Analysis, Implementation and Extensions of RADIUS Protocol

RADIUS (Remote Authentication Dial In User Service) is an authentication, authorization and accounting protocol being widely used in network environments. However, it has a set of vulnerabilities that are either caused by the protocol, or caused by poor implementation and exacerbated by the protocol. First the overview of RADIUS protocol including basic operation of RADIUS protocol is studied. Then analysis part of RADIUS focuses on security issues, transport issues and implementation issues. In addition, how to minimize or resolve various issues of the RADIUS protocol using deployment best practices and extensions are discussed.