Remote Authentication Dial In User Service Research Articles

Implementation of a RADIUS server for access control through authentication in wireless networks

In this study, a remote authentication dial in user service (RADIUS) server was implemented, which offers a wireless security method based on registering users authorized to use the network. For this, a computer with 4GB of RAM and a fourth-generation i3 processor was used, mounted on the Ubuntu Server 18.04 operating system and using the free RADIUS open-source software. This server was connected to the network through the TL-WR940N router using the AES encryption method and the WPA2 – Enterprise wireless security protocol, which allows a RADIUS server to authenticate wireless users. Evaluating this method with three registered users, two of them administrators, and one guest, and a total of 8 wireless devices, the experimental results showed that, for the five failed attempts to enter the network, the RADIUS server was able to identify them with an accuracy of 100% in real-time. In addition, the two administrators' correct identification and subsequent access were achieved; one used the same credential to have another device connected to the network, so an identified user can connect to more than one device without creating other credentials. Finally, this security method was compared to WPA2 Personal for 4 hours, where it was verified that the RADIUS server maintains a maximum of 3 devices connected, while the second method allowed the entry of any device, whether or not it was foreign to the network, showing that the RADIUS server is a robust method with great potential to protect wireless networks.

Implementation of Authentication Systems on Hotspot Network Users to Improve Computer Network Security

Because of the growing number of apps that use client servers, both desktop and WEB applications, each user must learn a large number of user ids and passwords, because each application requires authentication in order to use it for security reasons. Furthermore, the development of network media, both wired and wireless, is accelerating. In the scenarios stated above, RADIUS (Remote Authentication Dial-In User Service) technology is required since the RADIUS approach allows a user to utilize a single user id to access several applications, both desktop and web-based. The RADIUS protocol may be used with both wired and wireless media.

Simple solution for low cost bandwidth management

Organizations in this era can't be separated from information technology, especially in communication and information sharing. The existence of information technology, especially computer networks, greatly facilitates agencies in terms of communication. Organizations that have used computer networks generally don’t have tools to handle security and bandwidth management issues in large numbers, resulting in wasteful use of bandwidth for unproductive purposes, such as accessing video streaming. The fact is professional tools to overcome the problem of security and bandwidth management issues are already in the market, but have hundreds of millions of priced. The high price of professional devices gave an opportunity to develop a bandwidth management system based on the integration of the remote authentication dial in user service (RADIUS) server and Mikrotik RouterBoard, at a lower cost. RADIUS server was chosen as a service for network security, because it supports the legal authentication for users via AAA protocol. The RADIUS server can be integrated with MySQL database, it can be developed SSO systems. Bandwidth management can be done with Mikrotik feature, but has the disadvantages of scalable storage, that problem can overcome by integrating Mikrotik and RADIUS server, then defining time doing data packet quota for the client and its implementation can help with hypertext preprocessor (PHP) scripts.

Sistem Keamanan Pada Jaringan Wireless Menggunakan Protokol RADIUS

Wireless networks require a security system to protect servers from attacks such as Port Scanning and Denial of Service. This research aims to design a wireless network security system using Remote Authentication Dial-In User Service or RADIUS protocol. The research stages include analysis of system requirements, preparation of completeness of system requirements, installation and configuration of the network and RADIUS protocol, detection and prevention testing of attacks, and analysis of test results. The design system used is to implement a single authentication, authorization, and accounting protocol that supports the internal and external networks of the Bahana Taruko Santosa Company. The results of implementing the RADIUS protocol on a wireless network server service can perform a DoS attack filter properly and block unauthorized users from accessing Internet services. Data analysis results show DoS attacks with the type of ICMP Flooding attack and UDP Flooding attack can be blocked with a percentage of 98%. In addition, there is a reduction in unauthenticated user access rights with the result of reducing the amount of bandwidth usage.

Multi-Domain Network Monitoring System for End-to-End Connectivity

With the growing scale size of networks and the complexities that follow, there is an increasing need for an end-to-end network management system for efficient monitoring of the system and having the best-in-class security, performance, and management features. This paper proposes an integrated network monitoring system that provides a single-window operation for end-to-end network management. The system is operated as a web application for stand-alone functioning. This eliminates most the dependencies, chances of failure and additional requirements that may lead to increased cost and decreased performance. The proposed system uses JavaScript for frontend and DHTMLx3.0 for the User Interface. Backend works on Java, Ajax, Hibernate, Apache Tomcat (webserver), Apache ActiveMQ (message queue), MTOSI (Multi-Technology Operations System Interface), CORBA TMF 814 and WebSwing. The different network technologies used and supported by the system for functioning are RADIUS (Remote Authentication Dial-In User Service), MPLS-TP, SDH, SONET, ONT, and GPON.

