Implementation and Comparison of OTP Techniques (TOTP, HOTP, CROTP) to Prevent Replay Attack in RADIUS Protocol

Abstract

RADIUS is one of the most popular protocols used in network communication for user authentication. Unfortunately, there are many vulnerabilities facing the security issue in RADIUS network protocol. One of these vulnerabilities is a replay attack problem which is need to be prevented. The previous protocols have presented number of techniques to reduce the effects of replay attack in RADIUS protocol. One time password (OTP) technique is one of the most important techniques which are used to enhance the security of user authentication in numerous environments and to close the potential gap in network security. With several OTP techniques, three OTP techniques (TOTP), (HOTP),(CROTP) are chosen in this paper. This paper highlights some of the current security approaches related to RADIUS protocol and OTP techniques. The main focus of this paper is the implementation of the three OTP techniques through providing our ELSBOT and the comparison of these techniques through presenting a set of factors such as preventing replay attack, CPU overhead, technique speed, server response time and OTP duration.