Response Time Improvement on One Time Password (OTP) Technique to Prevent Replay Attack in a Radius Environment
Journal Title: Current Journal of Applied Science and Technology - Year 2017, Vol 19, Issue 1
Abstract
This research is aimed at the modification of the Remote Access Dial in User Server (RADIUS) protocol with the one-time password (OTP) technique for the authentication environment with a captive portal to prevent replay attacks. One of the important network security measures on a campus network is the use of authentication for identification of legitimate users and one of the most widely used solution in network authentication is the RADIUS protocol. However, there are potential security vulnerabilities in the RADIUS network especially for networks using captive portal, such as the replay attack. The Ahmadu Bello University (ABU) network is simulated using the GNS3 software on a virtualized environment using Virtualbox, which comprises of the core, distribution and access levels of the network and network devices (routers and switches). An OTP generator was developed using PhP programming language for the three variants of the OTP: Time One Time Password (TOTP), Challenge Response One Time Password (CROTP) and Hash One Time Password (HOTP). Before improvement on the OTP technique using a PhP developed script, the result obtained shows the average response time for TOTP, CROTP and HOTP as 2.5s, 5.2s and 5.7s respectively, this result showed no improvement in the TOTP, CROPT and HOTP response time respectively when compared with the recommended response time of a RADIUS server in a captive portal environment which is 1000 ms [1]. After improving the OTP technique by integrating all the variants of OTP with the RADIUS server on a single server using the simulated ABU campus network using GNS3, the result shows a significant improvement over the above results. The results obtained shows the average response time for TOTP, CROTP and HOTP as 1.3s, 2s and 1.9s. The validation, based on the developed and simulated configuration was carried out using live servers, routers and switches and the results showed improvement over the above results the average response time for TOTP, CROTP and HOTP were obtained as 0.4s, 0.9s and 0.9s respectively. This shows significant improvement in the TOTP, CROPT and HOTP respectively. The result shows the average response time is less than the recommended 1000ms for RADIUS server response time in a captive portal environment.
Authors and Affiliations
Yusuf Abdullahi, Muhammad Bashir Muazu, Adewale Emmanuel Adedokun
Keywords
Related Articles
- EP ID EP318375
- DOI 10.9734/BJAST/2017/29503
- Views 121
- Downloads 0
Geometry and Topology-based Segmentation of 2-Manifold Triangular Meshes in R3
This manuscript reports a geometrical and a topological methods to segment a closed triangular 2-manifold mesh M R3. The mesh M does not self-intersect) and has no border (i.e. watertight. Geometrical and topological s...
Analysis of Reconfigurable Polarization Antenna as an EMI Sensor
Electromagnetic Interference (EMI) is of great concern in the present time of modern electronic systems. EMI measurement requires using a sensor to receive the radiation from the equipment in a suitable test environment....
Comparison of Potential Evapotranspiration Models and Establishment of Potential Evapotranspiration Curves for Temperate Kashmir Valley
Potential evapotranspiration (PET) is a crucial indicator of hydrologic regime of a region. It is an important variable in the estimation of actual evapotranspiration (AET) in hydrological and ecosystem modeling. Evapotr...
Age Differences in Body Image Perceptions of Tribal Adolescents
The present study on age differences in body image perceptions of tribal adolescents was conducted at Tribal welfare schools and colleges in and around Adilabad district. Expost- facto type design was adapted for the stu...
Novel Classification for Tracking Techniques Maximum Power Point in Solar Photovoltaic Systems
This paper gives an overview and classification of methods maximum power point tracking (MPPT) controller is fundamental to acquire the maximum power from a solar array in the photovoltaic systems as the PV power module...