An Improved Mechanism for SDN Flow Space to Control Oriented Authentication NAA Network

The Open Daylight platform with its power by working with IEEE 802.1X port level authentication for wired and wireless networks has been very supportive because of the massive deployments at mean charge for main design considerations. Within the current marketplace, 802.1X has flourished the ground works for wireless, wire stability, LAN stability and authentication methods. EAP (Extensible Authentication Protocol) supports long time protection of the supplicant and the authentication software till the end condition of the RADIUS (Remote Authentication Dial-In User Service) server is met. This paper is focused on the RAR (RADIUS Access Request) unique identification about the users on the network with SAA (Supplicant, Authenticator and Authentication server) system which records on the attribute cost of RFC 2865 according to the forwarding server. NAA (Non-Adaptive Algorithm) using FlowVisor based virtualization packages drive inward the network timescales or statistics, dynamically controlling the flow space of switches to control the speed and results in scaling of networks. NAA is an application level protocol that contains authentication and configuration information between a Network Access Server and a shared authentication server. It avoids the attacker from listening for requests and responses from the server and calculates the improved MD5 client secret key of the response.

Network failure detection based on correlation data analysis

For a telecommunication operator, the effective detection of access and aggregation network failures is the key to providing continuous service. Although there are many monitoring systems on the market, analysis has shown that there is no possibility of automatically detecting all failures using standard monitoring systems. In this article, an innovative option for failure detection is proposed, based on correlation analysis of data retrieved in real time from the network. A key source of data is the Remote Authentication Dial-in User Service (RADIUS) which records events giving information about a user’s Point-to-Point Protocol (PPP) session state sent to the monitoring system. It is shown here that the proposed solution enables an operator to detect all network events affecting customers. The detection of a greater number of events enables the operator to react quickly to them and to restore services to users as soon as possible, which ultimately improves the quality and continuity of provided services.

Attacks Due to Flaw of Protocols Used In Network Access Control (NAC), Their Solutions and Issues: A Survey

In order to ensure and enforce endpoint security, Network Access Control (NAC) is attracting considerable interest from the research community. Most NAC architectures are based on 802.1x, EAP (Extensible Authentication Protocol), EAPoL (EAP over LAN) 802.11i, 802.11w, and RADIUS (Remote Authentication Dial-In User Service) protocols. Unprotected management and control frames in some of above protocols lead to several attacks. Eliminating flaws completely in design of each protocol is a challenge. These flaws help malicious user and infected endpoint to intrude into the NAC architecture to make damage into it. Many researches have been carried out to address this issue. In this paper, we have made an attempt to explain attacks in above protocols and present a survey and analysis of different solution approaches proposed by researchers. The affect of vulnerability and attack of above protocols in NAC is also discussed. The finding of this review will provide useful insights into the vulnerabilities, attacks in above protocols, and their proposed solutions with issues, which may create a research scope for strengthening security in NAC.

Penggunaan Single Sign On (SSO) pada Jaringan Internet Badan Pengkajian dan Penerapan Teknologi (BPPT)

Using various applications needs more than one authentication or user and password to login. Users in BPPT found this problem on their network application. Implementation of Single Sign On can help users to use only one authentication for many applications. Therefore a research is conducted to design and implement Single Sign On system that simplify and facilitate the user's email account to access application. Data are collected from literature study, system observation, and interviews while the design uses Network Development Life Cycle (NDLC) method. The research results in a Single Sign On system that utilizez Lightweight Directory Access Protocol (LDAP). In addition, Remote Authentication Dial-In User Service (RADIUS) is managed in accordance with the needs of the institution. Single Sign On system designed runs well and is able to provide conveniences for the user to use the services of existing applications, as it provides a standard email address to the user's identity. It also helps administrators to perform control of users trying to login.

A novel group authentication for RuBee sensors in wireless sensor networks

4G, the new generation mobile communication, will be formed among heterogeneous wireless networks, which include Wi-Fi, WPAN, etc. At the beginning of 2007, IEEE developed the new short-distance transmitting standard, IEEE1902.1, also known as RuBee. Therefore, the purpose of this paper is to investigate how RuBee sensors transmit data through the sensor networks provided by worldwide interoperability for microwave access (WiMAX). Nevertheless, some problems still need to be solved: for instance, how to integrate AAA procedure; the lack of problem of IPv4 IP number and the classification of every RuBee sensor. To solve these problems, we propose gateway access point (GAP) to deal with signal transmission and transformation of both ends. GAP can substitute RuBee for group authentication from remote authentication dial in user service (RADIUS) of WiMAX, and classify and manage each RuBee sensor. Our proposed scheme can easily attain security, group anthentication and improvement in handoff.

Characterizing MEGACO Security in the presence Diameter Server

This paper analyzes performance of MEGACO (Media Gateway Control Protocol) based on Diameter which is an Authentication, Authorization,andAccounting (AAA) protocol developed within the Internet Engineering Task Force(IETF).Diameter is loosely based on Remote Authentication Dial In User Service (RADIUS), which has previously been used to provide AAA services for dial-up and terminal server access environments. An analytical model is provided for the performance of a MEGACO network while there is a Diameter server to guarantee Authentication in call flow. Ultimately, the M/M/c and M/D/c traffic models are provided to evaluate QoS (Quality of Service) in the call flow and some of the key performance benchmarks response time to process the MEGACO calls and mean number of jobs in the system when there is security mechanism is studied.