(Igor Sikorsky Kyiv Polytechnic Institute, 2022) Galchynsky, Leonid; Murtazina, Amina
The RADIUS protocol was analyzed from the point of view of its functionality and security. The internal structure and the division into functions were shown. There were described the structure of the RADIUS network, the functions of the network access server or NAS, and the RADIUS server. The advantages of the centralized secure data processing technology based on the RADIUS protocol were shown. Mechanisms of secure processing of requests at the authentication and authorization stage were described. Sources and types of protocol vulnerabilities were studied and possible attack scenarios were identified. The relevance of creating models for evaluating the vulnerabilities of the RADIUS protocol was substantiated, and the methodology for building the model was chosen. An object-oriented model of the RADIUS protocol has been developed. A software application was developed and various attacks on the RADIUS protocol were tested. A number of potential vulnerabilities have been identified.