authorization and Accounting: http://www.cisco.com/image/gif/paws/12433/32.pdf

Gagan, D. N. (2013). replay attack prevention in Kerberos authentication protocol using triple password. International Journal of Computer Networks & Communications (IJCNC), 5(2).

Himika Parmar, Nancy Nainan and Sumaiya Thasee ," Generation Of Secure One-Time Password Based On Image Authentication, Computer Science & Information

Technology (CS & IT), 2012, pp. 195–206,

Binod, V. (2013). HOTP-Based User Authentication Scheme in Home Networks. IJCSNS International Journal of Computer Science and Network Security, 1-10.

Amna. (2014). Implementing and Comprising of OTP Techniques (TOTP, HOTP, CROTP) to Prevent Replay Attack in RADIUS Protocol using ELSBOT. Retrieved from http://library.iugaza.edu.ps/thesis/113489.pdf

Alan, H.,. (2013). A Methodology for Analyzing the Performance of Authentication Protocols. IEEE, 5(10).

Kun Tang. (2014). A Dynamic User authentication based on time and space. IJCSNS International Journal of computer science and network security, volume 15(13).


Refbacks

  • There are currently no refbacks.